
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
File: wtbHmmd8l-xwBjE76RZ-DeZspFI.mft (raw, json)
Hash identifier: KGCkessEzsGo/B2es+cbefK9ijTMtQdJzNHhn6BIa88=
Subject key identifier: 4E:9A:33:1E:D2:A1:22:B3:A8:A4:F0:17:B7:A1:45:E4:3A:11:55:AA
Authority key identifier: C2:D6:C7:9A:67:7C:97:EC:70:06:31:3B:E9:16:7E:0D:E6:6C:A4:52
Certificate issuer: /CN=A9192F5B/serialNumber=C2D6C79A677C97EC7006313BE9167E0DE66CA452
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
Manifest number: 47
Signing time: Tue 03 Mar 2026 08:02:14 +0000
Manifest this update: Tue 03 Mar 2026 08:02:13 +0000
Manifest next update: Tue 10 Mar 2026 08:02:13 +0000
Files and hashes: 1: wtbHmmd8l-xwBjE76RZ-DeZspFI.crl (hash: PxnS+IabyrZZATnbJRE5eutbWvt8mpSJtlCjalWknWI=)
2: 283AD1AEF15C11F092AE22215F6F56BC.roa (hash: EmvBsn4ZPcIs9fQsHMR1tfmZVxwSR1B42iVHL8M7qog=)
3: 4619B082F15C11F0A6B34B2B5F6F56BC.roa (hash: BCkHo8MUaA30OfeXJIiJuxoGQhAqNP4XE2gAPor4DY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.crl
rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192F5B, serialNumber=C2D6C79A677C97EC7006313BE9167E0DE66CA452
Validity
Not Before: Mar 3 08:02:13 2026 GMT
Not After : Mar 10 08:02:13 2026 GMT
Subject: CN=69a69585-5fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:11:aa:9b:d5:c2:3e:43:cf:bf:16:d9:ae:
d5:ae:d4:0d:a2:ea:97:f9:96:c2:d9:15:f0:82:4c:
45:76:06:e6:fd:77:c8:96:0a:9d:dd:a3:a2:99:ae:
e1:18:68:c6:d4:df:77:d7:5a:49:ff:ce:9d:53:a1:
6a:cc:5c:6f:2f:2f:c4:6c:ae:0f:ff:83:19:c6:c5:
13:ca:a9:91:45:7b:71:7d:bf:0c:1a:45:ef:73:9c:
92:95:80:7b:10:d5:a3:cf:c6:93:63:f0:a3:4c:a5:
81:48:f8:d5:eb:80:50:6e:c2:76:83:1d:49:cd:5a:
ca:3a:ec:a6:18:4c:2a:14:a1:fe:b8:d3:56:20:3c:
a8:fa:48:d5:c8:bf:87:88:d6:25:a4:1b:19:19:d3:
59:ec:ba:bc:78:c3:e1:c3:f9:f8:02:41:0f:ed:1e:
ac:d8:e4:0d:83:cd:e9:df:a9:01:86:bf:5e:93:39:
15:18:59:f3:c2:51:89:22:39:1d:db:ee:89:90:12:
b3:4a:89:69:67:b4:2d:3e:57:f5:7a:d2:ad:7f:07:
31:43:3f:07:49:ff:2f:72:fb:0e:08:97:7c:c5:e3:
88:eb:3a:42:94:ff:d1:58:4a:41:1a:d8:02:1c:7e:
15:c8:33:93:b6:4b:1d:e4:d4:27:c8:81:45:8c:f0:
a0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9A:33:1E:D2:A1:22:B3:A8:A4:F0:17:B7:A1:45:E4:3A:11:55:AA
X509v3 Authority Key Identifier:
keyid:C2:D6:C7:9A:67:7C:97:EC:70:06:31:3B:E9:16:7E:0D:E6:6C:A4:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:63:cd:b3:46:f9:d4:d9:9b:ee:b2:fe:0a:0b:41:5e:b5:41:
