
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
File: wfLqVt--Dy-St0HdaM9WcRWzspI.mft (raw, json)
Hash identifier: inQjihhpIDSJKnwuNr72NTWXOFyFyeSndjsv9ntQNkE=
Subject key identifier: 36:8F:E4:C8:B3:3C:9B:31:47:CA:1C:56:15:87:38:16:0A:84:E2:91
Authority key identifier: C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92
Certificate issuer: /CN=A9147150/serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
Certificate serial: DF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
Manifest number: DC
Signing time: Mon 21 Sep 2026 06:36:54 +0000
Manifest this update: Mon 21 Sep 2026 06:36:53 +0000
Manifest next update: Mon 28 Sep 2026 06:36:53 +0000
Files and hashes: 1: wfLqVt--Dy-St0HdaM9WcRWzspI.crl (hash: ZEL5Ziiy8HteCuKQhxg0PLuph+GTnZrOqJSHPKSPFc4=)
2: EB6E0EE8677811F08B1EA154C4F9AE02.roa (hash: UrgCCNXOLmuDFDcXXpTOK2wp7L0sF7p5H0LsmWYVOV4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl
rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:36:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147150, serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
Validity
Not Before: Sep 21 06:36:53 2026 GMT
Not After : Sep 28 06:36:53 2026 GMT
Subject: CN=6ab0d085-33c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b1:0b:e4:e5:e0:80:5b:e4:f6:8f:44:13:ad:
5a:67:4b:51:e7:2c:4b:0e:96:4c:71:a1:61:0e:99:
e3:34:ce:12:84:6b:1f:52:0c:19:51:90:81:1c:e6:
f2:34:c8:67:66:10:48:54:1c:84:b9:89:57:ce:57:
a5:50:b2:84:9b:e7:8d:e6:b2:f0:4f:21:88:c1:4d:
42:ab:36:38:f6:4d:e1:f5:71:f7:05:7a:21:75:3b:
20:fd:0c:b2:7b:2f:c5:1e:ec:3b:2b:c5:2e:13:a0:
b4:aa:62:42:cd:0c:c4:20:40:d7:f2:1d:bf:39:68:
91:3c:72:14:2e:d4:49:3e:4c:f0:13:34:79:e6:d2:
0d:92:9e:27:0e:3b:d8:56:6f:c2:e9:e8:e2:b6:39:
df:65:14:7b:41:df:03:a9:21:95:f1:71:4d:40:3f:
55:c6:40:10:07:25:90:e7:df:d2:a8:be:0b:e9:e1:
ef:0e:7d:c5:40:6e:6a:1b:77:0d:7b:c3:97:51:2d:
de:10:f5:62:d3:75:94:46:98:c8:51:a5:8e:e7:e9:
c9:f7:20:1e:39:a4:58:55:1b:11:72:5f:a6:6c:56:
7d:da:1b:77:f4:58:21:a0:81:b1:82:42:7e:cf:4b:
16:aa:22:27:b2:36:a8:88:cc:1d:33:48:43:61:b6:
a5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8F:E4:C8:B3:3C:9B:31:47:CA:1C:56:15:87:38:16:0A:84:E2:91
X509v3 Authority Key Identifier:
keyid:C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:84:51:7e:16:c9:65:47:ee:e2:ab:c7:7d:c4:b3:f1:9d:20:
11:31:12:43:a0:cf:47:cb:fb:40:90:0b:74:6c:3a:63:2d:ac:
6e:5b:7f:ae:d9:e0:35:86:c2:68:3e:32:4c:39:55:8c:6b:19:
41:d8:9d:0d:34:3a:c6:01:a6:86:b6:64:fc:3a:64:15:5e:65:
8e:6c:a0:bb:22:0c:18:5e:63:ba:c8:89:c8:7b:9a:aa:74:27:
a3:ea:62:89:7d:69:7a:56:d4:e5:38:76:3c:2e:bb:02:f3:3b:
3f:a3:9b:ff:54:f4:e6:4b:cd:62:9f:3f:9c:c9:85:b5:d9:cc:
22:65:f4:1d:1e:2d:56:b4:e6:d2:62:0e:02:28:af:d3:a9:f6:
26:ba:b1:d2:2c:a1:bb:c9:a3:d7:ba:bc:dd:9c:d3:77:d7:ba:
ca:88:a1:dc:de:e5:70:db:ee:3e:f9:c3:52:33:60:ec:85:77:
d2:87:de:56:10:01:b0:6a:64:40:4c:9b:2e:1a:5f:6b:1e:01:
b9:c0:4c:b2:64:df:7b:a3:55:cf:56:55:67:e9:79:35:f7:fd:
4c:f3:e7:19:33:cc:c5:86:f3:02:a8:7b:15:7f:e6:34:d3:11:
27:49:52:c6:bf:de:0b:0e:1d:26:86:b5:cb:8d:28:14:c7:43:
5e:9e:5a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:33:31 2026 by rpki-client