
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
File: WAFITP9u_F0ACyYp-RFr4jXErDY.mft (raw, json)
Hash identifier: YTjMTa/fKKBYuu9/C1PV07t1nCb1bHYVjvkdLFVSuFU=
Subject key identifier: B8:FE:1B:AD:D4:5E:31:3E:DA:25:87:AF:74:50:89:C5:18:A7:3F:05
Authority key identifier: 58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36
Certificate issuer: /CN=A914C531/serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
Manifest number: 012F
Signing time: Sun 01 Mar 2026 06:44:38 +0000
Manifest this update: Sun 01 Mar 2026 06:44:37 +0000
Manifest next update: Sun 08 Mar 2026 06:44:37 +0000
Files and hashes: 1: WAFITP9u_F0ACyYp-RFr4jXErDY.crl (hash: Q/qOfnrlOVcUJCO3CAl0faceeuWu3/Zh4V33QeBs420=)
2: 7CFDC462FDFF11F0A0866006396F56BC.roa (hash: V8EukBEj4kaBo2fXhZEmwAWGarr7QlNtdTHKwy8WV34=)
3: 94055454FDFF11F082530311396F56BC.roa (hash: 1O+oCXBoHRZYyOdCazy1zTMFUSVhoP+Eci8/Jg7NS6M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl
rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C531, serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36
Validity
Not Before: Mar 1 06:44:37 2026 GMT
Not After : Mar 8 06:44:37 2026 GMT
Subject: CN=69a3e055-6eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:b2:ce:66:6f:e1:90:72:3d:4e:d2:9e:85:
9e:5b:f2:7d:21:ed:e3:33:a0:30:2a:1e:35:cd:f9:
df:72:b0:15:e3:ab:49:67:dd:be:b3:80:5a:31:82:
9e:b2:f8:e4:ee:10:7d:52:a5:cf:a7:b7:b1:b1:10:
7c:ed:c8:31:3c:92:e8:63:96:5b:ca:61:45:c2:48:
76:55:a3:f7:6d:32:d9:59:04:ec:ed:aa:b5:29:1e:
33:a0:e1:96:0f:ed:fc:c4:12:0d:46:e3:32:2a:5f:
6f:c1:ce:83:1f:5e:05:73:3b:17:18:70:35:16:b4:
ab:7c:95:78:2b:97:d1:da:f9:5e:e1:66:8a:40:55:
be:db:3d:9d:22:af:5c:d2:d4:2a:e7:4f:40:12:a0:
39:67:23:de:35:76:cc:aa:1b:cd:ea:38:85:d6:0f:
9d:c4:14:c0:44:03:ec:9b:6a:42:37:60:a4:73:f9:
cd:bd:86:9d:96:ff:ce:ac:aa:3f:da:8a:7e:e5:2a:
e3:25:40:9c:c2:fd:1e:18:e7:56:54:f7:ae:93:60:
86:cd:4d:db:cd:70:24:aa:82:b4:f7:d3:42:cb:cb:
88:5e:9b:95:5b:7c:18:5d:4b:a9:f9:3b:0e:e2:83:
c2:1f:49:23:a0:55:63:12:ad:f7:d4:ec:f3:11:f2:
16:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FE:1B:AD:D4:5E:31:3E:DA:25:87:AF:74:50:89:C5:18:A7:3F:05
X509v3 Authority Key Identifier:
keyid:58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:06:06:60:cd:41:a6:e2:40:bf:19:96:5e:84:35:26:9b:d7:
67:40:09:8c:3a:e7:d3:59:9d:7d:f9:85:2a:10:63:34:4a:26:
58:2a:68:d2:b1:27:07:f3:69:f0:02:01:5b:0a:c8:be:68:ad:
23:df:cf:d8:e5:1c:fd:ca:b5:48:58:f0:28:86:c9:a4:7b:d5:
de:ac:7d:9c:38:12:f7:91:18:19:4d:07:3e:51:a6:d2:c8:0a:
01:38:38:27:f3:66:a1:c4:3d:03:05:83:58:59:64:93:5c:56:
56:28:a2:2f:5c:64:49:05:ca:f1:5c:3f:a1:75:54:af:e0:db:
11:11:b4:36:0f:25:bd:35:d9:c9:7a:78:5b:f9:b3:5a:e1:56:
38:4f:b5:08:c4:71:77:93:63:b1:9a:d5:97:37:56:f1:38:1c:
82:ab:a0:f8:31:3f:bc:37:58:3f:cf:b0:c1:f4:72:d9:d3:aa:
8f:03:27:65:72:b3:30:34:2a:d6:a1:d9:74:5e:a5:17:f0:24:
57:42:d0:d2:33:f2:52:c4:ac:03:17:5b:c6:03:9b:0d:b7:ea:
47:b6:19:51:b4:8a:78:16:5f:ce:73:5e:b1:f2:17:d6:c6:37:
e8:8f:e0:00:71:2e:56:19:4f:5e:a4:fb:28:f1:a6:d6:c1:12:
36:dd:4f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:11:09 2026 by rpki-client