
$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
File: wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft (raw, json)
Hash identifier: TyuWRHRj4rgZBlC2UcGSNvlex8BGSR/9N4m5qMThzxw=
Subject key identifier: D5:BA:B7:94:78:BD:CB:D1:60:DD:3C:D4:01:C9:48:39:C7:A5:AF:DD
Authority key identifier: C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76
Certificate issuer: /CN=A914400E/serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276
Certificate serial: 01A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
Manifest number: 01A9
Signing time: Sat 13 Jun 2026 04:05:26 +0000
Manifest this update: Sat 13 Jun 2026 04:05:25 +0000
Manifest next update: Sat 20 Jun 2026 04:05:25 +0000
Files and hashes: 1: wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl (hash: +lzLy1qjQvR7YbCj+Bp/yZ1XlrZ28JPEx8nP1jQMYtY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl
rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914400E, serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276
Validity
Not Before: Jun 13 04:05:25 2026 GMT
Not After : Jun 20 04:05:25 2026 GMT
Subject: CN=6a2cd706-e9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:2e:9d:b4:12:17:97:22:6e:04:4a:55:5a:
1f:5c:cd:0d:3a:6b:57:25:72:c3:3b:4e:af:81:7e:
e6:90:a8:1a:a2:da:b3:39:a1:b8:54:4f:af:f5:d8:
31:92:5e:db:b9:ff:9c:c7:1d:ad:1b:14:cd:d0:91:
ee:1c:d1:25:a6:7d:ce:42:2e:45:90:9f:95:81:d3:
90:c4:2f:6f:b7:88:87:58:d7:f3:91:79:28:b4:4b:
37:d2:7a:f4:72:47:30:58:8f:58:f7:54:94:50:42:
5e:e8:6a:81:d1:a6:a2:c9:97:eb:66:cd:76:cd:40:
b0:3d:02:83:93:21:77:a9:49:b2:39:d0:4f:64:86:
cb:33:dc:4b:8d:b1:4a:ee:36:23:ec:27:54:25:3b:
aa:8a:65:53:ac:78:01:01:cf:11:e2:b0:22:5f:d7:
ae:37:24:19:e0:95:26:c7:56:96:68:e5:b7:3f:2d:
38:85:c1:e0:d7:0b:d5:03:7d:99:2e:8d:b0:78:61:
20:74:12:31:74:6f:6d:48:50:4a:23:5e:32:79:c5:
2a:8b:bd:6c:30:b8:8b:25:ee:86:86:23:37:1a:88:
3c:e0:eb:2d:4d:e6:32:74:b0:ca:82:a1:76:51:e1:
f2:d9:a1:7e:84:d8:5c:0a:b5:c6:32:98:ca:7e:a3:
15:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BA:B7:94:78:BD:CB:D1:60:DD:3C:D4:01:C9:48:39:C7:A5:AF:DD
X509v3 Authority Key Identifier:
keyid:C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:32:98:be:58:17:27:f1:db:0c:3f:84:c0:23:36:d7:b6:f3:
58:ee:6e:fe:bd:77:33:c8:09:82:17:d6:dd:a1:4d:2d:31:72:
b9:2a:0f:02:8a:2e:4e:2f:5c:2e:d9:1f:f4:74:2a:37:ae:7c:
84:da:bb:b4:0a:c1:3b:9d:a6:b1:eb:c0:03:73:29:6b:6f:fa:
87:4c:d8:e7:22:b4:8c:e0:9a:03:c5:49:46:56:23:7b:06:d7:
4a:6a:c0:3b:c2:18:cf:44:d2:fb:1b:fe:e8:b2:d4:22:6a:f0:
cf:a1:46:7f:52:2d:c8:2a:40:55:a7:68:23:0a:f2:10:dc:a3:
d3:64:f4:3a:8e:b2:dd:72:6e:d6:32:c5:72:21:15:65:f4:1e:
92:81:0a:e9:30:53:d5:30:cc:a4:db:b0:f2:44:70:ef:f7:76:
10:97:6a:98:58:14:ff:5c:6f:0d:ea:35:7b:5f:4f:b4:0a:e8:
b1:30:9c:04:ad:27:73:df:b6:74:d5:61:37:e8:12:02:b3:38:
35:0d:cc:ff:2a:c4:9b:72:02:4e:96:53:14:40:1b:1f:30:9c:
87:0a:f7:fa:05:00:20:a5:00:35:eb:e0:f8:b1:98:ec:ab:a0:
bd:2b:12:43:cb:f9:fa:a9:41:3a:74:2a:27:2c:7a:5d:65:e1:
22:28:98:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:59:45 2026 by rpki-client