
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
File: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft (raw, json)
Hash identifier: M5fIO+IgO/AwSoXPJ05YWnsod1AuQbA/RIOaN8pXRps=
Subject key identifier: DA:0E:34:3B:19:A6:5B:30:6A:F3:B7:0F:EA:91:88:41:B6:74:B2:59
Authority key identifier: 5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4
Certificate issuer: /CN=A9188D0C/serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4
Certificate serial: 037A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
Manifest number: 0373
Signing time: Mon 02 Mar 2026 01:42:17 +0000
Manifest this update: Mon 02 Mar 2026 01:42:14 +0000
Manifest next update: Mon 09 Mar 2026 01:42:14 +0000
Files and hashes: 1: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl (hash: baiiyt54SxgRotrkPVdob8X4dUKq/8DvepJ8mm/Tf0s=)
2: 42CD71AEE33511EC9EDB371BC4F9AE02.roa (hash: akLFFGOMj+dAHfljUl6hKPCtbjq9Zn0f4/FQ8M9sWBI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl
rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890 (0x37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188D0C, serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4
Validity
Not Before: Mar 2 01:42:14 2026 GMT
Not After : Mar 9 01:42:14 2026 GMT
Subject: CN=69a4eaf8-dde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:0e:da:e9:56:df:81:3a:7f:93:e1:29:75:
6d:a1:97:5b:23:fd:6c:e3:e5:78:53:0b:a5:49:66:
aa:45:4c:dc:30:c2:59:dd:3a:81:ec:72:61:e2:b9:
a9:68:83:f8:74:d9:dd:9c:e7:b1:7d:95:9e:da:d4:
3b:b3:ee:4b:97:fd:38:e8:2d:a1:0c:e2:d4:ff:a2:
0f:6f:7e:c1:bc:94:3c:2d:73:df:b4:37:33:58:48:
cd:d4:6c:14:40:70:97:1f:3e:9a:54:f8:45:25:77:
0f:a0:43:82:2c:29:17:b7:ea:02:c3:e4:5e:e6:9f:
e9:d7:78:10:66:26:9b:c6:ba:bb:72:9b:ec:51:3a:
28:b9:eb:91:a7:57:73:14:a6:e1:32:cb:74:d1:21:
99:08:29:76:f8:d4:cf:a0:2c:8a:79:4f:6a:bf:89:
83:51:da:48:0f:49:47:a2:13:40:64:d9:4a:7a:45:
2e:b8:a1:6d:6d:5e:96:fb:eb:8f:46:2c:2b:c0:11:
16:35:0c:a7:bf:0b:5f:34:36:70:da:0d:57:1c:c6:
29:af:13:81:e6:de:d3:dc:21:f5:be:2f:b2:f2:8f:
2c:67:6d:bc:3b:3e:de:a3:99:b4:d0:bf:b3:35:ef:
ec:46:07:18:91:0d:8e:6c:1c:50:2e:44:e6:d5:fb:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0E:34:3B:19:A6:5B:30:6A:F3:B7:0F:EA:91:88:41:B6:74:B2:59
X509v3 Authority Key Identifier:
keyid:5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:aa:2a:64:a0:af:46:d1:06:01:97:2e:38:f1:74:6c:66:e9:
74:7a:34:96:1e:2f:33:db:f5:50:45:1c:fa:5e:0c:2b:80:9d:
41:a3:c4:e9:f5:45:a9:11:33:b7:c1:1c:e8:de:87:43:b9:cb:
35:2f:c0:91:1a:fd:fe:2c:9b:2c:0a:fd:45:83:6f:e7:76:7a:
ae:07:f1:a5:e3:a8:8c:8e:c1:e0:4c:cc:6a:46:85:23:c9:8f:
d9:b9:08:bc:e1:9d:19:68:fe:a5:13:4d:17:75:e5:c3:7e:fc:
1a:d8:c8:34:97:3d:4e:70:b3:f9:e6:9e:f9:d1:80:41:9a:72:
bd:7b:43:4f:99:0d:a6:13:8c:cf:b4:d6:cc:83:db:e4:f8:64:
cb:13:2a:de:7b:27:30:60:f6:66:2c:6a:83:26:ce:0b:09:fe:
30:d7:af:e7:a1:92:7d:df:dc:05:d5:56:9b:67:8a:04:94:3e:
6d:95:65:98:61:d1:91:aa:dc:97:96:3e:ff:53:0b:3b:b0:d3:
1b:6a:40:4f:54:7d:90:70:62:a6:dd:56:5c:ac:01:0c:dd:16:
3a:57:e9:65:4a:bf:f4:7b:71:55:ef:3c:ec:ad:25:c7:0d:49:
f9:7d:ca:ae:1c:84:8d:7c:df:f0:28:ec:a5:01:5d:cc:1b:1c:
55:6e:25:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:46:24 2026 by rpki-client