
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
File: wfSjmGHK0883hCGN7aegXoUvIn8.mft (raw, json)
Hash identifier: rGRsC3IFV6yOtimX5mvH1ybAH9WFDKUQldSNgYr9nxY=
Subject key identifier: 8E:38:1B:A3:95:A2:56:F1:10:A9:03:6B:F0:D0:C5:4F:0D:22:41:CF
Authority key identifier: C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F
Certificate issuer: /CN=A912DB97/serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
Manifest number: C7
Signing time: Fri 17 Apr 2026 06:34:44 +0000
Manifest this update: Fri 17 Apr 2026 06:34:44 +0000
Manifest next update: Fri 24 Apr 2026 06:34:44 +0000
Files and hashes: 1: wfSjmGHK0883hCGN7aegXoUvIn8.crl (hash: xcU8SozZ3NNs+zaLriCxzs/x1ZpLet8de/E7Cjd3DMs=)
2: 28F87D180A1611F0BC8FD10DC4F9AE02.roa (hash: m3TKEHo+4f4PhVTsk8vFCNaTsfWtmI9Nex70/u6yw60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl
rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DB97, serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F
Validity
Not Before: Apr 17 06:34:44 2026 GMT
Not After : Apr 24 06:34:44 2026 GMT
Subject: CN=69e1d484-8b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3f:e9:90:f4:9d:d5:c0:ec:80:a6:16:c3:49:
27:7b:94:10:ed:46:d7:35:93:d5:69:b2:92:2f:38:
7a:8d:ea:9a:a9:26:67:a1:a5:7e:cb:78:8e:ab:6a:
dc:7e:4d:d4:2f:49:d6:27:42:b2:18:05:a4:08:5b:
74:14:5f:b2:8a:a0:60:eb:72:5e:94:13:de:24:b9:
13:de:ef:da:d7:f3:8c:1a:a9:23:ab:86:2e:56:cb:
4f:1f:42:21:d8:9d:39:24:5f:46:96:1a:84:e9:94:
ea:86:b1:1d:d3:a7:6a:80:16:21:1e:03:5e:ba:22:
fc:57:0f:8d:7c:f6:ec:ce:7c:dc:80:98:45:9e:cd:
b7:fa:65:34:19:ea:02:57:44:49:f9:9f:4b:38:ab:
fc:c5:ec:c3:bb:ef:4f:54:68:6f:6f:24:b7:34:75:
c8:09:b8:50:3c:e7:7b:10:ef:04:a7:d3:bf:63:8c:
bd:bf:64:b2:f4:81:22:73:f7:1b:0e:af:e9:47:b9:
1c:7b:86:4d:d6:85:eb:2f:66:b1:b2:18:35:f6:c2:
c6:08:bc:0b:5a:a3:5e:89:8c:58:e1:1c:73:07:b4:
bd:71:c2:73:27:c7:ec:33:75:fd:f7:92:6a:64:cb:
7e:d3:4c:0c:e8:25:38:ee:d1:c1:f4:de:8e:1a:e0:
a9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:38:1B:A3:95:A2:56:F1:10:A9:03:6B:F0:D0:C5:4F:0D:22:41:CF
X509v3 Authority Key Identifier:
keyid:C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:20:ec:a1:63:98:5d:6d:15:79:38:f1:b1:39:22:fb:16:cc:
c6:33:49:83:6b:ee:47:cc:9e:3c:62:0a:8e:12:c8:ed:2a:13:
dd:ad:7b:6d:8e:59:26:03:f0:4f:d3:4b:80:40:d3:fe:61:a2:
68:2c:ef:62:f8:48:a4:cc:77:61:4e:18:e3:d0:b1:ef:c1:10:
92:b2:a4:19:6c:0f:3a:59:cb:f3:2e:7d:43:96:f5:0c:4c:50:
f2:75:42:dd:12:95:fb:91:63:96:01:c1:e7:09:79:72:e4:b5:
20:54:f2:16:a5:aa:4a:6c:d6:9e:2f:49:28:5d:78:ab:91:e8:
bb:29:0f:e2:35:b7:93:d8:de:b1:47:b2:7c:7b:1b:d2:ff:b3:
16:0e:1c:19:6f:47:42:63:c6:57:63:6b:41:2f:2f:1b:a0:53:
ac:5d:d8:80:2e:a4:29:14:91:07:4e:aa:dd:0d:65:4c:05:d7:
62:c1:d2:e8:40:e7:39:c5:3f:e8:37:7c:22:ab:01:96:b9:55:
74:1d:91:b6:da:62:d7:8e:78:b5:74:c9:a4:83:8c:37:a1:3d:
7e:b6:04:4b:e7:1f:e8:a2:82:a4:b1:a0:d6:ab:a0:05:0f:3b:
ba:44:2f:45:ba:20:7c:20:d9:99:93:d4:61:f4:f9:0e:0d:b6:
67:c3:7f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:55 2026 by rpki-client