
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
File: w5O8331Fpxlv881tMNYjDfT9xX0.mft (raw, json)
Hash identifier: 5lqTzOGkgcUwoEO0zWaZxW7ymUXXFQ38jptMNMPmBJ8=
Subject key identifier: 35:9D:0C:80:E4:03:CE:A3:B4:A1:5F:FB:4E:19:19:9B:E6:F0:F5:5A
Authority key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D
Certificate issuer: /CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
Certificate serial: 0138
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
Manifest number: 0133
Signing time: Mon 02 Mar 2026 00:06:27 +0000
Manifest this update: Mon 02 Mar 2026 00:06:25 +0000
Manifest next update: Mon 09 Mar 2026 00:06:25 +0000
Files and hashes: 1: w5O8331Fpxlv881tMNYjDfT9xX0.crl (hash: 1Dv3fVZw2EbAqx0WuJ4K8TvDCwPWiqVLPIXrLXJeGIA=)
2: 2B4804B845B211EF9B812019C4F9AE02.roa (hash: PHCMK3dhaeAZ+9EYgZ17CzNOe8icAJdFBqm+KQxnS0I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl
rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:06:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED2B, serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
Validity
Not Before: Mar 2 00:06:25 2026 GMT
Not After : Mar 9 00:06:25 2026 GMT
Subject: CN=69a4d483-0838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f4:27:07:94:9a:93:87:7e:6f:a8:fd:02:51:
a0:8c:52:85:78:29:4b:56:6d:12:07:39:10:5f:66:
c9:6a:f6:dd:46:fb:3d:61:b8:16:b0:c3:fb:b7:b0:
5a:df:56:aa:0e:da:13:93:8b:e5:5e:04:da:ce:90:
58:90:5f:8a:29:2f:f8:d4:f1:ff:44:36:1c:c9:10:
92:ce:f9:ef:c3:4e:dd:98:74:3a:d3:27:74:a7:ba:
d5:f0:c9:98:5f:80:79:26:aa:b3:82:40:8e:8e:f6:
63:1a:ad:ed:f1:1e:6d:b8:c0:f4:28:d7:b8:8b:a1:
b9:01:ab:b8:ff:07:4f:19:36:08:b5:b3:8d:55:d6:
03:c8:d6:f2:09:cf:1c:38:63:34:7b:93:cd:3e:68:
b3:cc:4e:8a:78:af:48:0e:11:21:f3:89:8a:c7:66:
96:03:c6:9b:ba:36:03:7c:a4:73:a7:c1:aa:26:3d:
06:50:f9:eb:6a:61:bb:5b:c0:e7:cf:6b:e5:fc:93:
f8:cb:a9:90:7f:42:95:96:54:97:41:5c:0f:95:45:
0c:fd:80:3d:8f:86:ee:4c:36:62:a3:06:81:d5:53:
05:11:96:5d:4d:38:3a:c3:a7:f7:50:a8:93:a4:8c:
51:51:80:35:0a:91:85:f8:76:15:dc:b1:de:2a:d8:
cc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9D:0C:80:E4:03:CE:A3:B4:A1:5F:FB:4E:19:19:9B:E6:F0:F5:5A
X509v3 Authority Key Identifier:
keyid:C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:0a:36:2e:ff:eb:8b:3f:51:c9:01:19:4b:14:75:f3:d5:55:
21:3a:95:5e:66:1c:d8:f1:af:1c:f4:29:56:41:bc:9d:72:55:
81:69:c7:58:e5:12:34:36:37:00:3c:19:89:68:b7:d9:01:1b:
b5:57:0f:f8:26:ec:99:48:23:fc:e7:e2:a0:4c:1d:52:40:50:
4b:fd:80:db:20:47:31:94:73:2c:05:20:bd:0c:68:f4:4f:78:
0a:2d:f6:12:7b:fb:5c:db:21:50:91:60:a2:45:e2:96:91:bc:
9b:b7:74:a8:13:de:58:13:39:c0:53:62:1a:d6:f0:af:b3:1f:
27:91:fc:af:ee:93:38:fd:8f:36:e3:c8:5d:0e:7b:4e:15:3f:
5d:9e:cf:50:f4:eb:d4:d7:17:48:42:b2:af:98:16:89:e6:43:
64:88:0b:d2:58:63:1f:b9:5a:ec:19:14:b9:34:ba:ed:4a:97:
4a:c5:46:32:75:be:93:e8:28:fe:d0:37:ff:c9:70:9a:e8:ec:
9f:29:e3:33:09:95:d8:c9:a0:b4:ec:13:57:69:d9:91:da:7f:
11:d0:9e:ae:2b:33:37:58:4c:2c:0a:8f:24:3f:67:c1:a5:fe:
16:2e:fe:05:59:79:db:08:d7:a6:8c:9e:71:03:25:a7:1f:b4:
c2:4c:c5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:57:26 2026 by rpki-client