
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft
File: wHDviCxuSAhkJKm18UZuG3dKRJo.mft (raw, json)
Hash identifier: lp0506jJ8k4QpG6nz7Q2lkQyoQ19nz9VpwRFmgjlMm8=
Subject key identifier: 36:77:43:E6:D5:06:26:6F:8F:53:49:71:F0:A4:9F:C5:81:DA:63:B1
Authority key identifier: C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A
Certificate issuer: /CN=A914EB9A/serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A
Certificate serial: 01B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft
Manifest number: 01B8
Signing time: Tue 13 Oct 2026 04:29:39 +0000
Manifest this update: Tue 13 Oct 2026 04:29:39 +0000
Manifest next update: Tue 20 Oct 2026 04:29:39 +0000
Files and hashes: 1: wHDviCxuSAhkJKm18UZuG3dKRJo.crl (hash: R47vNVxGZK8QaVGANKvTBjMd0vsjtAzYePIwPpnUkyc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl
rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 04:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EB9A, serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A
Validity
Not Before: Oct 13 04:29:39 2026 GMT
Not After : Oct 20 04:29:39 2026 GMT
Subject: CN=6acdb3b3-2283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:c9:5a:54:78:a5:aa:91:ab:56:7b:3d:7a:
31:b2:07:f8:0f:5e:98:e0:82:b1:c7:3a:94:08:3f:
8b:e1:56:e0:3b:25:db:01:72:22:2c:65:8e:69:41:
01:00:9b:25:1e:ce:44:2a:4f:09:e3:90:dc:34:4f:
01:5a:1e:c2:fc:19:90:c5:91:99:3d:bc:e2:2a:4b:
6b:33:14:ce:a5:d4:ae:4a:9c:d2:6c:59:a9:b7:da:
af:7c:5f:1d:0e:e3:7f:67:5d:87:c3:e2:14:69:91:
3b:78:14:9e:b9:08:ce:5b:db:2d:0a:39:17:50:fb:
25:38:8e:b8:bb:8d:02:76:1d:96:c6:94:46:4b:98:
da:a8:89:36:b5:35:ae:34:30:83:fc:47:42:df:46:
89:58:da:76:2a:da:9f:a6:61:f3:1c:9d:a3:cf:66:
db:50:66:85:43:cf:7e:80:6f:8e:38:00:7d:12:18:
24:cf:9a:77:e5:27:f7:80:42:df:87:33:a1:e9:2e:
4d:90:d9:aa:16:d6:c5:06:b3:e1:75:c0:d7:31:e4:
16:83:e8:88:f7:d1:c6:ce:51:5e:7a:f2:2d:5e:69:
04:81:bf:74:f3:c8:8e:ad:13:5c:09:19:b4:78:26:
8b:4e:46:6a:60:c8:02:75:89:8a:fd:55:06:e0:74:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:77:43:E6:D5:06:26:6F:8F:53:49:71:F0:A4:9F:C5:81:DA:63:B1
X509v3 Authority Key Identifier:
keyid:C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:fe:83:29:dc:f9:df:58:55:10:bf:f3:94:1d:5f:22:30:d5:
3f:c6:cb:5f:31:84:0d:bb:38:d5:2f:74:c0:f6:ea:8a:82:04:
5f:e3:ff:57:f3:73:07:6c:42:f6:9f:27:f9:6e:ba:9c:95:93:
cd:cb:0e:ac:dd:78:84:47:47:3f:fb:51:72:38:30:ea:19:26:
fa:d6:b2:f8:98:d6:65:d8:45:d4:df:f5:22:9e:82:72:a4:d7:
d0:74:3a:f8:da:d5:70:ab:a5:f4:0f:c0:55:41:5e:99:a6:77:
c7:66:07:e1:72:73:28:e1:5e:d4:c6:2b:b6:6d:cf:8d:0f:f0:
41:2f:1e:be:2a:41:49:cb:cf:9b:d3:17:d4:78:23:c3:19:a0:
75:01:af:c2:75:8d:63:db:92:d1:78:69:a8:45:02:54:d0:0e:
f0:64:bf:be:59:4a:62:a7:aa:44:c0:3f:4f:42:d3:a8:70:0d:
25:a6:2d:65:a2:17:35:86:2a:06:e6:d4:05:56:f2:24:b6:31:
22:54:18:8f:f7:93:bb:05:86:81:0f:48:27:5a:bc:98:76:b1:
f0:71:85:26:25:d5:db:f8:da:0e:44:10:26:6d:47:71:3f:b3:
ae:af:02:4a:c0:ca:2b:71:65:26:fa:f4:c1:a5:1d:f2:e7:fe:
b3:d7:3a:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVCOUExMTAvBgNVBAUTKEMwNzBFRjg4MkM2RTQ4MDg2NDI0QTlCNUYxNDY2RTFC
Nzc0QTQ0OUEwHhcNMjYxMDEzMDQyOTM5WhcNMjYxMDIwMDQyOTM5WjAYMRYwFAYD
VQQDEw02YWNkYjNiMy0yMjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqj7JWlR4paqRq1Z7PXoxsgf4D16Y4IKxxzqUCD+L4VbgOyXbAXIiLGWOaUEB
AJslHs5EKk8J45DcNE8BWh7C/BmQxZGZPbziKktrMxTOpdSuSpzSbFmpt9qvfF8d
DuN/Z12Hw+IUaZE7eBSeuQjOW9stCjkXUPslOI64u40Cdh2WxpRGS5jaqIk2tTWu
NDCD/EdC30aJWNp2KtqfpmHzHJ2jz2bbUGaFQ89+gG+OOAB9Ehgkz5p35Sf3gELf
hzOh6S5NkNmqFtbFBrPhdcDXMeQWg+iI99HGzlFeevItXmkEgb9088iOrRNcCRm0
eCaLTkZqYMgCdYmK/VUG4HTVCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZ3Q+bV
BiZvj1NJcfCkn8WB2mOxMB8GA1UdIwQYMBaAFMBw74gsbkgIZCSptfFGbht3SkSa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI5QS9EQTY5MDdBMDIz
QzMxMUVGODkyREVCMjFDNEY5QUUwMi93SER2aUN4dVNBaGtKS20xOFVadUczZEtS
Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3dIRHZpQ3h1U0Foa0pLbTE4VVp1RzNkS1JKby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RUI5QS9EQTY5MDdBMDIzQzMxMUVGODkyREVCMjFDNEY5QUUwMi93SER2aUN4dVNB
aGtKS20xOFVadUczZEtSSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh/6DKdz531hVEL/zlB1fIjDVP8bLXzGEDbs41S90wPbqioIEX+P/V/NzB2xC
9p8n+W66nJWTzcsOrN14hEdHP/tRcjgw6hkm+tay+JjWZdhF1N/1Ip6CcqTX0HQ6
+NrVcKul9A/AVUFemaZ3x2YH4XJzKOFe1MYrtm3PjQ/wQS8evipBScvPm9MX1Hgj
wxmgdQGvwnWNY9uS0XhpqEUCVNAO8GS/vllKYqeqRMA/T0LTqHANJaYtZaIXNYYq
BubUBVbyJLYxIlQYj/eTuwWGgQ9IJ1q8mHax8HGFJiXV2/jaDkQQJm1HcT+zrq8C
SsDKK3FlJvr0waUd8uf+s9c6NQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 08:57:38 2026 by rpki-client