
$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
File: wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft (raw, json)
Hash identifier: 1CznKaSy6mFmwpoDSEwReHoB4fecJ/zbSSMbkMmoly0=
Subject key identifier: 82:E5:C1:13:3F:27:15:F8:E6:E5:B5:31:B2:99:07:43:7E:A9:02:15
Authority key identifier: C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76
Certificate issuer: /CN=A914400E/serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
Manifest number: 0174
Signing time: Mon 02 Mar 2026 15:16:21 +0000
Manifest this update: Mon 02 Mar 2026 15:16:21 +0000
Manifest next update: Mon 09 Mar 2026 15:16:21 +0000
Files and hashes: 1: wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl (hash: NeHFBFqokwIUKG131tVnQ8OJ6skp22N7XqwjQecUvY0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl
rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914400E, serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276
Validity
Not Before: Mar 2 15:16:21 2026 GMT
Not After : Mar 9 15:16:21 2026 GMT
Subject: CN=69a5a9c5-b00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:f7:9b:2c:d1:94:9b:14:9d:91:7d:38:9d:
30:96:5a:32:22:7d:f1:9f:1f:db:e4:f6:64:1a:b3:
03:5b:25:5c:1a:0a:dc:4f:c3:76:9c:2d:ba:e6:eb:
e5:d6:0c:ad:f2:3c:7e:2e:9d:66:f6:fb:23:2b:9c:
34:c4:cd:0d:ea:05:23:3c:8c:de:d5:1b:74:71:18:
db:fc:be:10:f4:98:f7:ab:e3:ed:24:7f:64:9e:e7:
bd:4f:cd:1e:71:be:2b:1c:88:eb:4a:1c:ef:6f:da:
6b:67:c6:dd:2e:95:54:af:10:91:b6:1b:ad:c2:2a:
6e:77:4b:14:82:95:65:73:54:f4:ec:b6:20:9f:ae:
ae:e8:96:5d:6b:59:57:54:0e:0b:7c:91:91:d9:e4:
d5:5c:62:c9:ad:2e:fe:68:6c:03:86:89:5a:14:cb:
26:6c:b7:fd:6f:a9:d8:28:01:c9:6f:a0:6d:b8:f3:
e4:42:06:b0:c4:be:9c:34:71:ab:4a:58:00:26:27:
28:30:2a:df:50:6a:b3:41:39:f2:39:74:07:03:19:
46:14:8d:0d:57:be:79:a2:1d:98:4b:bc:56:39:56:
2c:7a:66:88:7b:01:55:c0:c5:8f:c8:12:5d:6f:11:
e5:e4:4a:78:29:9a:a8:38:b9:6b:8d:5b:52:ca:38:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E5:C1:13:3F:27:15:F8:E6:E5:B5:31:B2:99:07:43:7E:A9:02:15
X509v3 Authority Key Identifier:
keyid:C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:9a:47:3b:ff:f9:19:11:57:f3:61:f8:94:03:b3:8c:1a:3d:
b1:83:81:c7:bb:23:a7:7a:1b:b9:1c:bb:2c:dd:d4:71:66:2c:
4b:6c:7c:f4:c9:3c:a2:42:77:fe:58:d3:ca:a5:a2:22:51:5c:
e1:c8:10:76:8a:bf:b6:b9:55:a2:12:03:d0:40:17:db:2c:47:
e2:b7:79:76:54:18:61:2a:94:6f:e4:03:c8:b2:2f:70:f9:17:
69:5e:5e:0a:55:43:3c:25:cf:1d:7c:d9:03:8e:ce:5d:a5:9b:
fa:9d:29:d1:f7:dd:06:95:64:2b:d5:ff:7f:29:ae:69:44:9b:
b7:84:3b:cd:2b:33:3f:70:3c:2e:bb:eb:f0:34:9d:b0:56:5f:
ec:7d:9e:be:ae:e5:c0:ba:0e:e8:7a:95:80:17:c7:49:41:88:
3b:2f:73:8c:a3:bf:e3:60:a0:76:1b:e6:63:67:48:2e:44:fb:
ba:05:79:4b:b7:12:90:57:ad:ca:b7:47:f7:20:2f:ca:38:26:
f3:f1:a4:b2:20:13:24:be:3b:10:98:c0:eb:81:3e:aa:3b:64:
50:8c:a2:ee:bc:f4:f8:76:87:63:5f:fa:1b:bb:c0:de:29:af:
ff:90:4e:54:d4:a9:67:c3:8f:10:64:cd:0f:66:dd:4e:c9:c5:
10:04:7a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:47 2026 by rpki-client