
$ rpki-client -vvf rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
File: W3UJDp6gQpi0e6-C-qIoDl42pL8.mft (raw, json)
Hash identifier: p00NoW5PsqZGk2kNuEXcn9DpAYrgdAwSXvgGHA4VmHU=
Subject key identifier: A0:98:D5:42:C0:4D:12:06:8A:10:BA:9A:BE:82:EB:71:3A:79:91:DA
Authority key identifier: 5B:75:09:0E:9E:A0:42:98:B4:7B:AF:82:FA:A2:28:0E:5E:36:A4:BF
Certificate issuer: /CN=A913731F/serialNumber=5B75090E9EA04298B47BAF82FAA2280E5E36A4BF
Certificate serial: 01CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
Manifest number: 01C3
Signing time: Fri 17 Apr 2026 03:41:17 +0000
Manifest this update: Fri 17 Apr 2026 03:41:16 +0000
Manifest next update: Fri 24 Apr 2026 03:41:16 +0000
Files and hashes: 1: W3UJDp6gQpi0e6-C-qIoDl42pL8.crl (hash: bNDEG2Ai8+xRqswbBXWVMzVKa4z10qI2mUtwwzEj3Hk=)
2: 1701D3A0F36B11EF87FE3725C4F9AE02.roa (hash: TX+J7abBnuU/uCIH/IV3ubD2e5LCktkAj57+UDWn9JA=)
3: 32776B2EF77E11EFA2C3C928C4F9AE02.roa (hash: XUXNoEvnLXCrMAn/PkLZL72CudJZnmORjDiZpfrBW3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.crl
rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:41:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913731F, serialNumber=5B75090E9EA04298B47BAF82FAA2280E5E36A4BF
Validity
Not Before: Apr 17 03:41:16 2026 GMT
Not After : Apr 24 03:41:16 2026 GMT
Subject: CN=69e1abdd-44bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:f6:5d:c8:fb:e3:db:ec:50:f9:72:a5:c0:
53:a9:f3:a9:06:f5:3a:c5:9b:7e:78:03:ef:46:46:
27:82:7e:60:87:e9:0f:0b:bf:0d:6e:e8:6e:ba:54:
c3:0a:05:fd:6d:a1:42:ae:b9:72:9b:e0:55:84:58:
3b:23:3f:89:34:ad:ac:b5:be:de:82:80:43:38:64:
98:12:95:a4:57:de:a3:cf:b0:e6:39:7b:9b:3a:97:
39:fd:b5:08:18:36:0e:80:6e:b4:fc:e8:9b:64:03:
22:8a:9d:e2:b0:a8:29:31:b7:b8:46:45:d3:4e:2d:
8b:f2:fb:d7:51:26:13:ca:ec:2d:28:e6:88:05:32:
60:d3:f1:99:88:37:e6:69:5c:c1:8f:5c:3b:e4:42:
91:d9:6f:bb:73:41:ac:15:eb:aa:c9:1d:ca:ec:bd:
0d:35:dc:a6:60:1d:d9:97:2e:aa:7b:ed:56:69:00:
9c:e2:56:c6:21:1f:80:6b:4e:a6:c7:02:ed:b9:2a:
13:ad:41:17:3a:42:e6:4c:fd:c2:99:82:f9:b5:4e:
bf:c9:14:7a:ad:e5:5a:d7:47:01:4d:d2:15:33:e4:
58:e8:ed:dd:69:a6:84:92:7c:50:53:fe:8d:b2:2b:
fb:9d:3a:8f:c6:38:53:fc:7c:38:82:fe:55:e5:fe:
f5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:98:D5:42:C0:4D:12:06:8A:10:BA:9A:BE:82:EB:71:3A:79:91:DA
X509v3 Authority Key Identifier:
keyid:5B:75:09:0E:9E:A0:42:98:B4:7B:AF:82:FA:A2:28:0E:5E:36:A4:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:95:9b:13:c3:68:1e:aa:ea:5c:c5:c2:45:e5:8d:33:91:d5:
01:cc:8b:71:11:3c:93:df:82:64:6c:1f:29:1c:fa:1b:36:cd:
c3:f9:d0:05:a7:53:d9:82:68:a4:6e:6d:73:2f:dd:17:94:33:
f1:c9:10:c0:a5:e8:d5:ff:bd:8a:a9:28:46:e0:2b:87:49:d4:
0a:e3:18:c1:8c:25:0b:a8:28:68:47:2e:ad:fb:53:91:6c:95:
50:d8:2c:04:81:ef:ed:bb:4e:2a:bb:bf:18:05:dc:50:c4:33:
9c:e0:03:59:fb:2f:b3:e2:a9:2e:48:5f:01:31:69:96:66:4a:
21:84:5a:73:30:ea:05:f6:ac:05:99:d4:f9:02:cb:e7:0e:f3:
4f:55:df:27:8a:d0:40:16:57:ae:43:4c:3c:c6:36:a0:eb:60:
10:53:16:9e:24:73:1b:1f:8e:e5:e0:4f:d0:15:51:00:bf:6a:
91:c3:43:88:87:e2:7d:94:e6:9d:b1:a4:e9:e4:20:82:69:fd:
88:2f:44:72:2f:e7:36:74:4d:86:3f:ae:2e:33:d0:d6:cf:a2:
d4:e3:07:24:dd:45:fe:2c:5d:a6:2c:98:62:57:18:7a:be:97:
79:f1:84:22:f1:b1:e2:06:9a:73:4a:50:f7:08:e4:3b:3e:48:
14:ed:70:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:56:27 2026 by rpki-client