
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
File: w9iTsikbOh4b9fTwQdEFLizLslo.mft (raw, json)
Hash identifier: 6T9tWwWE2CBtJYpqZJVQ5aPRPu1wglqUEGuqV6oeGBs=
Subject key identifier: 2E:41:3D:D6:21:1F:DC:47:BB:5A:FC:D0:F2:BA:69:F3:E7:79:0D:8C
Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
Certificate issuer: /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Certificate serial: 024A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
Manifest number: 022C
Signing time: Wed 23 Sep 2026 03:01:12 +0000
Manifest this update: Wed 23 Sep 2026 03:01:11 +0000
Manifest next update: Wed 30 Sep 2026 03:01:11 +0000
Files and hashes: 1: w9iTsikbOh4b9fTwQdEFLizLslo.crl (hash: SNM5FdGoDKw5yqp91gR+Z8RSL6DO8CtS1/qoabhfJVY=)
2: ACFC76964A0E11EF91642A7AC4F9AE02.roa (hash: t0ohuFfdaakmzrww/Q0JMVR9B+akqFaPf0gzMitcQI0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl
rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ADC4, serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Validity
Not Before: Sep 23 03:01:11 2026 GMT
Not After : Sep 30 03:01:11 2026 GMT
Subject: CN=6ab340f8-22e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:48:32:a6:76:4c:9b:02:d1:16:e0:86:cd:
20:75:ad:95:c1:f0:f1:52:61:a6:04:86:87:c7:14:
35:a3:67:42:6a:d5:ac:8e:32:6a:73:27:4f:65:02:
d0:72:41:44:f7:2c:d4:75:5f:3a:8b:e3:11:41:1e:
0c:bc:70:32:d0:4f:32:ce:7a:72:66:f6:17:5f:90:
79:c1:b1:46:58:b2:f7:77:6f:11:3b:af:b1:13:b7:
21:e0:dd:0a:78:e1:13:0e:57:f2:90:9e:b0:20:e3:
35:29:d6:cc:7e:32:ad:78:f3:c2:fb:e2:c0:d3:18:
92:28:9d:16:e9:9d:ee:e3:64:94:09:66:60:21:aa:
56:7b:18:a0:0d:bf:57:92:66:21:79:a1:98:13:fa:
50:1a:c5:d0:81:69:8b:d2:77:1d:a8:50:43:79:e7:
a5:4c:42:3a:99:cb:fd:23:97:5c:38:38:1c:8d:4d:
fa:f0:11:a9:ac:7c:b9:fc:96:9c:e5:7d:77:4e:9a:
3e:c1:37:da:17:28:4c:44:c4:02:30:cc:2c:8d:bd:
3b:a1:20:9d:d7:f9:6f:ac:78:55:91:19:7b:26:aa:
99:3e:ff:d3:bc:47:64:a5:ea:c9:4d:a2:f6:a9:ae:
d2:cb:42:1c:2d:5e:4d:c4:fe:ef:31:26:c3:71:6b:
1a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:41:3D:D6:21:1F:DC:47:BB:5A:FC:D0:F2:BA:69:F3:E7:79:0D:8C
X509v3 Authority Key Identifier:
keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:63:0d:ad:c6:7c:21:a9:75:58:1e:d2:0d:2e:dc:6d:47:1c:
f4:d3:81:df:c5:79:2f:be:76:40:27:6f:08:c8:fe:45:a2:ea:
e4:e2:e6:47:ac:26:f1:42:3a:7b:00:52:7f:5e:78:c0:7e:48:
97:4c:e5:6c:0d:f9:82:e0:10:dc:04:84:1b:57:7f:73:b3:28:
3e:ef:58:0c:08:58:18:62:ce:53:08:08:f4:ca:10:84:5b:97:
d9:96:01:ab:d1:37:42:4a:80:69:97:05:44:6b:4a:4b:77:9d:
dd:f0:72:c9:ef:42:49:6d:a5:99:17:54:8a:4d:93:3a:da:ac:
ed:9a:df:fb:3b:86:3e:e0:b7:dc:61:02:3d:73:46:4a:d3:16:
cd:c6:6a:fb:16:4e:75:8f:4b:ec:a4:94:d3:d6:55:8f:19:6a:
3b:c3:9e:22:73:66:5c:74:b3:28:24:56:52:5e:4a:e0:ac:75:
05:21:b4:57:36:e3:fa:97:7d:9c:47:c8:34:41:ea:f3:cd:9c:
46:ee:80:51:89:5b:8c:8d:5c:d1:ce:e9:d2:85:e2:0f:7f:e5:
20:f1:06:a6:a6:f1:79:e6:a2:ea:96:f3:e6:d5:4b:c8:fb:91:
06:c4:8c:27:73:66:7c:6b:87:ab:7b:0d:a4:fb:13:72:79:98:
6c:8a:9b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:11:57 2026 by rpki-client