
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft
File: wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft (raw, json)
Hash identifier: qrQD/kLOr49rSfh7uM060/LDkWsu4VXVM8vB7GHKJsA=
Subject key identifier: F7:51:D1:E0:0E:55:50:01:00:A2:DF:74:99:F3:54:4D:77:63:CF:C1
Authority key identifier: C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59
Certificate issuer: /CN=A912B85B/serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59
Certificate serial: 01CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft
Manifest number: 01C5
Signing time: Sat 13 Jun 2026 03:48:03 +0000
Manifest this update: Sat 13 Jun 2026 03:48:02 +0000
Manifest next update: Sat 20 Jun 2026 03:48:02 +0000
Files and hashes: 1: wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl (hash: mKHxipMzvV9IykOInkHHAmOcNqHLa1ro7YuuyW4Ui+M=)
2: 7DE2804AB4BC11EEA02E9A19C4F9AE02.roa (hash: XshIrrv6aloyMNxWY1ygZTA+sPXukhSReGQFQnVlJxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl
rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B85B, serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59
Validity
Not Before: Jun 13 03:48:02 2026 GMT
Not After : Jun 20 03:48:02 2026 GMT
Subject: CN=6a2cd2f3-27bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:e1:a8:39:75:ec:8f:0c:9a:ea:c0:d5:4f:
92:dc:c5:c6:74:ba:66:e1:44:7e:4e:8b:73:3f:89:
90:81:a2:eb:fb:38:91:d0:11:d6:08:87:88:0b:a6:
f9:2d:3a:b5:14:c2:d7:bb:5e:e2:3f:aa:2a:bc:9f:
59:04:e2:92:87:b6:7b:f9:4f:e5:c3:6c:91:71:df:
c7:38:08:74:16:8b:4f:9e:8a:98:0b:b2:09:87:e2:
27:65:be:d8:3c:0d:fb:26:1e:57:00:38:ce:9c:d9:
cd:b9:87:78:c3:a6:10:6d:e9:8b:fa:2e:4c:24:21:
52:e5:dc:97:04:3b:e7:cf:01:97:8b:0d:9b:69:7d:
62:cd:e5:3f:e6:d4:c3:c5:91:a9:b6:91:2b:78:e6:
87:3d:38:49:c2:54:f1:20:08:1a:d5:27:48:ca:98:
20:a1:73:8e:72:33:6d:ee:25:a2:17:76:b8:0d:b0:
26:05:04:74:e7:fa:cd:d9:d7:6b:7f:9e:6e:a6:f3:
1b:17:3b:bb:39:0f:77:c5:f3:6e:27:3b:c7:4f:36:
c2:68:2e:d2:49:0d:36:bb:33:53:2c:91:41:07:28:
14:e0:e8:9f:b9:d1:85:b7:7d:ed:97:a3:3d:8a:b6:
86:0d:62:78:89:0d:89:c8:b0:86:d7:f9:77:a8:7c:
e5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:51:D1:E0:0E:55:50:01:00:A2:DF:74:99:F3:54:4D:77:63:CF:C1
X509v3 Authority Key Identifier:
keyid:C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:c4:f9:f2:0d:3e:d6:84:7d:28:d5:89:ea:99:1a:39:4b:9c:
c2:fe:9f:8a:1b:98:ee:cd:a2:92:02:ff:1f:ed:64:44:41:82:
18:c1:55:cd:45:55:e0:c9:bf:88:b5:10:20:cf:74:6f:f7:72:
ea:93:50:8d:fd:19:1a:00:29:27:16:e6:14:7e:a3:5b:58:e7:
95:9b:80:a0:ec:23:a8:84:e5:8b:73:69:12:42:a1:23:33:e5:
82:51:ed:45:95:8e:f1:a1:25:d9:be:75:3a:74:5e:6a:59:1f:
b7:26:54:07:e6:04:22:c5:84:76:21:91:72:7f:db:0b:11:13:
21:b5:c6:63:67:e1:14:9c:f5:8c:19:b6:3d:07:76:ee:a8:1c:
2f:e3:46:4c:83:f2:21:00:f9:0f:a0:d4:41:aa:63:33:8d:80:
b8:f1:a6:01:03:51:a0:c6:e6:9c:39:53:47:14:b1:b5:4a:52:
c1:43:3e:40:b0:e9:a8:9c:42:1e:5d:8e:f1:d5:ba:04:db:6d:
8e:0d:fa:7c:02:e3:ad:df:4d:9b:4a:98:20:bd:0d:09:47:3e:
ee:85:c6:de:90:e9:e1:a9:7c:bf:39:b6:7e:5f:8d:66:a3:5a:
92:9c:b3:10:6d:fd:40:5d:e8:a8:4b:b9:fb:b4:4b:a9:32:e2:
7f:5b:d6:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI4NUIxMTAvBgNVBAUTKEMyNzVGN0I4QUVDQzI5NDhENEI0QkE5OTlGQTlDMEUy
QUQ1NEVBNTkwHhcNMjYwNjEzMDM0ODAyWhcNMjYwNjIwMDM0ODAyWjAYMRYwFAYD
VQQDEw02YTJjZDJmMy0yN2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo//hqDl17I8MmurA1U+S3MXGdLpm4UR+TotzP4mQgaLr+ziR0BHWCIeIC6b5
LTq1FMLXu17iP6oqvJ9ZBOKSh7Z7+U/lw2yRcd/HOAh0FotPnoqYC7IJh+InZb7Y
PA37Jh5XADjOnNnNuYd4w6YQbemL+i5MJCFS5dyXBDvnzwGXiw2baX1izeU/5tTD
xZGptpEreOaHPThJwlTxIAga1SdIypggoXOOcjNt7iWiF3a4DbAmBQR05/rN2ddr
f55upvMbFzu7OQ93xfNuJzvHTzbCaC7SSQ02uzNTLJFBBygU4OifudGFt33tl6M9
iraGDWJ4iQ2JyLCG1/l3qHzlwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPdR0eAO
VVABAKLfdJnzVE13Y8/BMB8GA1UdIwQYMBaAFMJ197iuzClI1LS6mZ+pwOKtVOpZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjg1Qi8yMDQ3RDc0NkI0
QkMxMUVFOEQwM0E1MThDNEY5QUUwMi93blgzdUs3TUtValV0THFabjZuQTRxMVU2
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3duWDN1SzdNS1VqVXRMcVpuNm5BNHExVTZsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Qjg1Qi8yMDQ3RDc0NkI0QkMxMUVFOEQwM0E1MThDNEY5QUUwMi93blgzdUs3TUtV
alV0THFabjZuQTRxMVU2bGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMsT58g0+1oR9KNWJ6pkaOUucwv6fihuY7s2ikgL/H+1kREGCGMFVzUVV4Mm/
iLUQIM90b/dy6pNQjf0ZGgApJxbmFH6jW1jnlZuAoOwjqITli3NpEkKhIzPlglHt
RZWO8aEl2b51OnRealkftyZUB+YEIsWEdiGRcn/bCxETIbXGY2fhFJz1jBm2PQd2
7qgcL+NGTIPyIQD5D6DUQapjM42AuPGmAQNRoMbmnDlTRxSxtUpSwUM+QLDpqJxC
Hl2O8dW6BNttjg36fALjrd9Nm0qYIL0NCUc+7oXG3pDp4al8vzm2fl+NZqNakpyz
EG39QF3oqEu5+7RLqTLif1vW0g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:47:21 2026 by rpki-client