
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft
File: wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft (raw, json)
Hash identifier: T5x3GYgkQGG/V1kr6cXE9HGVxMoUSnaaYfH86aNa7vg=
Subject key identifier: 54:93:D5:90:AD:92:06:87:CB:00:17:5E:0A:94:34:3C:77:D9:13:BD
Authority key identifier: C0:B4:66:D9:99:B8:1B:F9:5D:6F:95:D6:C1:2A:B3:C9:C7:5B:42:D1
Certificate issuer: /CN=A9134309/serialNumber=C0B466D999B81BF95D6F95D6C12AB3C9C75B42D1
Certificate serial: 8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft
Manifest number: 8C
Signing time: Sun 01 Mar 2026 08:50:48 +0000
Manifest this update: Sun 01 Mar 2026 08:50:47 +0000
Manifest next update: Sun 08 Mar 2026 08:50:47 +0000
Files and hashes: 1: wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl (hash: OlwlyTi9Omz0B0qugTvA4NYnnJXKsat/QcIAvKHyRc4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl
rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:50:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134309, serialNumber=C0B466D999B81BF95D6F95D6C12AB3C9C75B42D1
Validity
Not Before: Mar 1 08:50:47 2026 GMT
Not After : Mar 8 08:50:47 2026 GMT
Subject: CN=69a3fde8-6cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:f9:34:82:61:25:5c:cf:7a:74:03:ff:fd:
c8:3b:09:9d:87:22:fe:07:d2:67:d9:81:ec:8d:7f:
8d:f5:36:25:63:41:5f:ba:20:c8:59:bb:39:ca:4a:
23:97:6b:cc:ed:08:e7:61:8d:17:0c:7d:98:76:a8:
de:c0:dd:7f:2b:34:17:3e:73:7e:fb:10:ec:2d:2b:
57:55:0e:d5:9b:80:0a:1b:96:23:19:e1:75:31:6e:
02:a8:ba:dc:db:93:10:96:e1:30:eb:91:90:ee:f5:
2b:32:b7:65:d0:bd:0e:9a:24:f5:8d:17:1a:48:85:
6e:d0:22:50:3b:6c:e2:98:b4:03:1b:4f:cb:18:27:
77:b7:2d:ab:f9:b7:6a:17:e5:6b:46:ef:34:1e:33:
b4:01:db:9a:ac:3c:71:bf:95:ca:13:3a:44:35:d3:
12:f0:8f:24:49:7d:0d:38:fa:e3:af:fa:1e:3a:1d:
b9:d2:3d:3e:af:da:dd:7e:d1:ae:b2:75:57:6e:67:
86:7a:d5:36:6c:70:a5:b6:26:1c:ad:ee:a2:19:bd:
7b:ce:0f:6d:9f:74:ca:f6:72:7c:7f:b4:f3:93:ea:
48:f0:89:65:50:c9:ac:79:26:d1:c8:21:64:f4:ae:
fc:01:48:29:5d:dd:ca:1d:9f:0b:29:01:b6:d8:6d:
32:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:93:D5:90:AD:92:06:87:CB:00:17:5E:0A:94:34:3C:77:D9:13:BD
X509v3 Authority Key Identifier:
keyid:C0:B4:66:D9:99:B8:1B:F9:5D:6F:95:D6:C1:2A:B3:C9:C7:5B:42:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:c6:c7:4a:41:4f:97:9f:e7:73:53:16:81:e6:bb:fb:e3:da:
d0:d1:60:7a:c5:63:83:66:99:6b:0d:24:12:e5:c8:98:ab:5d:
4a:00:91:06:73:10:6c:07:3a:1e:cb:98:f4:7c:d2:5e:31:8f:
0a:a0:5a:e7:5a:b4:af:56:e1:9c:87:93:34:d4:b0:a0:1a:84:
a0:0f:82:9d:97:dc:6c:f0:9d:92:df:4a:fd:ca:9d:f3:7a:2b:
11:e0:7d:cd:5d:15:dc:2e:42:1e:6e:8a:7c:44:6b:79:aa:60:
f2:0c:11:b3:dd:2a:13:26:62:77:d2:8e:0d:98:17:fd:f3:43:
ab:85:6f:9a:8f:9d:15:54:60:4f:63:0b:d5:33:56:62:7e:09:
e0:cd:6e:47:66:1f:34:d1:39:18:a5:e6:00:cc:2a:36:6f:d5:
dd:e8:9b:90:01:54:a7:0e:99:ef:07:56:a6:54:1e:c5:bb:9d:
ad:de:0a:aa:8d:77:cc:86:e0:fe:d8:ce:4d:9e:d7:24:28:7c:
9f:e3:9e:d4:78:d9:6d:cd:f9:11:55:c3:89:82:45:3c:55:42:
de:3d:5f:b5:62:06:18:16:c1:16:4e:6f:25:fc:37:b5:74:1f:
55:c9:d5:d3:81:bb:8f:2f:73:02:fc:0b:86:bb:ab:c8:b2:94:
e4:c2:3e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:56:23 2026 by rpki-client