
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
File: wTdkoKY6d2fzpHXXqBro3xiv4I0.mft (raw, json)
Hash identifier: ADeSEjeQtTdJS+8eeES6+lqW63YiXgQOZanxkQ3SlRo=
Subject key identifier: DD:86:01:21:A8:D8:82:C1:86:63:4D:1F:27:7E:69:D1:E2:F2:53:F2
Authority key identifier: C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D
Certificate issuer: /CN=A919941E/serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D
Certificate serial: 02CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
Manifest number: 02C0
Signing time: Mon 05 Oct 2026 01:41:38 +0000
Manifest this update: Mon 05 Oct 2026 01:41:37 +0000
Manifest next update: Mon 12 Oct 2026 01:41:37 +0000
Files and hashes: 1: wTdkoKY6d2fzpHXXqBro3xiv4I0.crl (hash: UNGiwla/h8MiEd0Jw8BS0amoxh6YrPBl+Ofv+/kbw7k=)
2: 8A7D7EA2426B11F0B0160739C4F9AE02.roa (hash: y6sr7tbJEN2rlUZBa3aIr3fhInWoQ8HE4shLL1FfQsw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl
rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 01:41:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 716 (0x2cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919941E, serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D
Validity
Not Before: Oct 5 01:41:37 2026 GMT
Not After : Oct 12 01:41:37 2026 GMT
Subject: CN=6ac30052-64ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:62:62:c9:ca:4c:24:04:d7:73:dc:c8:51:
c9:6b:9e:c4:dd:f5:7e:59:1e:a2:25:c0:25:b1:3e:
2f:52:eb:b4:8a:55:c2:bb:45:00:fb:ba:25:75:5c:
58:96:15:14:36:fa:c3:7d:4a:cf:98:9e:38:4b:2a:
20:ef:38:fe:54:ec:87:42:2b:52:21:fa:56:8f:dd:
80:5e:68:a6:dd:a7:77:48:25:75:66:77:0e:8f:58:
b6:28:ba:cc:43:c2:d2:28:7e:74:5d:65:6b:4f:40:
0a:22:5c:8f:01:5f:63:e4:4d:22:c8:fa:ea:41:94:
82:aa:3f:83:b2:ba:f2:14:8c:74:e5:f5:6c:56:0e:
47:7f:e5:13:47:7a:60:f9:f8:5d:b9:84:17:c0:1f:
2f:0c:49:ce:71:a7:28:7a:d4:ba:76:60:d0:c5:7f:
4e:87:eb:d8:f1:25:8a:4b:50:37:76:05:d6:19:ab:
e4:48:fe:cf:ae:bc:84:53:5b:e3:19:cd:c0:19:4f:
02:a9:6f:6c:57:e0:0b:b7:b0:73:48:ea:77:4f:43:
8e:b0:34:d5:a4:7d:9e:eb:57:04:c9:3b:d4:ec:0b:
d6:62:c1:7c:b9:36:82:79:8c:58:11:5e:d8:33:af:
87:90:0a:5a:00:87:36:4f:a6:fa:c2:92:e3:0f:61:
55:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:86:01:21:A8:D8:82:C1:86:63:4D:1F:27:7E:69:D1:E2:F2:53:F2
X509v3 Authority Key Identifier:
keyid:C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e5:d7:fe:db:fd:de:93:56:72:a6:5f:bf:28:4e:a1:d9:a1:
14:36:64:06:f7:8a:e4:01:02:00:51:62:92:4e:b8:30:96:1e:
59:6a:10:32:c0:2a:85:d0:09:d9:bf:aa:14:23:ae:5c:e4:10:
53:e2:4d:cf:bd:95:77:ae:dc:93:fd:fe:e7:07:91:81:0d:14:
ec:ad:fe:f8:7a:c3:39:61:9d:38:63:79:2c:9d:50:1b:33:45:
7e:17:a1:11:e9:cf:1a:3e:fb:83:29:f0:9f:16:08:38:9a:47:
67:7d:4b:57:ea:e7:04:57:41:a8:db:fd:66:2e:9b:11:0f:7c:
21:91:c5:d2:ba:65:06:97:05:c8:1c:6a:d8:40:16:e6:98:a9:
18:ee:0f:b2:06:67:b0:24:91:5e:88:39:43:ec:7b:d1:79:21:
6a:5a:ac:57:28:4e:8e:db:62:e3:f7:55:bc:1f:18:f1:52:b9:
09:89:4f:3f:aa:6b:64:76:a8:0e:28:6b:f5:71:f7:98:08:86:
08:5d:da:33:75:63:a1:20:1a:79:45:80:e2:e2:16:fc:2a:40:
7e:d9:1b:81:ae:41:b2:87:f7:a5:6e:7a:d7:3c:c8:f7:9e:51:
1d:b9:f8:7d:4f:4b:39:88:7a:70:98:ac:6b:c1:04:a1:66:7f:
df:77:51:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:34:33 2026 by rpki-client