
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
File: WfIhqdcBRydJAka2joLCl2fHDTg.mft (raw, json)
Hash identifier: Iv3c7vLrVS0tC3qtisqM4OvWowCNJzqwqtfjh1XRUH4=
Subject key identifier: 4B:D6:B8:2A:54:34:CF:DC:6A:C0:5C:D3:AE:71:57:AD:82:4F:98:A0
Authority key identifier: 59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38
Certificate issuer: /CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38
Certificate serial: 0351
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
Manifest number: 034C
Signing time: Sun 01 Mar 2026 01:48:26 +0000
Manifest this update: Sun 01 Mar 2026 01:48:25 +0000
Manifest next update: Sun 08 Mar 2026 01:48:25 +0000
Files and hashes: 1: WfIhqdcBRydJAka2joLCl2fHDTg.crl (hash: 9UM5TwKvB2IEnUPAVItHdbcO/KOLAtUUr4Fbv6ZsOl8=)
2: A033FFB4F7F511ECADEAB528C4F9AE02.roa (hash: S2C+VMQaXNDpZ4wrKaK1oLzxt+RZ0aWeTadlNJ8ZR5Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl
rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 849 (0x351)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CE21, serialNumber=59F221A9D7014727490246B68E82C29767C70D38
Validity
Not Before: Mar 1 01:48:25 2026 GMT
Not After : Mar 8 01:48:25 2026 GMT
Subject: CN=69a39aea-e950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:79:cd:ab:ad:60:57:94:b1:2a:f5:20:bb:55:
75:ef:f2:be:88:c9:04:7e:0c:4d:36:92:a0:69:bd:
73:2c:23:13:f6:3d:65:4e:85:c4:b5:a1:fe:39:e9:
46:b1:f6:87:85:c6:85:54:da:a1:e1:44:19:be:a7:
11:fd:5d:e2:15:e3:f0:b0:0b:bb:64:b7:e3:8a:0c:
44:f9:8b:25:fa:2e:ec:2f:8a:a7:87:9f:d4:9a:c8:
6f:63:45:4a:a4:76:f1:8d:8b:5a:c6:51:d8:7f:7a:
4d:c6:4a:d3:cb:ef:61:32:ce:21:fa:e0:55:01:d4:
90:72:d5:b5:e0:3a:55:75:bd:7c:48:a5:32:20:99:
f6:cf:5e:f6:11:01:48:e0:ce:48:06:62:f6:02:ca:
0c:f3:da:c8:14:d7:c2:26:bb:6a:a3:b9:c0:21:96:
69:29:46:f1:62:1a:b4:fc:d8:07:46:3b:26:db:cb:
56:6c:ec:bb:fa:82:0d:33:65:0d:92:47:55:8b:68:
e1:fe:a7:ec:43:7d:35:a7:27:24:9b:8a:db:2a:5b:
4e:d3:e4:e5:f2:cc:0a:39:8e:2d:d8:cb:6d:45:9f:
5c:fe:6e:55:83:f6:a4:11:1d:fe:a2:21:c4:70:d7:
51:92:ff:35:61:f1:d9:90:46:4b:94:87:8f:76:47:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D6:B8:2A:54:34:CF:DC:6A:C0:5C:D3:AE:71:57:AD:82:4F:98:A0
X509v3 Authority Key Identifier:
keyid:59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:9e:6a:f6:65:32:bd:74:c2:8e:91:99:29:d6:3f:38:77:f0:
0f:93:5b:49:5b:43:42:50:6f:08:f4:43:13:d9:e5:3b:af:f0:
e1:9a:1e:7c:b8:ee:7f:f5:c8:4d:8b:53:47:65:c1:f4:8b:19:
61:ed:5e:77:c7:71:30:63:1f:0c:af:b2:09:68:7d:84:8b:3a:
11:61:65:b2:b8:ec:2b:84:78:e0:76:96:16:61:1e:ee:f6:5a:
47:87:6b:fe:91:52:cb:60:f3:af:58:3f:32:22:b9:39:1d:b9:
23:56:56:a2:87:72:61:d8:a5:75:fd:e1:8a:88:21:7f:9e:9c:
7e:83:08:5a:6c:4a:e8:46:2a:a9:9b:1d:5d:ad:a9:70:41:c3:
ee:ab:1c:13:b6:bc:f1:de:e9:1d:8a:ae:d7:a1:52:2d:00:c7:
da:4c:d8:5b:cd:73:71:29:5d:69:9f:41:46:8b:d5:e0:df:d8:
dd:0a:6a:3a:d5:8d:5a:74:04:5f:39:8b:a3:a1:c4:85:f8:c4:
8e:8b:6c:29:13:5c:f1:08:e6:1a:95:0f:aa:2d:66:17:23:90:
78:fb:82:eb:7a:8b:71:9a:08:48:39:b6:3a:08:e9:b1:1d:b6:
65:55:8d:50:13:ca:2f:52:51:28:78:73:02:9a:b8:59:7e:d0:
7d:58:0a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:53:44 2026 by rpki-client