
$ rpki-client -vvf rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
File: w9DuaJTOj1bPawcKsT-YFp39QR8.mft (raw, json)
Hash identifier: 7ch5OuX/d+omO1+/L42DNcMquxjZr5zYJpBh3ld7TrM=
Subject key identifier: B7:92:91:E2:1B:70:D4:54:5B:3F:37:1F:82:BF:9B:BB:F1:1D:35:B6
Authority key identifier: C3:D0:EE:68:94:CE:8F:56:CF:6B:07:0A:B1:3F:98:16:9D:FD:41:1F
Certificate issuer: /CN=A912380D/serialNumber=C3D0EE6894CE8F56CF6B070AB13F98169DFD411F
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
Manifest number: 2F
Signing time: Fri 17 Apr 2026 08:25:50 +0000
Manifest this update: Fri 17 Apr 2026 08:25:50 +0000
Manifest next update: Fri 24 Apr 2026 08:25:50 +0000
Files and hashes: 1: w9DuaJTOj1bPawcKsT-YFp39QR8.crl (hash: EV85D6RPWwn4yP1/3qaC2EQtZPLgqcj0TKqGTuy9xK4=)
2: 5147C064FFE611F0819299B6756F56BC.roa (hash: PbQ4AYnQxtghraD/LEsa/Ll3mQLAruMXQgHBWCuOIN4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.crl
rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912380D, serialNumber=C3D0EE6894CE8F56CF6B070AB13F98169DFD411F
Validity
Not Before: Apr 17 08:25:50 2026 GMT
Not After : Apr 24 08:25:50 2026 GMT
Subject: CN=69e1ee8e-9bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:19:50:15:2f:f4:38:e7:87:fc:bb:8e:25:
cf:2d:fa:02:7c:4a:7f:bc:da:44:0f:0e:63:9b:9c:
31:06:69:a4:57:cc:40:32:28:a2:10:c0:d0:c2:43:
cf:36:3b:f7:0a:fb:1f:9f:f2:03:09:74:66:63:05:
8a:cc:bd:c2:5d:ef:2c:ab:c9:62:c1:59:d5:33:44:
eb:b9:ca:7d:fa:85:54:0e:48:93:7c:2d:c9:c2:58:
84:fd:8d:b3:c6:9a:21:2c:1b:08:5e:3e:57:d4:44:
73:45:26:04:a2:27:52:61:09:33:a1:3b:32:4c:65:
e6:95:74:20:b6:66:6b:ce:3d:25:91:be:8a:48:66:
ca:3a:f1:a5:e5:2c:43:ad:d4:4c:66:94:c3:08:88:
45:79:8c:8d:70:7e:31:8f:fc:17:18:9c:ec:3d:d6:
65:9a:c7:e4:66:4a:31:4b:04:71:e5:73:93:2a:72:
8e:63:b2:53:dc:2c:37:76:9c:df:46:0b:a4:29:49:
c6:f8:34:f2:e9:b6:53:5a:73:6c:22:24:f2:c7:13:
82:99:8e:5b:25:03:f4:78:70:3e:ad:d0:2a:e2:e1:
06:a8:d7:3f:69:db:cc:83:3c:3c:6c:01:96:ed:89:
de:4d:0e:14:be:0e:5d:51:0d:57:5d:b0:7d:0b:17:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:92:91:E2:1B:70:D4:54:5B:3F:37:1F:82:BF:9B:BB:F1:1D:35:B6
X509v3 Authority Key Identifier:
keyid:C3:D0:EE:68:94:CE:8F:56:CF:6B:07:0A:B1:3F:98:16:9D:FD:41:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:64:ee:e7:ca:a9:90:91:90:06:ee:b4:73:88:4f:1e:72:a9:
57:14:06:83:7d:47:17:46:82:99:12:dc:4d:74:66:85:2e:f6:
3c:aa:2b:29:7a:cf:16:83:47:80:81:bb:26:f4:22:2a:ef:ba:
33:7e:81:5a:87:bc:8c:b9:15:8f:79:7e:47:a9:61:e3:70:4e:
84:fb:a1:cf:8e:fd:4e:8a:fc:ea:83:a6:d7:8e:1a:0f:e7:ee:
85:5b:69:74:c3:0e:65:30:58:f2:84:ff:72:4c:a1:72:97:cb:
f2:4e:b0:0f:6b:20:85:c7:29:6f:86:1e:92:a1:d1:49:2e:3f:
69:93:55:86:76:b4:42:66:39:70:32:f7:76:60:18:de:89:9d:
21:35:e5:86:fd:91:9e:5e:85:ec:50:36:2a:e8:1b:57:68:1c:
0e:59:cb:bd:62:ad:b6:b1:3b:4e:37:c0:bb:28:ee:92:fa:ca:
a3:95:9e:d7:73:41:a0:d0:42:bc:d4:ce:45:32:43:83:d9:67:
60:d5:db:62:4a:e1:ea:9d:e2:80:bb:a9:9b:94:76:e9:35:e2:
40:06:e3:c6:80:4a:c3:98:a0:05:68:0a:66:d6:a2:54:78:20:
a7:a4:81:c4:d4:2f:75:de:2f:3b:d8:5f:52:99:0d:b4:de:93:
92:37:06:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:51:56 2026 by rpki-client