
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft
File: WUvRQ79yOI2ipctku8ORCIj2TcU.mft (raw, json)
Hash identifier: nYL29IUuAF6Up8/af3Ba8mjEbeVArqz/PKA528veFXo=
Subject key identifier: CE:59:E0:BE:18:16:BC:AF:CF:35:DD:E8:93:52:46:8F:E5:D3:84:99
Authority key identifier: 59:4B:D1:43:BF:72:38:8D:A2:A5:CB:64:BB:C3:91:08:88:F6:4D:C5
Certificate issuer: /CN=A917A53A/serialNumber=594BD143BF72388DA2A5CB64BBC3910888F64DC5
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft
Manifest number: 0125
Signing time: Sun 01 Mar 2026 06:39:01 +0000
Manifest this update: Sun 01 Mar 2026 06:39:00 +0000
Manifest next update: Sun 08 Mar 2026 06:39:00 +0000
Files and hashes: 1: WUvRQ79yOI2ipctku8ORCIj2TcU.crl (hash: iQ8uFNVofzqtlyec2aJmJKCFwCWnhiBim2eJnpBFPME=)
2: ACDAB45E592011EF976B8A1BC4F9AE02.roa (hash: 7CSmGMxiJ/eyVM8Zl9g1/yXgrxIsImTrO2e6GsEs7/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.crl
rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A53A, serialNumber=594BD143BF72388DA2A5CB64BBC3910888F64DC5
Validity
Not Before: Mar 1 06:39:00 2026 GMT
Not After : Mar 8 06:39:00 2026 GMT
Subject: CN=69a3df05-45a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:78:f6:7d:62:27:19:65:36:a3:13:53:36:a5:
6f:14:6d:81:9f:7d:f0:53:fa:b8:fd:2a:48:f4:62:
21:01:33:9f:e9:8a:8d:96:a3:69:11:65:5a:34:2f:
81:1e:15:76:f4:cf:2c:96:24:58:d3:44:a0:dd:74:
f9:bb:55:66:29:18:d9:37:e4:5c:d1:c5:a8:e8:83:
05:c1:4b:8e:25:59:ae:f6:dc:0f:db:67:68:fb:1f:
f0:0a:71:e9:e3:78:a5:ab:29:cc:9b:34:12:f3:74:
56:04:1b:2f:39:54:68:c2:62:ed:8f:23:bc:b9:bb:
db:01:c7:a1:c8:e2:0e:dc:54:e6:55:4e:2b:4d:04:
17:47:ce:2c:af:a1:ee:b5:ac:d1:fc:c5:d5:29:26:
ed:09:f0:ec:16:b5:ff:1c:56:20:0e:55:f3:92:eb:
a6:cc:ae:03:95:50:88:c7:b0:70:cf:6c:0d:61:ee:
33:30:d4:36:5b:24:78:bf:70:da:8b:7b:17:c6:ca:
a3:be:cf:2e:89:f9:80:67:96:3d:f9:8f:86:14:aa:
a8:fd:02:22:e7:fa:48:8a:06:cb:00:18:0f:41:4a:
f1:74:45:d9:f3:20:12:80:2e:ed:6f:a9:78:02:64:
66:bd:6a:92:05:31:c7:44:ad:12:e8:de:b0:01:3b:
7f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:59:E0:BE:18:16:BC:AF:CF:35:DD:E8:93:52:46:8F:E5:D3:84:99
X509v3 Authority Key Identifier:
keyid:59:4B:D1:43:BF:72:38:8D:A2:A5:CB:64:BB:C3:91:08:88:F6:4D:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a6:94:20:26:1f:74:91:a7:2d:c0:36:8c:ba:47:de:5c:e7:
f4:d5:af:5a:ce:21:c6:6d:57:34:13:54:10:21:ca:2c:db:a8:
b6:49:89:83:94:d0:d0:2e:ac:fe:e0:6a:ec:21:a3:d4:ee:bd:
52:e0:25:9a:7d:a8:ba:7a:28:ee:6a:a3:08:fa:9b:8d:b9:c3:
70:5a:c2:34:77:e1:85:b2:f7:83:dd:8b:85:f3:31:f2:70:e7:
43:1e:cb:43:9a:ac:e7:af:a7:f6:9d:66:ed:fd:0b:cb:e4:23:
8e:58:bf:86:a6:80:bc:b7:87:9d:32:da:1a:77:60:f3:53:56:
5f:91:55:9b:7c:66:0c:d0:9b:c8:ff:2b:c2:b1:7e:8a:93:47:
d2:5a:7f:ec:08:13:bf:8b:fc:9a:a3:28:9f:18:b6:4f:3d:7a:
cf:af:20:fc:93:46:a7:04:9d:97:c1:a9:64:e3:3a:81:18:a9:
c0:1e:1a:81:15:96:13:54:cb:a5:cf:d0:01:c1:7e:d9:d6:21:
b6:db:2d:01:a5:a5:45:cf:ce:40:f5:d8:22:17:38:16:6a:7c:
f9:e1:03:c3:1a:2a:e9:46:c7:eb:97:8a:e9:43:08:7a:97:c1:
41:76:35:a3:45:c3:16:b2:ab:95:4a:e8:fb:c0:c7:ac:eb:14:
28:92:17:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:43:12 2026 by rpki-client