
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
File: wfLqVt--Dy-St0HdaM9WcRWzspI.mft (raw, json)
Hash identifier: ao7abBCbpGg5vTccvdXJL+1YqXSZtSAw67BoBX/lKrQ=
Subject key identifier: 05:42:71:51:CE:28:87:3C:BA:D1:97:58:A5:7E:EF:6C:AD:30:EA:EC
Authority key identifier: C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92
Certificate issuer: /CN=A9147150/serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
Certificate serial: 8D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
Manifest number: 8B
Signing time: Fri 17 Apr 2026 07:17:50 +0000
Manifest this update: Fri 17 Apr 2026 07:17:50 +0000
Manifest next update: Fri 24 Apr 2026 07:17:50 +0000
Files and hashes: 1: wfLqVt--Dy-St0HdaM9WcRWzspI.crl (hash: 4ioLJKtHssC9HSGyFjs1hLtpsg6CBqCiRfVgpcvclUM=)
2: EB6E0EE8677811F08B1EA154C4F9AE02.roa (hash: MMOwPnwsVwQiBGtfRhC6fRE74wLsOmC1//fo0Gh9Pfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl
rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147150, serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
Validity
Not Before: Apr 17 07:17:50 2026 GMT
Not After : Apr 24 07:17:50 2026 GMT
Subject: CN=69e1de9e-b307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:29:f4:9e:79:31:34:f6:10:6d:d4:65:3c:
b7:07:68:de:2e:ba:56:5e:57:ad:e3:59:b1:04:e5:
b3:69:e1:a8:b2:31:54:82:3c:32:26:35:dc:6c:fa:
56:42:93:3e:07:fa:2f:90:ef:a8:84:da:f7:e4:0a:
0b:09:63:4a:6f:8b:f5:0b:6b:28:55:f7:1c:e5:9f:
59:f4:fd:d9:bf:ed:89:62:80:b3:6a:3f:4a:2d:1a:
41:eb:7a:99:88:a9:0f:a6:44:05:7d:83:a8:7f:ce:
67:52:1f:31:a0:d2:4a:25:16:3f:6a:49:7c:0e:46:
e9:0e:97:c9:62:0e:9e:97:92:83:a9:c8:de:0f:11:
1d:36:39:4d:67:5f:38:3e:e6:39:82:96:ed:1e:2f:
b5:92:75:b8:76:87:db:90:d2:21:c3:5e:fd:26:2e:
d9:22:5a:41:6f:c4:c3:3f:75:0e:e6:d2:18:48:8a:
30:50:4f:e4:50:c8:d7:06:c7:30:5a:25:f8:cf:47:
c2:d8:4a:62:6f:82:e7:3a:52:03:55:04:1f:23:4a:
28:ec:10:e8:25:93:2b:f3:f9:8b:99:89:f6:aa:91:
2e:e1:64:0a:c5:78:fe:b3:e1:9a:c5:fa:8d:c8:14:
d6:87:d4:5d:b1:c6:e7:4d:c5:02:71:90:72:29:b5:
55:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:42:71:51:CE:28:87:3C:BA:D1:97:58:A5:7E:EF:6C:AD:30:EA:EC
X509v3 Authority Key Identifier:
keyid:C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e6:ca:1b:ef:82:0f:27:0a:7f:ec:35:94:18:d9:a1:79:9f:
ce:11:5b:11:f8:8e:73:88:e0:f8:26:a5:64:48:98:a9:32:c9:
e7:0b:0a:ef:42:d5:be:c3:0e:17:4d:e4:d1:4a:cc:ec:a8:69:
32:e1:90:b6:b1:b9:2b:8a:f2:d3:3b:8a:64:ca:4b:48:b1:af:
7e:2f:8f:8a:89:79:6a:14:bc:cb:f0:cc:be:e1:b6:f6:c6:82:
8e:b9:2c:37:ad:49:cb:cf:17:88:98:a4:e4:bd:d2:0d:ce:5f:
ae:03:fd:10:0d:84:57:b2:04:2c:a7:41:e7:31:f5:96:dd:bc:
df:05:a6:25:31:53:88:c2:f1:fb:48:10:0a:21:f7:69:80:af:
6f:93:2e:b3:ed:cc:f1:12:84:10:af:e6:eb:2e:c1:96:f0:62:
22:cc:91:15:4f:a3:e0:40:d9:2d:7f:f0:ae:3f:07:35:cf:47:
ed:1c:20:d5:a9:f5:4b:36:9b:96:eb:7c:23:2c:cc:88:e0:79:
28:53:6d:5f:2b:70:49:37:f9:f2:45:37:c5:f1:5f:84:c8:e8:
f0:5e:49:41:ca:0e:ef:64:2e:54:d1:2c:77:a0:3b:af:ec:ca:
90:5a:12:4e:35:c5:a6:18:07:fc:e2:15:aa:cc:b5:99:f9:83:
d4:d1:d0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:18 2026 by rpki-client