
$ rpki-client -vvf rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
File: w9DuaJTOj1bPawcKsT-YFp39QR8.mft (raw, json)
Hash identifier: kuFLCYKhJLudkmdA5AXsprWfLOorfHfy6bi09nLCWpc=
Subject key identifier: C5:2F:45:4A:21:EE:50:28:F3:E5:4B:BF:DF:EE:2F:13:4F:60:67:24
Authority key identifier: C3:D0:EE:68:94:CE:8F:56:CF:6B:07:0A:B1:3F:98:16:9D:FD:41:1F
Certificate issuer: /CN=A912380D/serialNumber=C3D0EE6894CE8F56CF6B070AB13F98169DFD411F
Certificate serial: 17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
Manifest number: 15
Signing time: Sun 01 Mar 2026 10:31:27 +0000
Manifest this update: Sun 01 Mar 2026 10:31:26 +0000
Manifest next update: Sun 08 Mar 2026 10:31:26 +0000
Files and hashes: 1: w9DuaJTOj1bPawcKsT-YFp39QR8.crl (hash: DJ+ExTRIoBOYB9bQhLfWbEWWNo7dGwbZqlWIrHdSuYc=)
2: 5147C064FFE611F0819299B6756F56BC.roa (hash: dxqWrt5xYEHSokLX0i3WpHa5o0vkk7mwt4FA5//2TjY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.crl
rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912380D, serialNumber=C3D0EE6894CE8F56CF6B070AB13F98169DFD411F
Validity
Not Before: Mar 1 10:31:26 2026 GMT
Not After : Mar 8 10:31:26 2026 GMT
Subject: CN=69a4157f-a24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:fb:99:96:82:56:5f:13:c0:e8:72:4b:cc:
50:0e:b7:22:af:ab:bd:b7:b9:ca:64:e0:7e:4f:04:
b4:f4:51:74:44:33:72:56:ab:7b:fb:08:49:d8:17:
a8:ea:d5:50:fc:16:c1:67:5e:31:28:02:8a:62:a1:
36:a3:28:77:1e:1f:5d:6d:c0:ce:32:b6:85:3e:f8:
d2:9f:95:f4:44:b4:e7:6a:10:b7:5d:0d:2a:e1:3f:
55:46:c9:45:9e:ce:70:f4:a6:8b:5b:34:5b:8b:5b:
c4:16:bb:6b:90:f4:ca:01:a3:5d:6e:b1:1f:79:82:
fd:62:8b:d7:70:0b:49:3a:9a:ed:5a:c3:0c:bd:8d:
4f:d6:b3:85:cf:68:7d:88:9b:36:71:ba:6f:98:83:
ae:0b:80:28:e9:79:0f:93:f3:cf:b2:6e:2e:48:75:
53:ab:fd:1c:39:df:0b:62:4a:06:e4:f8:66:7c:cb:
1d:19:a6:18:b7:6d:5f:fe:5a:a5:e7:4c:84:2a:f6:
ba:ca:f5:e0:4f:ef:47:e4:95:57:57:7d:b4:87:d1:
b7:b8:2a:8f:cc:6d:b1:cf:76:ad:dc:9c:fe:ef:a4:
de:c9:57:e9:8f:49:b1:c3:4e:71:eb:ef:ca:d0:78:
1e:24:46:75:bc:e3:0b:25:39:b5:2e:10:c9:ed:c6:
46:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2F:45:4A:21:EE:50:28:F3:E5:4B:BF:DF:EE:2F:13:4F:60:67:24
X509v3 Authority Key Identifier:
keyid:C3:D0:EE:68:94:CE:8F:56:CF:6B:07:0A:B1:3F:98:16:9D:FD:41:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:20:00:67:48:7d:64:4a:0a:2a:c3:46:d6:25:68:17:7d:d3:
4e:9e:04:22:6c:73:fb:5e:a2:14:66:4b:cc:b0:47:bc:df:14:
b6:27:24:cd:46:33:47:cb:c4:a4:4e:6e:59:7b:26:44:61:c4:
1f:a9:62:3b:c9:46:0c:86:15:bb:dc:56:7c:45:00:ac:f5:03:
66:2f:2a:ef:37:fc:8c:c1:ee:b4:cc:ec:83:c2:1e:eb:7b:0f:
9c:39:57:ae:49:fe:44:bc:b9:f8:74:8e:3f:fc:6b:a9:ea:59:
59:57:f0:c4:34:2d:8a:4f:36:70:6c:38:a5:17:f2:84:c2:1a:
91:81:93:93:5c:e2:e6:b8:ab:d4:1b:a6:ce:8a:9c:dc:ae:e4:
fd:55:0b:77:89:e3:19:d9:4d:59:fe:59:86:7c:bd:a9:2e:40:
de:ee:33:40:ec:25:76:4c:e7:65:21:73:57:d3:f5:dc:73:3f:
a5:ed:2b:a3:45:61:7e:8d:de:45:a9:46:db:b3:3c:fd:ed:d4:
cf:a7:7a:43:64:03:b4:01:c5:38:63:d9:d8:b1:7d:1d:27:d4:
0f:de:24:01:12:5a:bc:26:4c:ad:a7:01:a4:94:ac:b0:a3:cb:
2c:6a:51:89:30:a1:5c:9a:ee:1c:31:6a:8c:28:de:e2:f4:46:
60:a4:25:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:18:32 2026 by rpki-client