
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
File: wS8PVy2jONITRB7wfKUR0anIm20.mft (raw, json)
Hash identifier: Igcn5tML5O1867xwhiNFwkXDwlvARL5sBJpoVFwyOkM=
Subject key identifier: 93:94:B1:7D:61:93:FA:F9:17:A0:F2:1F:AB:56:EE:72:83:70:A6:1C
Authority key identifier: C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
Certificate issuer: /CN=A916CA70/serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
Certificate serial: 0867
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
Manifest number: 085E
Signing time: Wed 20 May 2026 20:49:20 +0000
Manifest this update: Wed 20 May 2026 20:49:19 +0000
Manifest next update: Wed 27 May 2026 20:49:19 +0000
Files and hashes: 1: wS8PVy2jONITRB7wfKUR0anIm20.crl (hash: Em9IDuTBcY56UI6xEuvwIRo6eWLHZUkUTqNtgl6/y5k=)
2: 1E4394CC03AC11EBBA025F2BC4F9AE02.roa (hash: BMSY5fq6KZKrb45yJ074fWZzYymnjf99nujloWmOdaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl
rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2151 (0x867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CA70, serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
Validity
Not Before: May 20 20:49:19 2026 GMT
Not After : May 27 20:49:19 2026 GMT
Subject: CN=6a0e1e50-390d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:31:da:7b:27:00:9c:83:42:fa:94:ba:59:
8b:8c:82:3a:b1:00:07:77:3e:a7:f5:82:25:bc:72:
40:0b:cc:3a:ce:f6:70:f2:74:ce:62:30:2b:a9:d0:
bd:c7:a9:dc:78:41:f3:03:0a:16:ca:5d:de:03:a3:
83:7d:04:03:47:7c:57:97:6c:c7:b8:ba:9a:16:ef:
b1:59:45:5d:44:ae:0e:c2:b8:ce:21:4b:27:ad:62:
26:6e:b2:74:e4:db:6a:e5:f1:d4:59:7f:fd:e2:eb:
7a:d2:19:ee:4e:77:a9:af:77:c7:da:00:d5:ed:9b:
45:8f:02:9f:53:b2:0f:2b:7d:fb:25:8b:bd:84:88:
28:b0:d4:e8:1c:f6:54:1b:50:c2:e2:d1:63:30:b5:
f9:7f:b5:4b:7a:24:88:a1:a3:b7:31:df:b5:b4:4e:
a1:b2:5b:a6:96:f7:93:0f:12:8d:fb:09:65:8d:8d:
f1:15:42:3a:5b:3e:8a:bc:04:70:34:99:71:6a:c4:
99:e8:c9:5b:b3:2e:9f:1e:b1:16:b6:84:e6:f5:1b:
f2:05:75:72:b8:2a:f5:71:71:b2:8f:a4:bd:61:d4:
00:20:5c:69:0d:97:88:db:36:67:ae:be:f3:aa:e7:
bd:ce:d4:fc:49:a5:76:a6:86:30:0e:b3:57:37:cb:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:94:B1:7D:61:93:FA:F9:17:A0:F2:1F:AB:56:EE:72:83:70:A6:1C
X509v3 Authority Key Identifier:
keyid:C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:de:c7:91:bd:55:81:73:4e:19:75:95:5d:0c:d9:29:f6:6f:
6d:b0:9c:19:76:59:31:f9:12:12:94:e4:49:2d:cf:dc:a5:9b:
a1:f4:6f:57:3c:20:99:b2:80:9a:68:cb:a5:73:c2:f3:1b:2e:
9b:8b:9f:f5:47:19:35:0f:8c:e1:e9:4b:fd:31:83:37:d1:94:
cc:9b:19:b2:f9:5e:f7:85:85:52:a8:06:d1:46:6f:8e:70:74:
05:87:43:b7:4a:c0:0f:34:6d:66:66:98:15:b5:f6:9a:80:ab:
f8:83:38:f2:2b:4a:e9:74:38:da:c6:b1:11:d8:cc:16:4a:c3:
09:75:69:97:20:92:c3:4d:b5:83:ee:4d:87:ba:c6:c4:87:e1:
f0:c7:0d:29:a1:91:89:77:c6:e5:86:3c:94:fe:22:06:56:f0:
1a:36:bd:75:a3:9f:0f:d8:29:eb:ab:97:d9:10:8e:ff:3d:3c:
1c:f6:d2:bc:46:50:1b:34:14:6a:4f:18:d6:96:71:4c:60:42:
bc:ee:e3:d8:fc:98:f3:71:23:88:ec:bd:49:84:45:b8:81:3b:
b1:e2:55:d0:7e:b7:7a:75:9d:46:25:14:ea:03:ad:56:ce:30:
6d:e9:eb:c8:4a:fb:48:7b:f1:27:a5:52:48:43:31:99:cc:0e:
dd:45:ed:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:22 2026 by rpki-client