
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
File: w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json)
Hash identifier: ThGYlZaTCJU1JSmhtYTMFLla1xkrypGIpTb4+503SFc=
Subject key identifier: 4E:7B:4E:79:CB:C1:42:F8:08:CC:1D:85:08:13:06:47:F2:79:D7:16
Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73
Certificate issuer: /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
Certificate serial: 1A5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
Manifest number: 1A4E
Signing time: Thu 12 Mar 2026 16:13:57 +0000
Manifest this update: Thu 12 Mar 2026 16:13:56 +0000
Manifest next update: Thu 19 Mar 2026 16:13:56 +0000
Files and hashes: 1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: xdRqZHSnZPihUmfdcBQH21IIoynO93pVrcGlB/m4bhI=)
2: 885DA760AA8811E799348329C4F9AE02.roa (hash: OgMqHQ2yVMx+7d3BSt5zC2aY7l1q21WR4K+bA1B1tR4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl
rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 16:13:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6746 (0x1a5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189265, serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
Validity
Not Before: Mar 12 16:13:56 2026 GMT
Not After : Mar 19 16:13:56 2026 GMT
Subject: CN=69b2e645-40f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:02:28:be:0a:44:db:f1:c6:25:76:28:d9:
a3:41:e1:4f:a7:ed:df:ab:53:04:6c:ac:6b:72:40:
10:bb:02:47:45:de:50:64:c7:42:aa:60:4b:03:a5:
65:c9:4c:c1:f7:95:be:28:4d:ab:d5:b0:f9:0a:5a:
54:ce:1c:ac:cf:3a:c5:cf:bf:d7:67:32:e0:ff:db:
c7:54:fb:32:a9:fa:c8:37:66:18:1f:68:dc:fc:42:
de:d5:e0:36:bc:6b:06:5b:97:00:f9:b6:87:51:e9:
56:18:ca:73:51:bd:de:e6:c3:1b:65:a4:95:03:bc:
ce:5b:e7:3f:fd:ea:99:82:79:7c:e2:b1:6d:6c:d9:
ee:d4:18:08:86:21:59:94:6b:1a:82:e7:38:03:d2:
2f:c7:27:6a:71:99:6a:6b:78:d4:98:90:08:84:bd:
55:55:47:ae:da:09:85:34:cf:3b:8a:f3:34:0f:84:
5b:d5:7a:88:fd:88:04:4f:cf:a5:4a:bf:4b:8f:5a:
82:e7:12:c8:af:06:4a:40:2c:7c:27:35:bd:78:f0:
b9:1e:72:14:d9:24:d3:9c:9c:00:86:d4:b1:31:c7:
09:4a:6a:c2:3f:3d:f0:52:c4:be:b9:07:a2:19:32:
70:4c:db:dd:81:dc:e7:3a:0f:14:33:4f:1c:55:13:
9a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7B:4E:79:CB:C1:42:F8:08:CC:1D:85:08:13:06:47:F2:79:D7:16
X509v3 Authority Key Identifier:
keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:99:9d:91:d2:c0:b2:f2:01:13:1a:f7:89:2c:71:f2:e3:8e:
76:41:77:35:1c:c0:2b:33:19:28:83:30:f7:fe:7d:ba:b7:aa:
21:80:b7:60:de:9b:a3:a2:c7:6d:be:b2:90:df:8d:a8:85:2f:
48:cf:6d:6f:f7:21:2f:1e:3f:d4:a6:90:6e:49:11:0d:28:7b:
19:d8:10:78:35:1a:2e:23:96:61:0b:1c:c2:76:26:64:d0:c7:
39:e2:83:f3:76:38:ee:25:4a:7d:87:e6:74:2d:21:17:a1:ae:
58:90:af:b4:f2:e1:5e:df:bb:2d:45:b4:77:7f:6b:fc:0e:63:
0d:d7:9f:db:0f:2a:1d:9b:de:83:bb:dd:2a:3f:11:b3:64:37:
82:fd:12:93:43:b9:74:a3:09:c0:42:43:a8:c7:2a:e5:50:c7:
7c:e8:08:cf:c2:98:0b:83:99:24:01:20:8b:e2:4b:34:13:bf:
14:33:d3:b7:3a:da:0d:67:8e:92:34:6e:97:14:db:7b:fc:4b:
86:ab:75:72:24:7c:e0:cd:f7:70:d5:a2:6f:0b:21:de:9b:cc:
44:a5:f8:ac:fe:f2:be:40:d2:20:73:45:d6:e1:31:79:ea:78:
50:b0:f6:57:e1:16:92:84:29:75:7f:22:c1:6c:a3:c1:56:59:
9c:8f:f8:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODkyNjUxMTAvBgNVBAUTKEMzQkFEOEYwQTVEQTA1OEU5RjkyNTAzN0QwNEFBNzFD
OTI4QkExNzMwHhcNMjYwMzEyMTYxMzU2WhcNMjYwMzE5MTYxMzU2WjAYMRYwFAYD
VQQDEw02OWIyZTY0NS00MGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAugUCKL4KRNvxxiV2KNmjQeFPp+3fq1MEbKxrckAQuwJHRd5QZMdCqmBLA6Vl
yUzB95W+KE2r1bD5ClpUzhyszzrFz7/XZzLg/9vHVPsyqfrIN2YYH2jc/ELe1eA2
vGsGW5cA+baHUelWGMpzUb3e5sMbZaSVA7zOW+c//eqZgnl84rFtbNnu1BgIhiFZ
lGsaguc4A9IvxydqcZlqa3jUmJAIhL1VVUeu2gmFNM87ivM0D4Rb1XqI/YgET8+l
Sr9Lj1qC5xLIrwZKQCx8JzW9ePC5HnIU2STTnJwAhtSxMccJSmrCPz3wUsS+uQei
GTJwTNvdgdznOg8UM08cVROaLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE57TnnL
wUL4CMwdhQgTBkfyedcWMB8GA1UdIwQYMBaAFMO62PCl2gWOn5JQN9BKpxySi6Fz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2NS9EOEI0QjYxRTYw
MjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZNmZrbEEzMEVxbkhKS0xv
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3c3clk4S1hhQlk2ZmtsQTMwRXFuSEpLTG9YTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTI2NS9EOEI0QjYxRTYwMjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZ
NmZrbEEzMEVxbkhKS0xvWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA05mdkdLAsvIBExr3iSxx8uOOdkF3NRzAKzMZKIMw9/59ureqIYC3YN6bo6LH
bb6ykN+NqIUvSM9tb/chLx4/1KaQbkkRDSh7GdgQeDUaLiOWYQscwnYmZNDHOeKD
83Y47iVKfYfmdC0hF6GuWJCvtPLhXt+7LUW0d39r/A5jDdef2w8qHZveg7vdKj8R
s2Q3gv0Sk0O5dKMJwEJDqMcq5VDHfOgIz8KYC4OZJAEgi+JLNBO/FDPTtzraDWeO
kjRulxTbe/xLhqt1ciR84M33cNWibwsh3pvMRKX4rP7yvkDSIHNF1uExeep4ULD2
V+EWkoQpdX8iwWyjwVZZnI/4rA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:58:37 2026 by rpki-client