
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft
File: 0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft (raw, json)
Hash identifier: qvzyJKivI3dvTwenXMaZgFFFYkCTJDKwx4wPmhqX6MI=
Subject key identifier: 7A:57:AC:BE:33:58:25:B5:E5:73:03:30:07:1C:1B:C5:C3:58:19:6A
Authority key identifier: D3:08:0A:82:8D:49:88:91:51:00:75:0F:C7:EA:06:02:EE:FF:65:57
Certificate issuer: /CN=A912C2EB/serialNumber=D3080A828D4988915100750FC7EA0602EEFF6557
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft
Manifest number: 31
Signing time: Sun 27 Sep 2026 09:17:02 +0000
Manifest this update: Sun 27 Sep 2026 09:17:01 +0000
Manifest next update: Sun 04 Oct 2026 09:17:01 +0000
Files and hashes: 1: 0wgKgo1JiJFRAHUPx-oGAu7_ZVc.crl (hash: lFbwnMrkvnjtbgNio1HyTJ7V0CEsJjIKIzhuc0L7crA=)
2: A23E3D0C738811F19D7E75576EA30FBC.roa (hash: 28gpiKKu2/NV1BJk3iIiC7QtFrNAkWy/xA/g4Bxzm1M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.crl
rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 09:17:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2EB, serialNumber=D3080A828D4988915100750FC7EA0602EEFF6557
Validity
Not Before: Sep 27 09:17:01 2026 GMT
Not After : Oct 4 09:17:01 2026 GMT
Subject: CN=6ab8df0e-4aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:26:e0:06:12:0a:12:ff:fb:50:d4:87:51:
6d:09:f3:41:1b:c4:58:3e:a9:b3:b1:f0:ac:eb:35:
25:19:69:fe:1e:47:bc:ea:49:db:e2:95:56:b7:11:
45:fb:d7:1c:eb:c4:ab:c6:a4:b0:4d:0d:49:9b:70:
4b:0e:81:43:76:3a:45:76:27:23:b6:b6:e7:95:5c:
70:13:00:88:5d:43:78:8d:1c:55:f0:7d:82:7a:95:
7e:05:42:bc:8b:e7:f6:80:15:f7:c1:26:7a:99:0c:
08:4e:03:7a:91:b1:7c:00:0c:13:be:77:2b:b5:8c:
ba:30:7c:2f:b6:29:f1:b4:5c:06:10:3f:b9:fe:53:
72:2b:16:b2:0d:54:66:59:08:04:16:62:d1:fe:bc:
79:b2:4e:79:00:e1:49:23:6a:89:f4:dc:52:f1:c1:
36:21:c8:9b:f8:3c:96:65:bd:22:57:09:5c:2d:da:
5a:c5:d6:4f:e6:4e:5a:57:de:99:17:9f:26:51:ee:
16:da:39:c6:7f:b9:d7:9f:7f:5c:d1:c0:7c:4f:16:
ce:4a:cb:57:54:0a:37:df:0f:08:0c:36:fb:77:72:
a7:ee:05:36:5b:ea:46:31:44:67:32:a4:0b:10:85:
c1:a3:83:74:63:1f:70:c6:35:b4:50:8a:97:8b:dc:
39:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:57:AC:BE:33:58:25:B5:E5:73:03:30:07:1C:1B:C5:C3:58:19:6A
X509v3 Authority Key Identifier:
keyid:D3:08:0A:82:8D:49:88:91:51:00:75:0F:C7:EA:06:02:EE:FF:65:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2EB/0522BBD8738811F19116AADD6DA30FBC/0wgKgo1JiJFRAHUPx-oGAu7_ZVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:18:53:12:67:a3:0f:43:c4:f6:b4:45:5f:bd:64:8a:8d:e2:
