
$ rpki-client -vvf rpki.apnic.net/member_repository/A912781D/ABCC742EA3D111F09C66FD30C4F9AE02/wxp5GPD1nLri7aI2IGd8h2r1da4.mft
File: wxp5GPD1nLri7aI2IGd8h2r1da4.mft (raw, json)
Hash identifier: BwzLbcNK++vOPtHrPb/S5l6cIn+bXV+gsrmpT5EXODs=
Subject key identifier: 01:4D:4B:01:AF:E4:63:C3:65:35:C4:6B:8E:CC:55:32:55:21:45:FF
Authority key identifier: C3:1A:79:18:F0:F5:9C:BA:E2:ED:A2:36:20:67:7C:87:6A:F5:75:AE
Certificate issuer: /CN=A912781D/serialNumber=C31A7918F0F59CBAE2EDA23620677C876AF575AE
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wxp5GPD1nLri7aI2IGd8h2r1da4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912781D/ABCC742EA3D111F09C66FD30C4F9AE02/wxp5GPD1nLri7aI2IGd8h2r1da4.mft
Manifest number: 53
Signing time: Sun 01 Mar 2026 09:40:44 +0000
Manifest this update: Sun 01 Mar 2026 09:40:44 +0000
Manifest next update: Sun 08 Mar 2026 09:40:44 +0000
Files and hashes: 1: wxp5GPD1nLri7aI2IGd8h2r1da4.crl (hash: rAYblvRL2FBMekhduOyHWT/yafB5xB47zP+YKS+Dzu4=)
2: 90C6C65EA4D311F084484F52C4F9AE02.roa (hash: 5dJMOYkKslfEA5jZ4I47oBqAHVS843EtSYlrjnxa9Uk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912781D/ABCC742EA3D111F09C66FD30C4F9AE02/wxp5GPD1nLri7aI2IGd8h2r1da4.crl
rsync://rpki.apnic.net/member_repository/A912781D/ABCC742EA3D111F09C66FD30C4F9AE02/wxp5GPD1nLri7aI2IGd8h2r1da4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wxp5GPD1nLri7aI2IGd8h2r1da4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:40:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912781D, serialNumber=C31A7918F0F59CBAE2EDA23620677C876AF575AE
Validity
Not Before: Mar 1 09:40:44 2026 GMT
Not After : Mar 8 09:40:44 2026 GMT
Subject: CN=69a4099c-9df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:43:89:66:ef:75:6e:79:58:bd:36:a8:f6:9e:
56:db:46:17:38:1d:b6:54:a7:11:bb:00:1f:67:ef:
7e:ba:21:e7:fb:04:9b:0c:bb:c9:ea:42:0d:cf:ab:
b0:28:35:31:d1:b8:61:68:70:1f:0e:21:e6:d9:30:
c0:db:c6:55:ac:d7:9a:c3:61:78:94:c6:a8:6e:39:
78:ab:39:18:34:e5:3e:db:78:4d:03:28:02:05:02:
40:80:6a:9b:68:42:f9:68:f7:1d:4e:c6:73:7f:94:
c4:15:57:ac:72:0d:92:8a:fe:f1:8e:a4:79:be:d7:
95:7b:02:5d:ad:96:03:df:10:3f:9c:7b:cf:c4:cb:
fc:af:b7:4f:d2:5c:bc:1b:29:a2:15:d2:f6:d4:a7:
13:a1:b9:b3:62:40:48:3b:61:a3:42:de:65:ef:30:
68:0c:27:41:fe:4a:13:b5:ba:73:2d:57:60:3e:62:
49:49:51:c0:b2:5f:e8:ed:8c:74:12:d6:96:b5:61:
b1:98:f2:d7:d9:96:19:dd:78:97:2e:f1:79:f2:b9:
39:4f:03:32:7a:59:8c:01:14:5a:ab:96:37:27:4d:
74:55:e5:0c:f0:51:7a:e7:24:f9:d1:57:7a:29:fc:
4a:17:c2:73:e4:ba:78:bf:74:87:14:e4:dd:80:c8:
ca:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4D:4B:01:AF:E4:63:C3:65:35:C4:6B:8E:CC:55:32:55:21:45:FF
X509v3 Authority Key Identifier:
keyid:C3:1A:79:18:F0:F5:9C:BA:E2:ED:A2:36:20:67:7C:87:6A:F5:75:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912781D/ABCC742EA3D111F09C66FD30C4F9AE02/wxp5GPD1nLri7aI2IGd8h2r1da4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wxp5GPD1nLri7aI2IGd8h2r1da4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912781D/ABCC742EA3D111F09C66FD30C4F9AE02/wxp5GPD1nLri7aI2IGd8h2r1da4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:30:2e:14:0d:a4:d0:fc:ab:ac:1a:fc:ba:c5:c4:4c:4d:08:
2e:22:80:6b:a4:cd:e0:38:14:fe:fa:c8:0b:9c:b1:37:8b:7a:
f3:2d:d2:8c:7e:8c:5c:a8:a7:59:5d:69:6c:2b:ad:e2:40:a4:
28:d7:30:7a:af:a0:a1:5a:e6:2b:c6:5c:b4:80:a7:49:94:c9:
37:78:95:99:95:43:f6:3f:38:05:d4:9f:af:2c:ee:f2:26:4e:
d0:46:1b:97:95:c2:ee:12:7f:3a:e5:23:ca:f0:a7:cf:87:4d:
8d:46:97:6d:9e:de:0d:b5:79:cc:e5:05:a1:67:5d:aa:a8:4c:
b2:45:0a:71:fa:cc:42:51:e9:39:ce:ff:0a:ab:1a:06:ca:4e:
78:4c:15:0d:7a:55:e6:88:b2:66:cc:73:73:f5:b9:ac:4c:42:
2c:cb:fa:39:2a:88:5f:20:73:c9:26:89:37:e3:d1:6f:d8:5c:
f6:5e:3b:c3:35:4a:7b:00:d0:88:c4:ee:75:b5:ec:f2:52:e4:
ce:13:b4:90:21:50:89:54:33:35:60:11:2c:93:19:c4:93:36:
b8:79:09:fd:0d:de:32:b9:10:39:47:fb:98:8f:fe:c2:9b:54:
94:fe:fc:bd:56:64:28:e7:40:6a:06:f5:d0:e9:2b:43:cf:d4:
85:39:f6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:05 2026 by rpki-client