d0:8e:ae:fa:6e:b4:ea:05:f1:ef:ec:d5:70:1d:4d:54:3e:b2:
28:9d:f7:ad:ed:9e:68:bf:50:28:5c:d7:24:fb:06:84:e3:29:
56:f6:e9:b6:6c:23:0b:74:89:7a:72:e3:31:af:7e:d1:26:9f:
2d:c8:ad:57:ed:04:fa:a3:ba:c6:41:b5:b6:48:07:3e:99:9e:
ef:ca:ff:7d:44:47:68:dc:0a:a5:52:99:45:ce:8c:93:05:d7:
03:20:a9:01:7e:f2:e3:64:73:ec:2f:24:68:93:51:6c:e2:53:
dc:75:f1:fb:de:51:43:1e:d5:1d:93:9c:f6:d2:ea:39:37:2c:
37:f3:20:32:ae:74:94:63:99:14:d1:26:a1:8b:22:8d:98:6e:
30:5c:88:59:67:8f:a0:cc:1e:79:41:69:23:76:1d:bd:72:d8:
d2:06:a2:39:90:56:a0:21:c4:48:f0:bb:97:ec:bb:70:55:08:
fe:df:91:ed:04:92:2a:70:72:4f:61:86:ae:63:98:2c:18:32:
cc:e5:14:5c:d9:6a:b3:85:48:64:90:a8:c4:95:24:8c:8e:63:
82:89:47:c2:3f:dc:aa:74:d6:40:cc:c6:bc:55:f0:d2:62:80:
4d:9a:3f:1b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MkY1QjExMC8GA1UEBRMoQzJENkM3OUE2NzdDOTdFQzcwMDYzMTNCRTkxNjdFMERF
NjZDQTQ1MjAeFw0yNjAzMDMwODAyMTNaFw0yNjAzMTAwODAyMTNaMBgxFjAUBgNV
BAMTDTY5YTY5NTg1LTVmZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5QxGqm9XCPkPPvxbZrtWu1A2i6pf5lsLZFfCCTEV2Bub9d8iWCp3do6KZruEY
aMbU33fXWkn/zp1ToWrMXG8vL8Rsrg//gxnGxRPKqZFFe3F9vwwaRe9znJKVgHsQ
1aPPxpNj8KNMpYFI+NXrgFBuwnaDHUnNWso67KYYTCoUof6401YgPKj6SNXIv4eI
1iWkGxkZ01nsurx4w+HD+fgCQQ/tHqzY5A2DzenfqQGGv16TORUYWfPCUYkiOR3b
7omQErNKiWlntC0+V/V60q1/BzFDPwdJ/y9y+w4Il3zF44jrOkKU/9FYSkEa2AIc
fhXIM5O2Sx3k1CfIgUWM8KAHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTpozHtKh
IrOopPAXt6FF5DoRVaowHwYDVR0jBBgwFoAUwtbHmmd8l+xwBjE76RZ+DeZspFIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyRjVCL0NEQUJGMTgyQjRC
MTExRjBBREMyQjExRkM0RjlBRTAyL3d0YkhtbWQ4bC14d0JqRTc2UlotRGVac3BG
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvd3RiSG1tZDhsLXh3QmpFNzZSWi1EZVpzcEZJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky
RjVCL0NEQUJGMTgyQjRCMTExRjBBREMyQjExRkM0RjlBRTAyL3d0YkhtbWQ4bC14
d0JqRTc2UlotRGVac3BGSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDQY82zRvnU2Zvusv4KC0FetUHQjq76brTqBfHv7NVwHU1UPrIonfet7Z5ov1Ao
XNck+waE4ylW9um2bCMLdIl6cuMxr37RJp8tyK1X7QT6o7rGQbW2SAc+mZ7vyv99
REdo3AqlUplFzoyTBdcDIKkBfvLjZHPsLyRok1Fs4lPcdfH73lFDHtUdk5z20uo5
Nyw38yAyrnSUY5kU0SahiyKNmG4wXIhZZ4+gzB55QWkjdh29ctjSBqI5kFagIcRI
8LuX7LtwVQj+35HtBJIqcHJPYYauY5gsGDLM5RRc2WqzhUhkkKjElSSMjmOCiUfC
P9yqdNZAzMa8VfDSYoBNmj8b
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:25:11 2026 by rpki-client