
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
File: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft (raw, json)
Hash identifier: euw2AUuko1H2U+3Y7vjrcN8toGc4P8tvjLboZnTwTq4=
Subject key identifier: 50:C3:54:10:4F:50:80:5D:B4:11:57:86:F9:CF:DB:19:98:88:75:74
Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43
Certificate issuer: /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
Manifest number: 01BD
Signing time: Fri 17 Apr 2026 03:38:57 +0000
Manifest this update: Fri 17 Apr 2026 03:38:56 +0000
Manifest next update: Fri 24 Apr 2026 03:38:56 +0000
Files and hashes: 1: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl (hash: 2IbHn+SALhEFXBtBGifdfEE3bV9nG/pxOM21oKraJKI=)
2: D973D5BE97D711EEA1B09A33C4F9AE02.roa (hash: vK6UgwvhHzxe7wOhZkBOrNQ5FiwefRM4NQVFNi53pvw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl
rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F437, serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
Validity
Not Before: Apr 17 03:38:56 2026 GMT
Not After : Apr 24 03:38:56 2026 GMT
Subject: CN=69e1ab51-b9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c0:ff:af:f8:b9:bc:ca:f1:3d:fa:cb:9f:f7:
09:50:62:d5:41:d8:91:98:0d:fb:0c:e0:cd:0f:4c:
fa:78:74:6d:2f:d3:b0:33:a7:3b:36:6c:8c:db:0b:
db:00:62:18:1e:69:19:5d:01:38:52:e7:aa:f0:4c:
49:3b:44:f0:e6:c7:22:3f:de:ad:cf:eb:3d:3a:00:
ab:ea:e9:e9:2f:10:2b:ae:0c:78:1b:90:04:40:ca:
1e:23:3c:0f:70:f4:77:15:9b:58:41:59:43:01:8c:
cb:b9:8f:2a:9c:2d:b9:57:ee:2f:ba:33:9f:14:dc:
ae:2d:af:da:be:84:97:ff:11:a4:35:91:fe:88:ea:
88:5e:30:d4:80:b5:aa:14:33:90:5e:3b:1a:95:12:
e3:0c:2c:5a:6f:d4:4d:f6:ed:4f:4d:aa:cc:5b:48:
d8:7c:c4:6e:34:4d:d0:50:be:61:f7:74:11:78:19:
3b:2e:c7:a0:1a:3a:3b:ef:05:0c:db:3e:54:31:cf:
10:c1:1d:07:b3:24:c9:61:04:4c:29:81:b5:9c:23:
76:42:5f:f4:2f:40:a4:5e:a4:1f:24:9a:bc:91:04:
ad:fb:97:19:86:1d:f5:6a:37:fe:63:5e:28:2f:1e:
56:5b:00:b0:07:ba:2e:c3:c8:ff:46:a1:a8:6a:fa:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C3:54:10:4F:50:80:5D:B4:11:57:86:F9:CF:DB:19:98:88:75:74
X509v3 Authority Key Identifier:
keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:4e:b0:6d:ee:8b:d1:82:2b:da:2e:18:6d:d8:b4:3d:60:f5:
84:a5:53:fd:3c:ef:09:ff:41:71:2c:2d:28:f5:3e:5b:e8:22:
44:06:0f:b0:9e:90:ea:dc:eb:f9:df:1b:3a:3d:56:32:ab:8f:
2d:9c:f0:c8:d0:90:91:6d:e3:78:9a:e2:5c:33:67:49:40:00:
b0:5b:0e:6c:a9:d7:eb:1c:dd:66:b6:a0:43:66:5b:95:e7:81:
11:fa:08:90:f0:17:bf:0f:34:18:48:b3:b7:3e:1d:f0:ee:04:
e4:98:6f:cd:00:99:90:55:cc:78:16:72:f5:74:7a:b2:8c:5d:
d2:37:03:16:75:bb:53:d6:be:cf:43:b1:d5:45:41:59:d9:f6:
91:95:10:a1:44:84:12:e5:46:c5:81:ef:5f:2a:c7:47:29:dd:
ba:f9:22:76:11:b3:81:35:ab:a6:e4:b2:cb:76:df:93:f4:48:
22:e3:78:87:aa:be:45:c7:d6:12:ba:bc:f4:e2:c4:69:78:1b:
a5:7b:1d:1b:97:06:a4:f6:6c:d4:6f:c8:e4:3d:2b:9b:cd:61:
46:b7:0c:3f:4a:1d:e0:7b:3a:aa:f4:28:68:c5:2e:25:d3:60:
44:52:ca:c0:de:72:5a:be:cc:bf:10:38:e9:1c:5e:c1:84:e3:
f3:09:c5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:38:33 2026 by rpki-client