
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
File: weInZRraO_vBh3GuyLYAJnI7YK0.mft (raw, json)
Hash identifier: yssmu0f807YKAIVwg9kqhuaZThdfDTP0rE5rymnLja4=
Subject key identifier: FF:0A:86:4A:DE:7D:F2:A6:AA:9B:13:3C:58:D7:AD:EB:10:6D:44:B6
Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
Certificate issuer: /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Certificate serial: 2A0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
Manifest number: 29D0
Signing time: Sun 20 Sep 2026 15:32:50 +0000
Manifest this update: Sun 20 Sep 2026 15:32:49 +0000
Manifest next update: Sun 27 Sep 2026 15:32:49 +0000
Files and hashes: 1: weInZRraO_vBh3GuyLYAJnI7YK0.crl (hash: O39IlmW8OzubfZbDFLo4xkrvjDT+ifJxaPP4cm/CYKk=)
2: 39932724578611EA8CC3B124C4F9AE02.roa (hash: 5xVxyBLTVv6TTJwr4d6CRZOAj/oOkKXh9D4XacOHsAU=)
3: 3AB3F80E578611EA8CC3B124C4F9AE02.roa (hash: C5FmIwbgprkig61fqNmKWaJWuBinr8tfV+3G1uObZOs=)
4: C3876BD8589D11EC9CF19A41C4F9AE02.roa (hash: er4abjooP2pzYLbFn4zXYhItU6fj/FaQ5TH/f8stFqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:32:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10764 (0x2a0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Validity
Not Before: Sep 20 15:32:49 2026 GMT
Not After : Sep 27 15:32:49 2026 GMT
Subject: CN=6aaffca2-9f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:cc:4d:07:38:93:a3:52:87:7b:7b:a3:49:
a2:6c:31:be:a4:3f:e1:62:ce:8c:33:19:a7:46:b9:
2f:d4:e5:99:ee:0c:ae:20:cc:b9:e8:75:a7:44:0e:
99:1b:9a:ad:5f:ce:75:ef:2a:08:6f:26:06:79:cf:
11:c4:da:74:54:52:ee:19:2c:9c:dd:ca:36:54:9d:
87:e9:86:58:36:27:c5:5f:8d:f1:b8:17:ba:82:64:
de:7e:ce:96:54:d2:2e:68:b8:4a:5c:f4:3f:74:02:
15:98:d8:5b:05:af:70:c5:fe:5f:4f:e7:99:27:51:
e4:c9:ad:e0:c5:7e:02:7a:98:e0:21:52:16:a4:b2:
05:56:ee:79:85:eb:96:4e:fd:18:e1:6f:ac:6d:73:
55:d9:1a:fd:ef:a5:4e:d3:cf:1b:31:c0:f0:82:e8:
42:13:52:ec:85:44:73:4a:c7:2c:27:b4:48:d4:80:
d0:45:8f:e2:17:56:a9:f6:1b:0d:dd:50:bb:0e:fb:
35:24:15:3e:27:95:b6:46:0c:cc:ac:ac:06:9b:e0:
1a:a1:87:cc:8a:b8:ff:ff:c3:c1:dc:a0:3a:7c:e9:
79:78:17:07:f2:0c:02:d1:cd:58:d4:ad:e2:8f:ca:
a7:77:0b:51:e3:5c:48:d9:5b:27:f2:45:0c:31:1f:
0b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0A:86:4A:DE:7D:F2:A6:AA:9B:13:3C:58:D7:AD:EB:10:6D:44:B6
X509v3 Authority Key Identifier:
keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0c:d3:05:8b:ed:8e:b6:2c:95:76:bd:19:3e:9d:43:b6:dd:
d1:71:13:4e:ed:ba:ad:15:05:2b:84:f5:41:44:0d:84:dc:e4:
24:77:fb:3e:4a:96:77:db:1d:7b:e6:d7:05:d7:1c:8a:3e:ab:
7d:ad:35:2f:02:16:e9:ef:94:b7:d8:84:55:c8:21:d2:1c:8d:
71:cf:34:f0:6d:09:06:5d:4b:c7:b7:6d:48:1a:a2:14:08:c6:
ba:f0:14:a0:03:8f:bf:81:ea:c3:c4:af:ae:1f:08:cc:05:9f:
97:1d:62:0b:19:46:6c:53:80:6d:20:f8:f2:be:5c:05:41:3b:
19:78:92:fd:76:79:4d:21:f8:0f:1b:fb:03:e0:b9:37:2b:2f:
3a:77:46:95:be:56:65:b2:46:a0:f7:6a:67:34:83:10:06:a2:
8f:48:5d:ee:b0:30:0a:a6:63:ae:ea:52:6d:40:f0:6e:de:e1:
92:7b:bc:25:ad:eb:94:5c:4f:ae:e6:05:bc:cf:c9:ba:5c:5e:
39:a3:aa:d8:30:e4:e0:d8:2e:94:9e:d2:4a:7c:de:e3:20:d2:
b7:b2:d8:ae:46:5a:dd:90:8d:cf:ac:78:96:20:34:6d:73:c7:
bf:1a:ea:e2:3e:7b:03:42:0c:8d:f9:f2:da:cf:f7:d6:74:62:
03:85:c2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:09:00 2026 by rpki-client