
$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
File: w9iTsikbOh4b9fTwQdEFLizLslo.mft (raw, json)
Hash identifier: 3wPWVaVnOdKyAP1HQ6QVOtnAjacZGyreMoIQdglIEbQ=
Subject key identifier: 26:C1:1A:30:22:E7:74:1C:9D:D6:2C:83:CC:A3:BF:CE:B4:84:14:3A
Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
Certificate issuer: /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Certificate serial: 01F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
Manifest number: 01DB
Signing time: Wed 15 Apr 2026 04:36:33 +0000
Manifest this update: Wed 15 Apr 2026 04:36:33 +0000
Manifest next update: Wed 22 Apr 2026 04:36:33 +0000
Files and hashes: 1: w9iTsikbOh4b9fTwQdEFLizLslo.crl (hash: Bn6NdTgiMlwkNVj3+iQBm58lc6lu3e2c0ZB13xCXkxA=)
2: ACFC76964A0E11EF91642A7AC4F9AE02.roa (hash: t0ohuFfdaakmzrww/Q0JMVR9B+akqFaPf0gzMitcQI0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl
rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 04:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ADC4, serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Validity
Not Before: Apr 15 04:36:33 2026 GMT
Not After : Apr 22 04:36:33 2026 GMT
Subject: CN=69df15d1-f4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:32:cc:a8:42:ad:c3:85:96:f9:20:53:0c:e6:
3d:52:97:1b:0d:01:49:14:59:b6:d9:22:15:9e:d3:
a2:e6:94:5c:d7:e7:8c:79:df:db:fc:cd:59:2a:c9:
2d:36:89:ce:6d:1c:2c:b4:47:5e:0a:58:86:f7:1a:
7c:e2:91:c3:ed:53:2a:4c:56:67:73:98:d4:f7:c5:
e1:7e:53:ad:02:7b:87:8c:69:7b:41:32:0f:20:95:
9a:24:1e:6c:f4:3c:23:72:a2:03:41:4a:5e:c9:cb:
69:6e:74:f9:f9:88:de:d4:5b:70:b8:02:be:80:19:
80:79:62:64:76:81:a6:1a:37:5c:e3:02:cf:e5:f9:
43:b5:9f:53:da:bd:af:a8:70:af:87:33:fb:fb:80:
e1:57:57:16:a5:00:ea:54:0a:70:cb:60:a5:fd:34:
7c:c2:53:65:bc:be:8a:2b:e4:be:d0:62:9c:0e:8d:
87:1e:f5:66:0b:3a:29:e2:bd:39:d7:d0:f6:4c:47:
cf:8c:f3:7e:c2:42:51:e9:15:ed:05:bc:bb:cd:72:
b5:f3:e6:ce:83:ca:96:12:51:02:a0:65:f7:e6:23:
6f:33:0b:e8:60:f0:bd:55:6f:5f:67:36:02:05:cf:
95:9b:05:55:44:e2:6b:f0:0f:9d:29:8e:ca:e6:57:
7b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C1:1A:30:22:E7:74:1C:9D:D6:2C:83:CC:A3:BF:CE:B4:84:14:3A
X509v3 Authority Key Identifier:
keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:1a:1f:b9:db:da:07:43:cf:2d:c2:f0:85:3d:ec:94:8f:e0:
c6:a9:0a:b3:54:f6:3d:73:b3:f8:9a:e5:10:fb:68:f7:e9:18:
33:2c:2d:26:ee:a1:6d:67:85:e8:8d:0d:f1:9f:82:cd:4d:c7:
1d:9a:99:5f:5a:0f:14:ef:65:5f:a8:39:18:24:6a:87:6b:53:
33:57:d5:77:06:bc:0b:72:ab:d5:87:75:ae:ac:44:be:33:22:
19:dc:78:03:4d:73:9e:2a:8c:8d:ce:3a:84:23:cb:60:c8:8b:
7b:9d:75:80:be:e9:76:94:78:27:91:56:28:16:4b:73:02:d8:
4e:5b:d6:ca:60:86:c7:1b:9d:21:ee:a8:5e:8f:5f:4a:7a:6f:
3f:d0:90:84:8f:f4:87:49:9c:03:48:64:86:3e:3d:2e:6f:eb:
3a:20:d8:61:af:3b:0d:45:dd:80:b3:c0:cb:01:9b:20:b2:72:
80:b0:bf:c0:be:54:36:45:c9:c3:f1:7f:4b:4f:0d:09:0d:f3:
05:21:b3:79:ee:b8:4e:95:84:ee:68:28:a3:42:c7:69:6d:2e:
a6:e2:3c:ba:9b:0d:71:30:cc:5c:aa:fd:76:ff:2d:d0:a7:85:
ea:3f:5c:4b:ae:e9:37:18:88:e7:b9:4b:28:71:87:5d:75:de:
f0:c8:8d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:46 2026 by rpki-client