
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
File: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft (raw, json)
Hash identifier: b4f1WbsMLW/qE7O9jqoMCdR5GiG0RbU6nuThdULHvoU=
Subject key identifier: 87:05:E0:DF:8B:0E:D5:05:67:0D:A4:75:B5:50:B0:C8:B1:20:19:D7
Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43
Certificate issuer: /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
Certificate serial: 01F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
Manifest number: 01EF
Signing time: Mon 27 Jul 2026 04:59:52 +0000
Manifest this update: Mon 27 Jul 2026 04:59:52 +0000
Manifest next update: Mon 03 Aug 2026 04:59:52 +0000
Files and hashes: 1: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl (hash: AWkPnxxk4oQmYPKg2yAzpyl2zG+jiqmdxIX72Q79NKo=)
2: D973D5BE97D711EEA1B09A33C4F9AE02.roa (hash: vK6UgwvhHzxe7wOhZkBOrNQ5FiwefRM4NQVFNi53pvw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl
rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:59:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F437, serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
Validity
Not Before: Jul 27 04:59:52 2026 GMT
Not After : Aug 3 04:59:52 2026 GMT
Subject: CN=6a66e5c8-43a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:86:4e:01:d3:ab:94:95:4f:66:01:be:73:84:
37:41:be:b7:7b:ff:25:52:e1:72:a8:f6:e8:c3:ab:
b4:5f:12:80:12:02:ab:98:cd:8c:f7:a4:7c:1a:a9:
d4:a2:60:8f:8a:17:51:94:94:73:c4:58:28:dc:02:
ed:47:ea:49:ff:ea:22:8d:c3:d6:f0:82:ea:43:53:
f3:f4:06:39:38:80:6a:82:ee:b9:df:ad:8f:51:e8:
53:10:5f:74:4c:e8:ad:ea:25:2d:83:8b:19:f9:46:
ff:6e:df:82:4c:8a:6f:78:5a:c1:d3:97:45:64:a9:
ab:af:67:e1:67:97:24:ce:c9:13:98:8d:18:ff:c9:
97:22:eb:2d:2c:2d:96:f1:51:13:be:17:7b:d4:cd:
f5:7f:23:22:d0:e3:8f:10:02:16:0b:de:2e:f8:b3:
c6:a3:26:d6:69:f0:1c:e9:26:4a:2f:42:a3:3d:96:
6f:ae:42:80:05:0e:92:51:2f:28:a8:50:c3:3e:ca:
41:ad:03:17:50:4b:2e:3a:48:6a:24:7d:66:c1:d2:
ec:cd:48:3c:a5:0f:85:05:b8:75:fd:77:c0:ed:85:
40:20:c7:47:78:77:5b:b9:6b:a3:bf:7a:b4:53:4e:
38:2d:91:11:ac:07:23:33:fc:5a:dd:1d:bc:96:ca:
75:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:05:E0:DF:8B:0E:D5:05:67:0D:A4:75:B5:50:B0:C8:B1:20:19:D7
X509v3 Authority Key Identifier:
keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:35:4f:62:8f:57:ea:e8:57:7f:fb:3e:db:24:87:49:a2:6e:
e2:55:4a:1f:a1:98:0d:8c:38:a1:97:13:2a:bc:8e:26:f7:15:
1c:26:c3:15:c3:05:f8:d7:87:ff:b7:ab:7d:5e:f9:d6:c9:f7:
e7:d4:cf:77:63:ed:6d:ea:c6:50:c4:2a:2c:38:6c:ad:8d:86:
7e:d3:ed:ca:e0:d3:44:dd:0c:5f:57:70:08:d0:5e:1d:4e:b8:
c3:1e:a6:9b:a2:1a:1c:30:42:21:e5:e7:ed:ca:10:45:cb:7c:
7e:01:69:87:f7:e8:04:12:10:66:17:1c:2d:71:cc:d5:6c:96:
87:7d:8c:b1:ce:7a:b0:da:4a:95:39:f6:af:c1:a0:ff:c1:76:
f4:bc:e6:0d:c3:da:f4:4c:80:da:63:6f:d0:66:ad:84:18:12:
cd:f2:e9:49:c6:2b:6e:28:ff:a7:ec:52:03:94:18:17:9a:78:
74:78:2f:12:d3:18:b0:5c:72:be:81:09:aa:b1:04:73:60:96:
e5:40:b8:b9:32:72:07:43:2e:c1:e0:55:f3:69:be:ba:21:ce:
54:5f:fe:91:09:75:77:07:1a:8f:dc:fd:6f:2e:a3:16:fe:23:
14:33:6c:56:7a:06:8d:f3:05:31:78:01:5d:d1:05:73:86:ba:
b5:3f:50:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:48:12 2026 by rpki-client