
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft
File: WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft (raw, json)
Hash identifier: atU7T6a1X0dJb8EQGO2VyfUZrz689RoEic1OUqmyY2w=
Subject key identifier: 8B:0F:3E:C3:5C:88:56:AA:C6:89:A4:0B:CA:47:96:5F:E9:1F:6E:80
Authority key identifier: 58:5E:4E:B5:94:0C:D8:07:A1:F7:94:53:1B:05:A1:0D:C7:E4:33:B2
Certificate issuer: /CN=A9193227/serialNumber=585E4EB5940CD807A1F794531B05A10DC7E433B2
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WF5OtZQM2Aeh95RTGwWhDcfkM7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft
Manifest number: 0B
Signing time: Tue 11 Aug 2026 07:59:45 +0000
Manifest this update: Tue 11 Aug 2026 07:59:45 +0000
Manifest next update: Tue 18 Aug 2026 07:59:45 +0000
Files and hashes: 1: WF5OtZQM2Aeh95RTGwWhDcfkM7I.crl (hash: m1zRSi7u9fuv6W7Cq18JtQUM+a/twUkfrDKsljbjoL4=)
2: C4573D8E8BDF11F19F45C2023611F970.roa (hash: SBR2qy/aOQNOlTNj4Guu+00B4uzU8KT7C033YFlfsww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.crl
rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WF5OtZQM2Aeh95RTGwWhDcfkM7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 18 Aug 2026 07:59:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193227, serialNumber=585E4EB5940CD807A1F794531B05A10DC7E433B2
Validity
Not Before: Aug 11 07:59:45 2026 GMT
Not After : Aug 18 07:59:45 2026 GMT
Subject: CN=6a7ad671-6816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:31:ee:50:ef:91:b2:58:8a:fb:b3:97:6c:
0b:83:89:ad:4f:56:ae:fc:c8:87:f0:a1:05:e8:b0:
0d:66:78:38:aa:a3:c4:d9:5c:18:f9:e6:6d:fc:db:
6f:0e:9e:41:9a:a5:e1:5d:cb:46:f0:20:d0:89:82:
38:a7:46:aa:5c:71:2d:78:46:49:5c:7a:b5:b5:53:
f6:c5:2a:70:fc:58:23:02:e7:92:e5:ed:ab:65:f0:
6d:92:56:19:8a:80:ab:95:d9:dc:f3:e2:b2:96:1b:
be:d5:f7:69:b8:d6:07:03:71:af:d6:ba:a9:b0:8a:
03:11:fb:05:be:58:5a:02:3e:f2:08:e3:1f:af:09:
97:ea:27:b3:56:b7:97:06:50:28:48:c0:57:72:cf:
c4:7b:35:8f:f7:7c:b6:31:68:89:ee:f6:b7:2b:e4:
97:67:fe:18:18:eb:da:33:6f:a6:9b:f6:ce:ca:b5:
65:2a:2b:f7:0e:f0:da:b5:07:d8:d4:b4:5b:83:02:
ee:52:89:67:b8:aa:e5:d2:75:b7:79:8c:85:e1:9a:
b4:64:e9:d2:fe:97:08:ab:ce:59:14:42:5f:77:aa:
82:6e:4c:88:84:7e:0c:76:4c:3f:c4:5e:bc:17:8b:
51:76:55:9e:38:f1:48:92:d2:aa:33:11:7a:94:87:
c3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0F:3E:C3:5C:88:56:AA:C6:89:A4:0B:CA:47:96:5F:E9:1F:6E:80
X509v3 Authority Key Identifier:
keyid:58:5E:4E:B5:94:0C:D8:07:A1:F7:94:53:1B:05:A1:0D:C7:E4:33:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WF5OtZQM2Aeh95RTGwWhDcfkM7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:35:50:65:2a:99:33:3d:1f:5f:b5:ac:a5:48:92:a8:78:89:
24:76:05:17:45:7f:6e:cd:f0:bb:97:c9:b6:96:a9:24:9e:1e:
2b:3b:76:4a:35:8c:25:40:94:04:13:9b:ae:3c:19:9a:7d:6b:
9a:51:e9:0f:fe:0f:0c:ad:c6:de:fd:cb:54:cc:59:d9:f5:8c:
d4:6b:26:be:ef:05:37:eb:6f:b0:35:ab:93:a1:3c:05:be:14:
f0:f5:b4:92:a3:68:e8:db:d0:f5:e4:c7:cb:44:6e:44:81:cd:
5f:da:f3:c2:4e:8b:99:40:92:31:f3:b7:a2:a5:d1:26:7f:cd:
28:7a:15:46:b5:9e:e5:63:0a:4b:82:55:35:d6:3c:e7:51:c8:
17:90:94:25:4d:15:46:61:80:6d:40:b4:0a:fc:2a:aa:41:f0:
c6:9c:7d:a9:3b:7b:b0:e6:1d:f9:62:c9:e6:b0:fa:91:64:3d:
0a:0a:f3:01:e7:15:aa:aa:71:97:80:6c:8f:f3:68:ba:81:4c:
d5:34:dd:61:b3:31:98:e0:e2:24:93:ee:65:11:66:af:b3:f7:
7a:80:d8:62:dd:9a:d3:0a:0a:8a:d0:21:2a:7e:a5:ae:05:75:
50:cf:82:cc:0e:45:e1:64:8e:a6:ee:35:d5:38:86:36:c2:9a:
23:38:69:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:57:27 2026 by rpki-client