
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.mft
File: w5XQGgjBWiERA86BBh4mgk9Wvdg.mft (raw, json)
Hash identifier: V+Cts45Se/UDMyk0bQRfeFotxStejGq3h/Ut9pyPLac=
Subject key identifier: D1:D3:2E:3B:EC:4A:4D:60:BC:AA:FF:37:FD:61:C6:58:E3:40:35:76
Authority key identifier: C3:95:D0:1A:08:C1:5A:21:11:03:CE:81:06:1E:26:82:4F:56:BD:D8
Certificate issuer: /CN=A918D1BD/serialNumber=C395D01A08C15A211103CE81061E26824F56BDD8
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5XQGgjBWiERA86BBh4mgk9Wvdg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.mft
Manifest number: 4F
Signing time: Tue 03 Mar 2026 07:55:04 +0000
Manifest this update: Tue 03 Mar 2026 07:55:04 +0000
Manifest next update: Tue 10 Mar 2026 07:55:04 +0000
Files and hashes: 1: w5XQGgjBWiERA86BBh4mgk9Wvdg.crl (hash: gu69vEQ8XDU2LLMW88OrwxkWfmqwWnv58WQtL0BZxHU=)
2: C53A8AF010AE11F1B1789E883B3D8C67.roa (hash: BVZb748ht5IQsD5gjUkjZUEu7rDelrcy6NU5wkQOYRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.crl
rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5XQGgjBWiERA86BBh4mgk9Wvdg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D1BD, serialNumber=C395D01A08C15A211103CE81061E26824F56BDD8
Validity
Not Before: Mar 3 07:55:04 2026 GMT
Not After : Mar 10 07:55:04 2026 GMT
Subject: CN=69a693d8-7c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:41:c4:13:81:d8:ad:37:62:75:7f:5b:6b:
10:4a:86:dd:03:e6:7b:95:a3:34:f2:51:0e:9a:a8:
de:a9:86:43:46:9e:39:31:11:49:79:26:8e:fb:37:
38:fa:9e:bd:1d:96:ff:1f:8e:8c:a2:42:98:45:63:
df:5a:76:e9:a0:77:e5:da:20:be:9b:e2:5e:04:1b:
61:9f:94:64:c2:c1:ff:70:62:30:dc:48:2b:44:fb:
d6:b3:7c:48:23:8e:08:00:4e:2d:35:81:95:03:ec:
5f:3b:4a:e2:16:55:9d:ac:6f:a7:f2:ad:34:24:1a:
c9:d7:85:7c:72:d2:73:5e:1d:18:f0:71:2f:d2:60:
0c:30:df:e1:4b:a7:92:c1:11:fc:31:69:0e:0c:f5:
d9:ad:63:6a:b8:26:25:41:02:5f:ff:72:52:14:0c:
21:bd:e2:0a:72:09:23:9d:4f:22:c4:87:56:b0:af:
7b:8f:c9:c7:fa:75:9c:49:9a:cc:ef:fb:1c:6f:e3:
fc:b5:b9:7c:9d:4e:55:e7:95:83:f8:76:f9:98:8e:
79:15:5d:b4:2d:58:43:e7:2e:35:61:33:eb:d6:e8:
f8:0c:b0:6a:db:a3:dd:a5:7d:01:9e:5e:68:5b:f5:
73:04:4e:2f:fb:15:d6:31:a9:8a:94:7a:21:3f:f1:
13:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D3:2E:3B:EC:4A:4D:60:BC:AA:FF:37:FD:61:C6:58:E3:40:35:76
X509v3 Authority Key Identifier:
keyid:C3:95:D0:1A:08:C1:5A:21:11:03:CE:81:06:1E:26:82:4F:56:BD:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5XQGgjBWiERA86BBh4mgk9Wvdg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:41:17:84:78:b1:9e:16:6e:22:cb:61:12:3d:07:4a:00:22:
e7:ad:36:30:af:eb:20:7e:55:f4:e4:a3:d9:bd:ae:99:03:46:
79:72:ec:ff:c3:9d:7d:83:dd:6f:eb:7d:f5:0a:7b:60:cb:8a:
ee:1f:ee:4c:4d:94:87:f8:e6:51:cf:47:47:22:17:ba:f0:e6:
5a:0a:0b:cd:3d:d5:1a:8b:d3:2e:9d:b4:0d:27:d6:b0:76:7b:
79:63:f6:7b:6c:b5:24:ec:c2:03:3f:af:3d:07:11:c6:2e:64:
44:8d:ad:71:db:68:a4:a5:fe:65:f8:ca:03:f7:0c:eb:fc:16:
d9:21:79:22:f6:f8:4d:1c:71:7b:f1:4d:d7:64:ba:69:55:ba:
52:86:fd:9e:8e:f8:cd:1a:48:58:e6:45:ea:56:d7:d4:23:e4:
9f:6a:14:06:0a:e1:e5:6a:17:b8:25:58:59:a3:d6:a0:66:75:
40:eb:b4:54:49:2c:f8:30:b2:e5:11:ca:47:8a:bb:47:3d:96:
f9:3f:9b:0e:85:3b:85:a4:d3:f0:95:3b:3a:60:dd:81:41:aa:
83:ba:d8:0b:2f:89:60:1f:b5:60:24:81:9f:f8:26:59:fb:d8:
14:a9:98:60:a5:41:2a:33:52:f3:33:1a:d1:66:ac:e8:ea:17:
e3:2c:0a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:41:21 2026 by rpki-client