
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft
File: v1WlsAYqTmo9yHnjyfyyZnxokrc.mft (raw, json)
Hash identifier: 5V9a3VtbrbKc6w01CP1ONtLbqwuv6Zaor5HljsWyY7c=
Subject key identifier: C3:85:89:26:DA:42:7C:CE:CF:BB:77:11:24:07:9F:B3:FF:91:27:7C
Authority key identifier: BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7
Certificate issuer: /CN=A914E08F/serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7
Certificate serial: 13A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft
Manifest number: 1388
Signing time: Mon 02 Mar 2026 16:59:32 +0000
Manifest this update: Mon 02 Mar 2026 16:59:31 +0000
Manifest next update: Mon 09 Mar 2026 16:59:31 +0000
Files and hashes: 1: v1WlsAYqTmo9yHnjyfyyZnxokrc.crl (hash: jeAf2+9CuYfPCpth2D1aXiR0aJuAJ2NvgSxSgfS4o6w=)
2: 47C453F638A411E9AA7CEB37C4F9AE02.roa (hash: xYVGfoyzRR8/kPcvAtyZisyZx16/tF7yIGrNdZEBWhc=)
3: 7F424CC0350711E9955C524EC4F9AE02.roa (hash: yCe/k6xXVhDcI/ZIpN9FwrLfEE00s0V4+/WP5++jIFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl
rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5033 (0x13a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E08F, serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7
Validity
Not Before: Mar 2 16:59:31 2026 GMT
Not After : Mar 9 16:59:31 2026 GMT
Subject: CN=69a5c1f3-299b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:80:79:88:09:0c:7f:b9:2e:60:94:7b:a8:
d9:48:32:70:11:de:97:50:54:c2:95:86:c0:b5:aa:
63:f9:c9:6c:27:59:88:3e:67:a3:f8:69:1f:dd:c8:
27:20:b8:23:59:5e:47:7e:6d:3d:80:ac:df:d2:37:
e1:94:8b:64:06:b0:5f:8c:2e:89:0e:d2:32:fe:43:
26:f3:06:19:9b:9f:f0:1d:55:bb:1f:52:9e:b3:dd:
26:4f:7c:3f:a7:ba:fe:2a:1d:93:fd:06:39:18:bb:
e5:9e:00:04:9e:c4:ec:8c:31:de:6b:f5:e6:11:5b:
7f:b0:82:b7:58:ce:60:64:ab:ba:2d:70:46:4e:e0:
1b:86:06:53:97:6b:c8:a4:12:fc:dc:3a:fa:cd:d1:
d9:f3:e4:dc:8e:0e:21:01:ab:2c:21:1f:87:51:14:
12:34:98:78:8a:a7:cd:ce:7d:68:ca:b4:ad:f2:19:
96:c9:f0:5e:f7:f0:71:f0:f0:06:f2:09:26:4a:11:
2f:45:ee:91:f4:9d:ae:b5:1a:4b:62:55:83:54:6b:
19:bb:6a:e0:87:47:15:0c:ce:c7:53:51:32:87:a0:
40:17:d3:ab:04:53:c8:48:b1:b4:94:23:bf:f4:0f:
39:cf:e8:34:a7:03:56:93:c2:07:50:fc:54:7e:ae:
7b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:85:89:26:DA:42:7C:CE:CF:BB:77:11:24:07:9F:B3:FF:91:27:7C
X509v3 Authority Key Identifier:
keyid:BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:7f:38:a7:10:10:a5:9c:65:c8:a8:75:87:c2:2d:22:12:44:
93:95:02:62:b6:8a:85:82:c8:1b:6e:b0:0a:f3:ce:39:dd:30:
14:3e:1d:c0:0a:a1:6d:56:82:99:15:94:74:1d:df:6f:aa:59:
82:d2:03:53:7f:62:a2:1a:9d:ff:dc:f8:53:03:7d:71:af:77:
4c:b6:5f:fa:03:55:17:16:62:d1:8b:9d:b7:89:11:67:44:b6:
0c:c7:71:c3:26:69:3b:73:5f:5f:82:6a:bc:d3:6f:58:b5:fa:
f2:73:4c:bb:66:42:0f:0c:81:30:96:60:ca:93:45:6f:3d:8d:
eb:10:8a:b1:08:49:34:8e:82:41:cf:bf:27:5e:f3:cd:d1:62:
9b:f1:7a:06:23:68:51:73:1b:92:5d:8e:e2:37:3a:db:80:98:
ab:c5:a6:c1:c0:f9:15:19:39:99:28:69:1d:40:18:7a:e7:9e:
3f:2f:b7:e3:d8:f3:35:3a:2e:4c:45:28:ed:43:94:bb:8f:04:
2f:11:bc:29:ed:16:35:24:3a:ed:75:85:f3:8e:41:6d:7b:6e:
4a:e7:d1:56:ca:5e:85:8d:0d:eb:13:fc:15:c3:aa:6f:de:8c:
5d:3f:89:38:7b:09:e7:30:69:d1:d7:e0:47:6e:c0:49:d6:91:
93:24:9a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:39 2026 by rpki-client