
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
File: WR4siXPGPwtQ7voTRGvLFexS5R8.mft (raw, json)
Hash identifier: deEnfxpxBp9CrUDigRnBS4onMJSYaTQ8hYAfbp0AsTw=
Subject key identifier: 82:59:96:91:D4:5C:BC:89:94:DA:14:4E:C2:A6:2C:52:F1:F6:BC:69
Authority key identifier: 59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F
Certificate issuer: /CN=A9159E90/serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F
Certificate serial: 0221
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
Manifest number: 0218
Signing time: Fri 17 Apr 2026 02:45:29 +0000
Manifest this update: Fri 17 Apr 2026 02:45:29 +0000
Manifest next update: Fri 24 Apr 2026 02:45:29 +0000
Files and hashes: 1: WR4siXPGPwtQ7voTRGvLFexS5R8.crl (hash: Hdi6TRtOKRNJduFwqrfpZUvjBx/AsnjI4m5ahXIAGYQ=)
2: 7893F3DC0B8511F086B2C121C4F9AE02.roa (hash: 6s8dW9eLTERLyjzRmVjBJQp0yaZ34l8yCtxJv23gVCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl
rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159E90, serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F
Validity
Not Before: Apr 17 02:45:29 2026 GMT
Not After : Apr 24 02:45:29 2026 GMT
Subject: CN=69e19ec9-254c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:25:9b:8c:58:3e:62:ea:ae:18:67:9d:88:
41:e4:75:7a:98:3d:84:6c:21:c6:0c:57:1f:73:d5:
3a:05:09:eb:01:08:32:a2:6d:c6:40:59:18:bd:64:
f8:fd:e4:10:25:a4:bc:00:62:a0:f1:cb:34:bb:51:
77:d9:fb:f0:88:02:18:b1:61:fb:b1:2c:22:68:65:
87:aa:5c:10:e8:cd:7b:c1:33:35:f0:d3:31:f6:ee:
f0:8e:ca:a1:3f:1e:62:67:34:03:e4:48:ba:36:cc:
eb:27:61:b9:90:43:58:f5:91:a5:dd:3e:82:88:57:
1f:bc:e6:86:f5:cc:79:06:23:a0:0e:39:ce:c1:cb:
26:b7:8b:af:a6:83:0a:21:bb:aa:da:70:2a:71:00:
89:3c:10:81:71:15:35:86:a6:29:1c:fc:cf:97:86:
94:a5:fa:9a:3f:9c:2b:3d:f2:bc:04:79:c3:e1:60:
6a:c2:ed:4b:7d:73:87:d3:27:4e:c3:57:8c:b1:cd:
fa:19:47:09:f0:c8:33:f3:81:c5:7f:38:60:a9:28:
f9:25:d2:54:a7:ad:78:dc:64:7e:55:28:ce:c5:9e:
15:bf:67:a0:f5:7a:00:3b:f7:53:fe:0a:9d:07:6d:
1e:fd:5e:d6:a0:73:4c:42:23:23:12:81:00:72:7f:
25:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:59:96:91:D4:5C:BC:89:94:DA:14:4E:C2:A6:2C:52:F1:F6:BC:69
X509v3 Authority Key Identifier:
keyid:59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:07:9c:86:0b:41:74:5d:d3:91:96:ea:a3:c7:aa:de:3f:dd:
4f:d7:cf:51:31:5a:d7:b6:ed:0f:c2:0d:32:81:f4:f1:c4:53:
91:db:51:4c:9f:02:98:09:45:2a:86:9f:bd:12:a3:0f:dd:bc:
22:1e:1f:18:2c:7e:64:a4:75:ee:c9:14:01:7a:a0:2a:54:68:
df:a6:aa:79:0c:ad:74:69:ea:8a:44:41:d1:37:5d:e3:d4:fd:
32:26:12:89:69:83:30:1f:a5:68:76:17:fb:23:72:fa:c0:96:
ab:91:f7:3b:f9:a4:47:4a:43:5e:13:7f:05:8f:16:64:e1:ca:
26:a5:66:09:54:49:98:df:bc:e5:ca:1d:55:81:ba:ca:a9:92:
a9:3a:34:8e:b1:19:71:af:5d:29:1d:97:f4:98:29:99:26:8a:
ae:e3:55:8b:ef:39:20:e6:99:d1:d8:30:ff:ed:97:b1:8d:6e:
91:5b:85:5f:2d:20:84:be:17:9b:76:7a:a3:c5:44:8b:8d:ad:
94:90:6e:82:03:24:86:f9:c3:dc:57:6e:e8:00:ee:4a:35:4e:
e2:de:0c:11:96:8d:06:d9:d1:20:b9:a9:37:cc:e2:19:3f:71:
a1:40:90:d7:98:7a:4b:e1:2e:70:af:b0:bf:00:0a:fb:71:83:
aa:c7:fb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:14 2026 by rpki-client