
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
File: weInZRraO_vBh3GuyLYAJnI7YK0.mft (raw, json)
Hash identifier: IHU6YpTh2WrAfSGqpUgsNoyTqibPqAb3AaHp0fVpMOA=
Subject key identifier: AC:EF:23:A8:48:98:D4:BE:9B:20:1F:30:47:8C:84:E8:A4:D5:71:76
Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
Certificate issuer: /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Certificate serial: 29BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
Manifest number: 2980
Signing time: Thu 16 Apr 2026 15:33:40 +0000
Manifest this update: Thu 16 Apr 2026 15:33:39 +0000
Manifest next update: Thu 23 Apr 2026 15:33:39 +0000
Files and hashes: 1: weInZRraO_vBh3GuyLYAJnI7YK0.crl (hash: Jxymawik+mwfunExqaj24rT+HiZH+anDhAoEy5h+cFw=)
2: 3AB3F80E578611EA8CC3B124C4F9AE02.roa (hash: C5FmIwbgprkig61fqNmKWaJWuBinr8tfV+3G1uObZOs=)
3: 39932724578611EA8CC3B124C4F9AE02.roa (hash: 5xVxyBLTVv6TTJwr4d6CRZOAj/oOkKXh9D4XacOHsAU=)
4: C3876BD8589D11EC9CF19A41C4F9AE02.roa (hash: er4abjooP2pzYLbFn4zXYhItU6fj/FaQ5TH/f8stFqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10684 (0x29bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Validity
Not Before: Apr 16 15:33:39 2026 GMT
Not After : Apr 23 15:33:39 2026 GMT
Subject: CN=69e10153-53ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:9e:b7:50:79:5c:a2:50:0d:e3:bc:80:8f:
16:7b:79:9c:98:bc:06:20:55:e1:a8:f5:ee:86:18:
d9:bc:c3:a2:a4:e6:40:46:07:70:f6:34:fb:3a:7a:
36:0a:2b:49:48:69:bf:97:8c:09:4d:f4:92:8c:da:
3d:0a:15:7c:99:78:2b:ee:fa:12:54:06:e5:66:3f:
30:e3:4d:3b:5f:50:a5:9f:2b:c8:e3:e4:80:e3:3a:
c5:29:3d:bf:4b:4b:21:46:e8:7a:b3:79:9b:88:04:
47:89:f7:9e:89:35:10:58:fd:2c:0a:7d:25:2c:07:
e4:e8:77:91:9c:42:ad:21:04:19:90:2a:db:35:e7:
c9:d9:ea:dc:96:73:3a:49:4b:8a:a1:d2:38:ef:da:
4b:8f:eb:5e:7f:c3:40:97:4d:e2:66:7e:7b:17:b9:
08:dc:4d:e2:7b:8d:70:f2:85:a6:9f:4f:ed:dd:ac:
de:60:d2:5c:35:75:33:ca:c7:30:f4:0d:f1:46:ca:
e9:65:c3:34:4d:d9:f6:a1:12:fa:29:a4:2b:c7:52:
0c:6c:37:fc:81:b7:50:84:74:93:c4:ed:b5:c1:c7:
6f:4e:19:be:99:78:f2:ee:fd:ef:a0:45:ae:36:61:
8f:b5:73:8a:01:38:d7:6b:a6:2d:17:f6:47:22:56:
08:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EF:23:A8:48:98:D4:BE:9B:20:1F:30:47:8C:84:E8:A4:D5:71:76
X509v3 Authority Key Identifier:
keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:89:a4:47:b1:fd:66:63:09:76:39:58:9e:7b:7f:15:1f:1b:
96:16:86:01:de:63:ea:3a:65:fe:20:90:15:9b:6f:b9:c0:4b:
1a:c6:54:a6:87:22:25:4e:36:77:ed:25:33:ce:34:eb:0b:b1:
10:57:27:cf:00:b0:2a:86:c4:2a:08:de:ad:4c:3d:f4:0a:f7:
b7:f7:1c:be:af:10:ae:58:71:18:e4:9e:be:69:13:4e:cf:bd:
db:2f:ac:73:3c:ff:b2:a6:67:7c:da:14:53:57:d4:c6:cb:20:
3b:7b:48:f2:d7:a3:05:05:9c:53:1f:4e:89:76:f7:bc:3f:5b:
d8:f0:d2:3c:2c:5d:92:9a:f8:79:23:1f:4b:71:22:71:2b:9f:
f2:73:f5:ce:d9:88:ac:06:db:5c:4a:da:2d:5e:51:47:6c:79:
91:cc:7c:c6:78:ff:8f:25:6b:90:99:d4:77:f1:e1:19:99:28:
65:f3:bf:c8:77:e1:83:35:4e:53:1c:4d:e3:36:ee:6b:e2:c7:
b8:09:9c:2a:e0:35:2d:77:73:4c:f5:8e:db:7f:d2:81:08:7f:
76:3d:dd:50:90:6f:e0:98:d7:1c:5d:8c:bb:4f:ab:dd:92:e9:
7c:b5:df:2f:48:0a:c2:87:c0:f9:76:ab:f2:61:fb:3a:8d:4e:
2a:36:13:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:35 2026 by rpki-client