
$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
File: wLnBGxsWDzIbiuxM_N3a2JX8R94.mft (raw, json)
Hash identifier: q2a1kKDbMQkMD3Kj6kamEZG3woVUOzZFbKyEC4+qHJI=
Subject key identifier: 7B:DC:DE:68:10:B1:E8:DA:D3:B6:8B:00:1E:33:E5:60:B9:AD:73:0D
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial: 0F5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
Manifest number: 0F32
Signing time: Fri 12 Jun 2026 17:32:54 +0000
Manifest this update: Fri 12 Jun 2026 17:32:53 +0000
Manifest next update: Fri 19 Jun 2026 17:32:53 +0000
Files and hashes: 1: wLnBGxsWDzIbiuxM_N3a2JX8R94.crl (hash: lcPvql26T7Z82awOmrP4pNRiQUVaNaFFVZornj/yNgI=)
2: 2569C82ADC2311F08AE4CDD5626F56BC.roa (hash: +GvRnx4kGmdGhgUa7+g7/7rbplkPi3N501wiLsGfa8A=)
3: DC185D0CB0A111EE8C78834EC4F9AE02.roa (hash: HrbRpfH7PxwlVsWwc7Cd0leITyH+N1wvPWwJUeGi0Gc=)
4: A2E6430C595F11EF8C3B3D31C4F9AE02.roa (hash: pf0ymMCA7Kgme/fzn7Eyo+fP+Qj1bUavN39NpzB8q9I=)
5: E54A88DE595F11EFB2BAB431C4F9AE02.roa (hash: fixrg42NYphqE0nuKL6zNk+ZD0rf70DKNO2L7OI16Rg=)
6: 247099D084C611F09EBC052BC4F9AE02.roa (hash: +Q3AY1Q5BFNg+gcQ3gSJEdo3yWPoccjg5VLaMkkAwiE=)
7: A2369FBA595F11EF8C3B3D31C4F9AE02.roa (hash: /Wf9VOD/h7uLy8JdaHzkcRxgJZN0cMoOva7RxEI3K2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3934 (0xf5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912698E, serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Validity
Not Before: Jun 12 17:32:53 2026 GMT
Not After : Jun 19 17:32:53 2026 GMT
Subject: CN=6a2c42c5-c3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:a9:3c:0e:c8:25:f0:f0:a6:2b:6b:f6:93:
cc:66:ed:f3:24:44:8c:3e:29:93:b7:68:1d:e3:a9:
fb:4f:be:f3:41:74:27:29:5d:aa:d3:46:78:65:d9:
41:f9:ab:b0:64:85:34:e7:16:9a:7e:aa:39:0d:8b:
e8:10:34:0e:ba:93:b5:1c:91:5e:33:f8:37:28:dc:
5c:b6:9a:11:ba:75:a3:87:10:ec:49:63:f1:85:9b:
b4:c1:c4:ff:37:d6:ea:4a:4a:86:e8:43:a2:da:4e:
26:eb:f9:af:9a:fa:d2:c7:5a:e1:99:3b:7d:e0:86:
f8:99:05:5d:12:d0:d9:55:76:03:9d:b1:82:2e:3f:
d7:44:e5:6a:c9:20:18:f0:d5:2d:6b:23:ea:1f:55:
93:15:95:be:df:8f:7c:9d:a8:41:b2:3f:9d:bd:6a:
a8:d3:2a:c3:0a:53:ee:b1:cc:5f:fa:61:89:25:8f:
c4:c1:7a:55:37:bc:8e:5b:12:b8:f5:5c:fc:60:c7:
06:e3:af:2f:f0:f3:a2:09:80:22:f3:9d:c5:47:de:
b3:9f:19:85:f9:28:37:87:1b:f4:0b:ef:0b:31:ec:
4c:5c:e9:70:da:94:07:a8:f7:f4:a6:7c:50:de:ed:
13:ff:3f:a1:70:f0:18:df:c8:31:ca:fd:63:83:72:
68:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DC:DE:68:10:B1:E8:DA:D3:B6:8B:00:1E:33:E5:60:B9:AD:73:0D
X509v3 Authority Key Identifier:
keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:b8:b2:c0:65:73:e7:a8:c1:0f:e3:c1:3a:bb:09:f5:12:ff:
c3:aa:91:23:18:0e:8c:e1:d2:76:22:2c:ab:bf:6b:49:ad:8a:
00:6b:da:20:51:21:25:e1:16:f8:20:c0:4d:69:33:d3:c4:e1:
0b:75:ca:4b:8d:0d:e5:1f:1a:85:1b:4f:54:ae:b2:9b:6e:0e:
82:d1:ea:50:de:e2:63:95:d6:83:1e:71:d1:34:5a:a9:ce:a8:
08:99:cf:02:02:49:21:3f:9d:d7:b2:b3:59:11:a6:51:f8:ee:
ee:69:ba:94:16:bd:29:48:2a:32:c5:48:66:9c:17:3a:ab:cb:
14:ab:e0:ac:3c:d4:07:f9:6b:7d:85:78:17:74:06:48:b4:b6:
cb:bb:30:56:de:71:f0:8b:2d:14:6e:4f:76:55:08:15:a8:1f:
e5:9d:74:c5:c4:81:25:aa:cb:40:02:8c:dc:32:5e:0b:78:e9:
59:0e:7a:dc:be:31:5d:c9:b3:51:52:23:7b:52:c2:eb:39:3b:
c2:3f:1c:d1:9a:fd:45:cd:2f:f8:2e:2b:2a:08:ab:81:5e:52:
55:76:9d:3f:b2:e2:53:60:8e:49:13:f4:6d:4e:87:2a:31:0b:
be:3a:81:bc:36:52:94:b9:fd:fe:f9:e5:25:95:b3:2d:35:4d:
ad:bb:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:07:57 2026 by rpki-client