
$ rpki-client -vvf rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
File: W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft (raw, json)
Hash identifier: qfgU21iynev0yFB0MblU5/hGke0jnb1jNA9NA67qJ1o=
Subject key identifier: 52:EC:67:54:DD:0B:17:36:F7:E6:7B:2A:B4:B7:E8:5F:68:D6:FD:80
Authority key identifier: 5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21
Certificate issuer: /CN=A911069A/serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
Certificate serial: 01CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
Manifest number: 01C3
Signing time: Mon 02 Mar 2026 01:33:32 +0000
Manifest this update: Mon 02 Mar 2026 01:33:31 +0000
Manifest next update: Mon 09 Mar 2026 01:33:31 +0000
Files and hashes: 1: W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl (hash: JR+8obTkiwN9LJZNlzpFQG9GFhJ1GbrWVQVo4Bg9nbQ=)
2: E286BAA24B5611F0A987864DC4F9AE02.roa (hash: vGinucXQRTUIefk4Tv24gNqw96gHy08KtOxMfZPJt7Y=)
3: 12C3947A66F611EE82864875C4F9AE02.roa (hash: Wz6nogB+wbKBt8GTzhszxFQph1Av594K7rD96UDLujQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl
rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911069A, serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
Validity
Not Before: Mar 2 01:33:31 2026 GMT
Not After : Mar 9 01:33:31 2026 GMT
Subject: CN=69a4e8ec-530f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:e8:4c:cd:ae:3b:53:8c:88:e9:24:48:7e:
ee:04:87:aa:cb:62:ec:05:df:31:42:be:23:6e:6a:
96:3a:4a:95:5d:30:b6:69:98:34:2e:ff:60:a6:e7:
07:47:77:09:fe:55:89:f6:22:1f:5a:90:36:1a:09:
a4:c9:17:ec:c9:7e:ff:9a:56:ce:6b:a3:f2:80:1b:
9f:f8:19:94:10:6f:34:fc:4f:22:b3:e5:37:9c:10:
36:f2:6a:bd:7a:0d:54:52:a6:a1:b9:5c:43:e5:ef:
61:06:c7:f7:26:59:7e:64:32:ec:f1:68:cd:fd:9f:
9f:81:e8:a6:dc:5f:90:12:84:60:6f:cc:67:a8:12:
f0:72:59:d5:ac:4c:d3:aa:76:c7:0e:ec:a7:a2:f1:
0c:60:e8:44:1c:b1:76:8b:58:2e:ce:35:4b:ad:5f:
2c:46:e3:31:26:12:42:ff:b4:93:39:35:96:c4:1a:
7a:6a:ac:7c:dd:ef:cd:f0:97:fa:19:ad:89:47:72:
f7:fe:3c:ab:88:73:ac:a3:bd:58:a5:e2:f2:6a:90:
c7:bd:8b:ea:05:b1:8a:f4:b6:c5:76:77:98:18:7a:
4e:be:7a:6c:e1:ad:c6:e5:7d:ee:cc:c5:da:d7:7e:
3f:f8:53:83:78:c1:69:af:43:ce:79:7e:0c:0f:bf:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EC:67:54:DD:0B:17:36:F7:E6:7B:2A:B4:B7:E8:5F:68:D6:FD:80
X509v3 Authority Key Identifier:
keyid:5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:7c:1e:02:31:73:c1:f9:21:47:3c:02:bc:bd:4d:59:95:67:
7f:d6:fc:6e:8c:0b:b2:90:39:37:36:75:9e:74:ae:d4:99:c9:
b4:59:3e:95:bb:c9:b1:d3:f8:91:72:5b:a0:7f:99:c5:ce:c9:
14:34:2b:1f:2e:fc:32:09:a8:22:ff:a5:a8:14:d9:eb:3d:10:
f9:bd:82:4c:94:0a:4b:d2:7b:1d:87:d9:ce:15:ba:92:bf:a6:
72:78:92:29:23:ae:de:ef:95:b4:68:42:96:fa:ea:40:1b:f2:
6d:49:80:20:c3:90:0b:61:66:a9:db:b3:7a:15:99:7c:bb:05:
b7:32:c0:15:8f:70:f1:48:9d:13:ed:5c:73:f4:14:3d:c9:03:
ca:ad:89:a0:ca:c9:c0:b1:f3:9e:f5:5b:b8:a9:4b:da:08:a1:
0f:07:e6:1b:53:b5:dd:42:88:0a:da:eb:9e:ae:9b:dc:6b:aa:
10:20:0d:33:0a:07:f0:c4:d3:e3:a3:94:eb:1f:a1:95:25:0e:
4b:19:c1:f2:b1:b6:9f:fa:f5:38:2e:7f:e6:d5:92:34:49:40:
9b:4b:7a:56:20:41:63:24:3e:ea:d5:cd:08:ad:ff:fd:31:5a:
73:0f:ec:77:f0:48:04:a7:0d:2d:cf:fc:27:a9:76:a6:24:2e:
4e:12:3e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:41:33 2026 by rpki-client