73:a6:d0:dd:14:98:59:17:68:59:ff:eb:13:c9:c9:e4:b9:f8:
f5:45:f5:de:cd:5d:6c:6c:41:92:10:f0:73:f6:5d:45:14:a5:
a4:7f:72:0d:62:6b:3e:d5:fc:b2:a2:27:03:d5:fe:e6:18:0c:
1d:be:f4:95:b7:27:28:38:47:e7:f7:b9:89:5d:a5:cd:aa:25:
06:ef:6c:3e:58:c7:df:3c:72:3c:3d:31:d5:ab:ce:e2:26:6b:
bd:0d:79:ce:a1:38:76:a8:53:d6:5c:82:85:89:cb:15:6b:00:
e0:21:0d:41:5a:9d:93:7d:ad:56:cb:4d:de:76:ea:c0:a5:af:
d1:c6:5c:20:3a:19:ee:fa:c7:04:c3:ab:81:be:92:4e:2e:53:
b5:db:12:7c:40:9c:54:1f:f8:03:9d:53:e5:16:2d:1f:12:53:
52:4d:eb:95:48:51:4a:40:d8:da:8f:b1:8e:55:02:be:00:c3:
20:d4:29:2b:57:c9:4d:7a:68:f3:3a:d9:43:c3:89:81:5d:b8:
f8:f4:44:9f:55:71:26:20:47:82:c0:bd:ef:b3:a8:a8:02:bc:
cc:af:7a:eb:10:25:02:d6:dc:7b:19:7f:cb:ea:c9:8f:8a:e3:
ea:9c:ae:e8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
QzJFQjExMC8GA1UEBRMoRDMwODBBODI4RDQ5ODg5MTUxMDA3NTBGQzdFQTA2MDJF
RUZGNjU1NzAeFw0yNjA5MjcwOTE3MDFaFw0yNjEwMDQwOTE3MDFaMBgxFjAUBgNV
BAMTDTZhYjhkZjBlLTRhYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrrSbgBhIKEv/7UNSHUW0J80EbxFg+qbOx8KzrNSUZaf4eR7zqSdvilVa3EUX7
1xzrxKvGpLBNDUmbcEsOgUN2OkV2JyO2tueVXHATAIhdQ3iNHFXwfYJ6lX4FQryL
5/aAFffBJnqZDAhOA3qRsXwADBO+dyu1jLowfC+2KfG0XAYQP7n+U3IrFrINVGZZ
CAQWYtH+vHmyTnkA4Ukjaon03FLxwTYhyJv4PJZlvSJXCVwt2lrF1k/mTlpX3pkX
nyZR7hbaOcZ/udeff1zRwHxPFs5Ky1dUCjffDwgMNvt3cqfuBTZb6kYxRGcypAsQ
hcGjg3RjH3DGNbRQipeL3DnBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUelesvjNY
JbXlcwMwBxwbxcNYGWowHwYDVR0jBBgwFoAU0wgKgo1JiJFRAHUPx+oGAu7/ZVcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDMkVCLzA1MjJCQkQ4NzM4
ODExRjE5MTE2QUFERDZEQTMwRkJDLzB3Z0tnbzFKaUpGUkFIVVB4LW9HQXU3X1pW
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMHdnS2dvMUppSkZSQUhVUHgtb0dBdTdfWlZjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD
MkVCLzA1MjJCQkQ4NzM4ODExRjE5MTE2QUFERDZEQTMwRkJDLzB3Z0tnbzFKaUpG
UkFIVVB4LW9HQXU3X1pWYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBKGFMSZ6MPQ8T2tEVfvWSKjeJzptDdFJhZF2hZ/+sTycnkufj1RfXezV1sbEGS
EPBz9l1FFKWkf3INYms+1fyyoicD1f7mGAwdvvSVtycoOEfn97mJXaXNqiUG72w+
WMffPHI8PTHVq87iJmu9DXnOoTh2qFPWXIKFicsVawDgIQ1BWp2Tfa1Wy03edurA
pa/RxlwgOhnu+scEw6uBvpJOLlO12xJ8QJxUH/gDnVPlFi0fElNSTeuVSFFKQNja
j7GOVQK+AMMg1CkrV8lNemjzOtlDw4mBXbj49ESfVXEmIEeCwL3vs6ioArzMr3rr
ECUC1tx7GX/L6smPiuPqnK7o
-----END CERTIFICATE-----
Generated at Mon Sep 28 05:28:48 2026 by rpki-client