
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
File: WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft (raw, json)
Hash identifier: N5r/K0X8Ruynuv64kTIB/JdLse7eKjU4idqeRIsYExQ=
Subject key identifier: 67:D2:BA:EA:56:A2:74:D2:13:53:EA:E8:C5:DA:8E:11:91:59:35:9C
Authority key identifier: 58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1
Certificate issuer: /CN=A914A75A/serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
Manifest number: D6
Signing time: Fri 17 Apr 2026 06:22:20 +0000
Manifest this update: Fri 17 Apr 2026 06:22:20 +0000
Manifest next update: Fri 24 Apr 2026 06:22:20 +0000
Files and hashes: 1: WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl (hash: NSupxpmyAatHriRYV6utyabvuHEulio+8m0kCBnFy2M=)
2: D56D67B0F48711EFBB2D9D73C4F9AE02.roa (hash: csaBSpZzq59GMLhCxwkq41kKwaXSwMxp+Vf9tiYrdrg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl
rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A75A, serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
Validity
Not Before: Apr 17 06:22:20 2026 GMT
Not After : Apr 24 06:22:20 2026 GMT
Subject: CN=69e1d19c-18fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:01:07:3d:e3:9d:7c:19:59:05:df:e9:aa:c6:
68:68:c4:32:b0:14:b1:1a:af:92:bf:12:c7:96:69:
e4:1c:e8:74:70:b1:eb:ee:1a:41:e4:1b:18:4a:2c:
00:a8:21:7a:c6:0f:b6:fe:c6:de:4b:d5:17:e7:cf:
3f:fa:cc:0b:f6:da:a9:7a:06:eb:2f:c1:d7:b7:28:
ed:40:eb:83:7a:e9:6e:bf:28:71:01:e7:f9:f5:fe:
16:8f:8a:5c:be:f6:b1:83:ae:e9:dc:71:af:08:ee:
1b:5f:f3:3f:f0:1d:64:69:19:85:1d:c7:99:e7:08:
f5:8b:dd:50:93:2b:ff:8b:5c:66:b8:1b:56:cf:fc:
81:27:cd:d0:d7:0f:bd:ec:b1:6c:62:d7:1f:43:84:
2a:df:e4:82:0c:18:82:e9:1e:46:15:dc:99:48:31:
03:ba:81:21:f8:bf:83:c3:53:6d:f2:2b:b8:a1:6c:
26:99:c6:0c:8c:e4:5b:2c:de:d4:f0:a8:76:6d:be:
a6:01:1c:35:64:d3:57:8a:af:bf:74:62:02:0e:4b:
25:c7:bd:13:98:b7:72:a0:3f:df:c5:3d:3c:99:76:
94:3d:63:98:a3:e3:e2:de:92:e2:a2:3d:57:25:44:
95:7d:ae:df:0f:cc:5f:b1:33:f8:16:e1:3b:d2:a9:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D2:BA:EA:56:A2:74:D2:13:53:EA:E8:C5:DA:8E:11:91:59:35:9C
X509v3 Authority Key Identifier:
keyid:58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:48:55:2b:5b:e4:78:9b:76:af:48:27:a0:f6:bb:51:c3:11:
51:ef:51:3a:e6:ef:70:f8:34:22:42:9b:57:c8:a4:55:9e:17:
48:b7:04:ec:f0:5b:22:01:a9:45:a1:3b:bf:3a:b7:6b:00:3a:
19:e9:00:99:ef:01:25:32:cf:c0:6c:19:3b:b9:ba:ba:1b:a8:
00:c8:37:39:00:b7:08:b1:e1:bb:83:ca:08:80:98:ed:9f:33:
8d:d2:01:ec:f2:0d:9f:f6:a1:ba:9e:14:a3:de:00:33:fa:6e:
2b:d0:83:05:e6:24:92:ed:fa:2f:7d:54:ac:32:56:9a:eb:10:
9c:08:56:bb:ed:da:d5:14:ca:29:d4:7e:10:de:37:a9:aa:e3:
5f:18:f0:8c:61:9e:a3:44:a9:f7:28:b1:1e:13:b7:0c:2f:90:
72:d5:c0:55:ce:2a:78:bf:de:0f:35:36:89:07:bf:db:d9:d7:
17:e4:13:08:92:cc:e9:82:f4:cf:b3:4e:a6:57:35:fa:35:1e:
e7:7f:a6:cf:84:b4:12:15:cd:78:e0:37:65:2f:fd:00:34:35:
03:b4:69:b1:21:44:bd:75:a0:50:df:88:66:f2:e8:23:91:bf:
3b:0d:49:e3:6c:1c:6a:46:ec:9d:c2:93:5b:2c:58:a7:ef:cb:
8a:c2:b2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:21:28 2026 by rpki-client