
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
File: WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft (raw, json)
Hash identifier: IPSwDfQqQByPSnd/pZ4xTmqKo7QxcGhwk+B6ka/B3KY=
Subject key identifier: EE:4A:30:60:66:AE:97:C6:6B:BA:24:D6:C5:54:52:32:C6:70:A6:B3
Authority key identifier: 59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19
Certificate issuer: /CN=A913C4FD/serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
Manifest number: 015D
Signing time: Mon 21 Sep 2026 05:08:01 +0000
Manifest this update: Mon 21 Sep 2026 05:08:00 +0000
Manifest next update: Mon 28 Sep 2026 05:08:00 +0000
Files and hashes: 1: WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl (hash: p00+fmGp4oLqrzNM+RUcdHd1xleTCcy12zYErkkwhss=)
2: 7C321BDEA55711EFB8317F6BC4F9AE02.roa (hash: 0iiaisEVoFgTOH2CCzbwqWu/DbOaNizKGC5fWfvGWtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl
rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C4FD, serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319
Validity
Not Before: Sep 21 05:08:00 2026 GMT
Not After : Sep 28 05:08:00 2026 GMT
Subject: CN=6ab0bbb0-5144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:6d:14:1e:ff:c5:bd:6a:54:78:0c:4d:ce:
18:86:11:75:7e:e0:7d:35:f9:89:85:60:97:05:db:
3e:07:90:61:ce:c5:30:f5:62:52:13:6c:87:63:e7:
58:10:5a:52:e5:c1:85:66:6f:91:ed:5c:ba:86:8b:
51:bf:62:6a:8f:1f:87:6c:82:bd:d0:e7:90:8a:f0:
6c:8c:29:b5:39:3a:34:8f:ec:fc:05:43:3b:f4:7e:
8e:5e:81:92:40:ca:96:76:7e:dd:c8:89:f5:7c:97:
5f:dc:29:40:68:24:9a:0f:33:64:07:53:e0:24:22:
62:ea:75:ea:6f:13:8b:83:c3:12:fe:6d:57:1b:2a:
f8:4a:c6:43:7e:40:5f:6b:57:e4:82:7e:a2:29:99:
ae:20:d2:27:12:e2:01:51:2c:e2:f3:b1:22:ac:1f:
d2:16:0f:bd:9f:a9:81:1f:d7:94:ae:7b:11:71:9a:
ab:30:59:8c:39:9a:e3:2e:4b:8e:f9:b1:bb:b3:83:
c8:13:b0:73:42:24:8a:df:6f:e7:dc:0b:bd:97:42:
32:84:6a:c3:2c:c0:b5:09:12:36:48:59:e1:94:14:
26:9d:84:4b:57:bc:00:03:75:4e:92:b6:5e:92:c7:
3a:29:ac:6f:d2:f8:d1:69:62:98:21:8d:8c:e9:1d:
ca:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4A:30:60:66:AE:97:C6:6B:BA:24:D6:C5:54:52:32:C6:70:A6:B3
X509v3 Authority Key Identifier:
keyid:59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:67:bc:36:67:09:e3:57:d3:94:05:20:f6:46:d5:ba:c8:f2:
a5:1c:d6:85:aa:cf:f8:cf:62:24:56:eb:a6:fd:b0:35:69:29:
73:b0:1b:8a:98:e1:c7:3a:21:43:7b:22:1f:23:f2:ea:b8:91:
74:25:7d:63:bd:06:9e:cd:9d:0c:d6:15:8b:f1:cf:6b:c3:33:
0d:1a:9c:e6:35:4b:cd:18:ff:d7:ab:aa:65:b6:bc:85:59:82:
94:8c:c9:90:4b:34:cd:53:49:fe:03:ec:ea:12:71:0c:e3:a4:
95:22:3e:a6:be:a1:3e:8f:c9:1d:70:7c:43:9d:6e:4e:6b:27:
9e:4a:98:16:6f:2a:1b:18:4e:b8:dc:f4:c2:b3:46:03:7d:f4:
5f:0c:c4:b3:93:53:f7:5b:7c:c3:41:66:18:4c:b4:14:c9:94:
cf:c6:35:ab:f1:d3:d5:e8:4c:76:ba:cb:f3:22:a9:d8:b2:69:
10:d9:c1:29:80:29:d6:77:4b:e3:4e:79:7f:b9:ba:3b:b0:98:
0d:0e:01:1d:f1:57:94:09:84:9e:08:5e:8c:41:59:4f:81:f3:
c6:8f:b8:49:3e:40:17:94:73:95:b6:e3:03:1c:71:27:8f:a9:
50:e5:c1:56:ee:5b:d1:3a:c9:af:f0:ac:87:1d:00:cc:20:d1:
9f:04:6f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:52:45 2026 by rpki-client