
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
File: wso-IoSMqAhkgVrBFxhWCJY6SW0.mft (raw, json)
Hash identifier: hJ4dPyQa4vpZxkh+XGHe6n8APi7ogYx2lbPtgC2ERas=
Subject key identifier: E0:BC:37:5F:5D:C1:AB:60:51:41:F4:6A:75:4F:5A:7C:5E:F2:74:1B
Authority key identifier: C2:CA:3E:22:84:8C:A8:08:64:81:5A:C1:17:18:56:08:96:3A:49:6D
Certificate issuer: /CN=A912D9B5/serialNumber=C2CA3E22848CA80864815AC117185608963A496D
Certificate serial: 07D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
Manifest number: 07C9
Signing time: Mon 02 Mar 2026 01:34:21 +0000
Manifest this update: Mon 02 Mar 2026 01:34:20 +0000
Manifest next update: Mon 09 Mar 2026 01:34:20 +0000
Files and hashes: 1: wso-IoSMqAhkgVrBFxhWCJY6SW0.crl (hash: dbYSLWY+qsHamecuk5qp93Rxqbb1x/jby6xitPMu0Jc=)
2: 5FE8E1B42E1F11EBA5577457C4F9AE02.roa (hash: 6kueNKFCDvbRIt9MsCQCwNZ1bJ/bv1ilvKlEhp+hHvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.crl
rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:34:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2002 (0x7d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D9B5, serialNumber=C2CA3E22848CA80864815AC117185608963A496D
Validity
Not Before: Mar 2 01:34:20 2026 GMT
Not After : Mar 9 01:34:20 2026 GMT
Subject: CN=69a4e91d-4b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:9b:df:eb:24:a4:f2:32:95:5b:ca:71:5d:
d6:55:ae:1f:a9:c0:91:17:2a:ce:8b:f2:99:53:8d:
bb:39:e9:a5:9c:05:92:96:1a:8f:15:e5:89:f8:18:
85:b6:46:47:d0:87:94:8e:29:2a:ab:f5:2e:c1:a8:
bd:68:34:68:a1:0c:e2:e2:8d:99:32:28:6e:ac:87:
8b:98:db:da:f0:7a:1b:40:62:bd:97:20:12:02:6e:
10:be:e5:2c:ce:48:50:01:b0:6b:c5:27:9a:f1:b5:
fc:a8:6c:02:2f:a8:32:06:62:71:7b:02:61:d4:9f:
dd:6b:27:b1:97:2a:df:d2:66:ab:d1:e0:17:ad:b7:
b2:9a:5e:9e:60:1f:48:02:97:2e:3b:0a:56:a6:7a:
b9:3d:02:73:da:da:6d:88:b9:20:06:14:5a:29:55:
f4:92:80:6d:36:b3:89:de:78:2f:94:84:d9:14:ca:
d4:31:e3:98:23:43:4d:e9:ad:08:37:f1:f0:e8:65:
39:84:e5:9a:40:3a:f7:42:5e:12:30:a0:c7:38:3c:
e3:fa:05:b6:83:b4:7f:cf:4e:ce:06:1d:d1:fb:55:
70:ef:63:cd:0a:56:dc:1c:c3:1e:ee:94:df:40:ba:
10:1f:a0:ff:37:b5:b9:ce:29:8a:84:93:46:36:99:
a3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BC:37:5F:5D:C1:AB:60:51:41:F4:6A:75:4F:5A:7C:5E:F2:74:1B
X509v3 Authority Key Identifier:
keyid:C2:CA:3E:22:84:8C:A8:08:64:81:5A:C1:17:18:56:08:96:3A:49:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:97:6c:a9:be:22:8f:2c:ec:98:b4:b5:d9:57:cd:72:f7:15:
64:72:1f:c0:e7:75:42:c6:ec:30:f9:6b:cb:b1:1f:f8:68:25:
5e:6e:02:64:a2:a8:ba:bb:21:c7:4c:11:c2:fc:06:00:30:00:
92:6f:2a:cc:d2:f9:2c:6f:e4:11:7b:5d:84:71:d3:e4:f0:79:
c0:4a:e2:94:3c:e4:01:4f:50:e2:00:80:43:bf:ba:48:29:cb:
a5:df:aa:13:50:0c:3b:f8:2e:6a:56:55:e4:b9:43:f9:17:b9:
da:eb:9a:97:f4:f1:f6:4a:1a:a3:06:19:79:45:51:27:da:b3:
98:a3:e3:03:93:67:83:97:94:a2:f6:64:61:a1:19:48:34:9c:
0a:70:a1:ce:1a:02:ad:18:c4:5d:a6:59:05:18:6a:28:e9:61:
b1:44:c5:2d:55:8d:9c:8c:0a:1a:9b:26:17:b5:29:1d:36:84:
94:6f:ed:6d:9b:54:8e:32:90:dc:07:07:38:35:21:ab:c9:b5:
e2:db:14:cf:6b:2b:45:94:2a:24:09:9e:38:e2:b5:f7:8e:22:
10:8c:23:2a:45:ea:fe:1f:7e:12:15:6f:0b:f9:ac:2f:2d:2e:
a8:dd:68:3f:14:8f:b7:05:8d:8c:05:c4:ff:f0:0b:a2:5b:24:
40:5a:26:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:11 2026 by rpki-client