
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
File: wm9G_ZlSs686fXFd4b86YeJceYo.mft (raw, json)
Hash identifier: POSKBMpTli551hAiVkKjReNPSYXOM/ckdwNaKKAMa6o=
Subject key identifier: 25:53:04:E3:23:93:5B:81:0E:6E:32:8E:71:A1:49:6B:A5:97:36:51
Authority key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A
Certificate issuer: /CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A
Certificate serial: 014F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
Manifest number: 0146
Signing time: Sun 01 Mar 2026 06:22:56 +0000
Manifest this update: Sun 01 Mar 2026 06:22:55 +0000
Manifest next update: Sun 08 Mar 2026 06:22:55 +0000
Files and hashes: 1: wm9G_ZlSs686fXFd4b86YeJceYo.crl (hash: GP/bSe2InyGqzhrpKuSiuObOQUyph+VUX3TroE6bBGI=)
2: 39032028BB8211F0ACBBE862C4F9AE02.roa (hash: GaLLwV5AtE+d32/hOzBxSXpg7cSHrokuqZVF2wvFzkM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl
rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117CE3, serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A
Validity
Not Before: Mar 1 06:22:55 2026 GMT
Not After : Mar 8 06:22:55 2026 GMT
Subject: CN=69a3db40-d48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:be:89:17:45:53:0b:67:2e:d1:b2:64:fd:
eb:ff:d8:8b:4d:2a:18:34:b0:6f:29:04:c1:41:41:
1f:7c:d2:88:e1:39:2d:75:86:6d:69:ba:0e:da:98:
8d:1a:48:e2:53:d5:70:bc:66:ff:fd:70:d5:d2:1c:
24:8b:b4:0c:31:16:d9:07:18:fd:47:b7:7e:59:17:
3f:83:c4:94:5a:b9:c1:3c:9b:61:39:4e:b6:31:e2:
5c:05:e3:15:a2:ee:ae:25:da:f0:07:77:1a:c0:6b:
ed:3b:56:3a:ac:89:e6:29:f0:c0:48:d1:9e:d4:49:
8c:4a:dc:af:95:83:8a:82:87:e5:ce:6d:eb:e2:3c:
a7:fb:78:4d:8e:0a:1f:74:e7:6b:74:57:fc:0f:9f:
6a:c4:b0:ff:bf:29:64:5c:0c:76:8c:55:0c:0a:a6:
15:ae:e3:05:74:47:fc:0d:6c:71:7b:5f:3b:6f:2b:
f4:b4:25:39:cd:49:98:50:7f:37:37:26:6f:1e:ee:
51:87:88:8a:cf:6d:f2:0c:78:6c:a2:a3:7e:5d:7b:
7f:4b:ac:cf:32:26:24:c9:04:58:ef:b5:e8:7a:f5:
93:ab:65:88:28:67:40:76:be:a9:b6:3e:bc:42:67:
67:98:a2:85:5c:0f:16:c1:64:cf:5b:e2:ef:92:ee:
d6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:53:04:E3:23:93:5B:81:0E:6E:32:8E:71:A1:49:6B:A5:97:36:51
X509v3 Authority Key Identifier:
keyid:C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:35:06:e4:ff:cf:6d:b0:f7:b3:39:7e:0b:21:3a:31:8b:b0:
34:92:fd:a8:2d:e7:df:fc:fb:da:1b:fe:15:a3:ad:78:c7:48:
d5:61:96:32:52:74:bc:ff:95:4f:e7:f1:a6:35:e1:bf:f6:88:
3d:18:46:c7:9c:fb:c8:f1:e6:0e:32:8f:a8:23:3d:23:92:e6:
38:53:8c:90:19:4a:69:21:12:25:f6:3b:34:54:e9:62:ce:d5:
bc:8f:93:b6:3b:2b:23:6f:81:d1:c0:d1:8e:7f:a1:04:f9:73:
29:b7:32:c3:88:42:42:03:31:16:47:66:7b:21:dc:6b:aa:24:
b0:86:52:f7:c3:1b:ef:f7:06:9c:9a:3a:bf:4a:05:9f:11:56:
8b:cb:fc:a1:b0:67:3d:68:8e:e8:7c:eb:d1:70:a6:55:d7:f6:
ef:04:41:b0:f3:a0:56:de:2d:f4:88:3f:c7:fa:3e:6d:de:58:
cf:cf:07:18:09:2c:49:b8:dc:f4:ee:65:a0:3b:02:f3:c7:cd:
be:db:96:10:d1:6f:61:34:5f:bf:ae:4f:70:0f:27:49:31:bf:
f1:01:fe:02:7f:e9:27:85:d0:db:bd:28:29:90:f8:02:a0:ec:
fe:de:ae:d6:ec:a5:ba:bc:03:d5:15:64:7f:ef:c8:e3:e9:2e:
9c:12:34:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:52 2026 by rpki-client