
$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
File: wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft (raw, json)
Hash identifier: zNHzUAH0SurFj+vXkQNmKF2xMfRwwA/WLHm+udcvDVo=
Subject key identifier: 84:B8:3C:2D:01:3C:70:9E:71:73:74:21:E1:A4:FF:38:C0:2C:7D:EF
Authority key identifier: C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76
Certificate issuer: /CN=A914400E/serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276
Certificate serial: 018D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
Manifest number: 018D
Signing time: Fri 17 Apr 2026 04:07:09 +0000
Manifest this update: Fri 17 Apr 2026 04:07:08 +0000
Manifest next update: Fri 24 Apr 2026 04:07:08 +0000
Files and hashes: 1: wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl (hash: kbaZwiNmULPuDL5OFaKPzh7fk7teueMV3KmUJsBchCI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl
rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914400E, serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276
Validity
Not Before: Apr 17 04:07:08 2026 GMT
Not After : Apr 24 04:07:08 2026 GMT
Subject: CN=69e1b1ec-e9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:ca:9c:df:cf:f0:8e:55:1a:86:49:1c:58:
f9:2a:eb:1a:34:84:fe:1c:15:f4:85:09:5a:db:53:
41:b5:1e:06:b7:58:30:04:3c:0d:86:64:d6:b9:08:
b4:83:5e:a3:0a:9c:7b:98:55:ca:51:e1:dd:0f:d8:
20:11:ec:45:3d:73:0a:4d:b6:d1:df:c8:f4:38:09:
8d:be:ff:83:3f:cd:71:21:a6:c6:c4:54:31:f7:e6:
27:e2:18:0b:b2:52:74:10:1c:09:e3:d4:21:3b:f9:
43:e6:23:85:8a:bd:45:0b:2b:2e:56:2c:b4:08:07:
93:25:c8:16:52:7f:95:8b:5f:18:00:4e:c1:77:3a:
c5:27:42:54:1f:c0:30:22:05:20:df:25:15:8e:6a:
29:ce:a8:ed:d9:6c:df:d8:9f:a2:bc:b3:e1:79:8e:
b7:fd:c0:6f:03:06:6f:2e:2d:b5:4c:0e:51:00:8b:
76:9c:5c:51:39:ef:d3:d2:20:d6:df:ae:bf:4f:9d:
10:79:49:23:52:af:26:88:73:ac:0d:61:e3:b5:81:
7a:ed:64:e0:17:3a:ef:88:f9:12:8c:55:42:45:e1:
d5:dd:c2:4b:ca:11:01:ad:be:3f:92:73:16:9d:dc:
7d:53:5e:d1:26:11:88:82:08:8d:5d:3a:72:fc:26:
85:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B8:3C:2D:01:3C:70:9E:71:73:74:21:E1:A4:FF:38:C0:2C:7D:EF
X509v3 Authority Key Identifier:
keyid:C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9e:35:2d:61:1b:51:79:02:ff:4a:89:a2:6a:a6:66:c3:d8:
b4:a8:fb:0d:e5:d1:2a:0e:8e:60:c9:f1:d5:78:a7:cd:bb:09:
fc:de:12:89:1d:f6:ac:8f:69:54:3e:97:29:01:ca:87:0a:99:
01:73:db:48:3d:03:24:7e:45:9d:50:d8:76:0a:07:f3:c4:b4:
e6:0c:5a:6a:f6:59:79:df:5e:90:66:de:79:de:63:9b:46:ed:
47:d2:48:a2:08:21:28:46:62:00:fa:b2:a7:95:f2:6c:ac:23:
2e:69:06:2b:8a:da:8e:a4:4a:da:17:31:43:e6:1a:62:97:4d:
09:ba:e8:2c:b8:3b:2c:f2:54:7e:16:a5:59:33:5d:0e:69:57:
75:50:18:f1:02:96:95:86:1f:8f:a1:5b:d1:c3:6a:28:a9:77:
b3:74:fa:3c:dc:d5:36:10:e2:ea:d3:66:e7:ed:ee:6b:5c:7e:
c9:f0:65:2c:47:32:89:71:43:31:40:3f:24:88:27:28:0d:41:
19:e3:85:56:61:84:a9:19:bb:a5:1b:9b:27:d2:ef:d7:d9:33:
a8:ad:08:d7:c1:71:f6:8c:4e:5b:cb:bd:44:14:8e:13:a2:0f:
87:69:e7:4f:dc:52:6d:ef:02:e4:d7:98:7c:ea:9f:45:bf:3e:
c9:1c:12:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:41:08 2026 by rpki-client