
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
File: WjWLSErYf-ApwQHa5tLtgo2GBVM.mft (raw, json)
Hash identifier: z6plS+tU+mMleALzdRbh8NlnIWSQHosOW8MIYY7z+Bk=
Subject key identifier: C2:C6:77:80:79:CF:29:83:76:21:BA:7B:55:A0:84:F4:B3:81:4D:A3
Authority key identifier: 5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53
Certificate issuer: /CN=A9125949/serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
Manifest number: 97
Signing time: Sun 01 Mar 2026 08:47:08 +0000
Manifest this update: Sun 01 Mar 2026 08:47:07 +0000
Manifest next update: Sun 08 Mar 2026 08:47:07 +0000
Files and hashes: 1: WjWLSErYf-ApwQHa5tLtgo2GBVM.crl (hash: er4JHYnbCXZOYOun0EgQx+rrMsisPGbdXSWPzsQxkhE=)
2: D01462D636E611F090C5647FC4F9AE02.roa (hash: o2ClPvigt44EqHdI4QXa4+RC4H1zD8Ut65gPQzhhh7I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl
rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:47:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125949, serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553
Validity
Not Before: Mar 1 08:47:07 2026 GMT
Not After : Mar 8 08:47:07 2026 GMT
Subject: CN=69a3fd0c-08d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:0d:12:3b:11:aa:0a:69:e2:e2:c1:67:cd:
64:5a:67:17:06:a8:43:11:06:60:13:fe:e0:96:64:
70:27:9a:02:29:80:74:48:ad:a9:3f:46:59:4e:15:
00:59:9a:99:3d:91:dc:1f:e6:99:fe:03:d5:3f:32:
aa:52:32:e7:75:13:23:db:eb:56:df:a9:d6:10:ef:
23:f4:7d:99:b8:87:cd:c9:08:63:e1:bd:4a:86:fe:
95:84:4e:c3:24:61:47:9e:ec:0d:44:93:65:db:a6:
37:be:ff:49:61:4d:9b:3c:e3:b8:23:f8:22:e8:b5:
ab:82:29:6a:49:61:e8:68:ff:1d:0c:47:a2:4e:fd:
5b:61:17:dc:2d:d3:36:b1:72:95:67:fa:58:dc:85:
36:d0:40:5a:56:7f:89:fd:22:77:d8:cb:e2:9f:c6:
cf:47:0f:82:96:03:e6:11:fe:6a:13:d8:51:db:ba:
10:35:51:24:3e:ab:9d:81:6a:79:70:16:a8:f2:ba:
da:5c:ac:82:ed:cf:15:a7:32:c0:f5:5b:7e:bc:b9:
db:b9:4e:cd:70:d5:f8:b4:a9:6c:44:30:4e:59:16:
70:c6:de:e0:c8:77:16:cc:0e:40:99:db:c6:8d:b2:
25:62:f9:fb:2a:58:99:23:fb:e4:03:2f:6f:a0:68:
c0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C6:77:80:79:CF:29:83:76:21:BA:7B:55:A0:84:F4:B3:81:4D:A3
X509v3 Authority Key Identifier:
keyid:5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:40:c2:2e:fd:fc:2b:e8:0c:69:9d:c9:27:9d:a5:85:0f:e6:
a3:1f:60:58:c7:e2:bb:5d:5b:d4:88:54:63:9e:5b:de:39:41:
f0:a8:47:0b:ab:bd:52:d2:a0:67:4e:fc:25:6f:ca:92:68:79:
70:0b:82:7a:53:52:d9:df:39:03:08:ec:0a:7b:28:50:e0:39:
73:e4:ea:11:4a:36:90:f7:ec:df:81:32:1a:d0:c5:dd:a1:58:
15:d3:83:8d:78:96:ed:e0:39:45:e5:87:82:cf:95:0e:51:3f:
dd:ef:13:e2:7b:28:dc:98:f7:e0:e6:5f:77:7d:37:ce:6e:d4:
25:76:fd:87:f4:a3:ff:a8:67:1b:bb:d3:7a:c3:5d:ad:84:d6:
74:b9:0f:ff:a4:ee:7d:f6:43:48:de:fa:b6:b3:82:88:97:1b:
c3:95:26:a4:8a:7d:2f:36:66:bc:16:76:ce:08:5d:97:1a:45:
cd:91:1d:e5:2c:d7:36:40:5c:14:14:63:75:4a:16:be:bf:1e:
b8:a2:97:0c:8e:e8:d5:b1:d0:69:7d:95:29:20:6f:a4:5c:6c:
b6:15:e6:f1:7c:5c:3d:5f:71:b4:5c:38:c8:20:57:03:91:a9:
10:80:11:b9:67:ca:98:f2:61:dc:ec:26:2d:e2:e6:92:55:40:
58:41:e8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:44 2026 by rpki-client