
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
File: Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft (raw, json)
Hash identifier: yo0+bTydGYYgKMF1ONADbLpQnPWucZQZoHmp+bYNXYw=
Subject key identifier: 44:7E:42:16:CF:9F:30:95:2A:BA:B9:6A:59:65:7F:23:E7:54:2A:F0
Authority key identifier: 5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB
Certificate issuer: /CN=A918DAC5/serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB
Certificate serial: ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
Manifest number: ED
Signing time: Sun 01 Mar 2026 07:29:06 +0000
Manifest this update: Sun 01 Mar 2026 07:29:06 +0000
Manifest next update: Sun 08 Mar 2026 07:29:06 +0000
Files and hashes: 1: Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl (hash: JNOQjd7yGiO/u7Sq+XS77TSx5AESEKBaM2HfVVPQZjU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl
rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DAC5, serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB
Validity
Not Before: Mar 1 07:29:06 2026 GMT
Not After : Mar 8 07:29:06 2026 GMT
Subject: CN=69a3eac2-86c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:03:d7:aa:68:d7:9c:9a:07:2c:cf:24:21:e2:
3c:0b:c7:c0:29:f5:0c:e7:d4:84:60:3c:95:03:f8:
63:3a:19:7a:4d:bd:2f:00:bb:44:7f:9b:59:83:3a:
90:c9:76:e0:41:4e:71:74:52:87:4b:29:79:41:02:
e7:05:4d:77:a9:fd:18:6d:c2:19:67:cb:ea:c9:7f:
50:26:b4:2b:19:a0:89:f1:75:12:d7:ec:0a:8c:f6:
7e:fd:69:64:14:4c:c1:ce:b9:57:b4:45:43:6f:7d:
1a:f5:af:f3:5d:47:ae:7a:fc:00:e0:64:c6:b3:c4:
38:4b:c9:44:50:de:7a:10:10:ee:d1:1d:b9:6f:33:
ed:d9:7c:74:fb:4c:6a:59:4e:bc:d6:ad:41:86:8b:
6b:24:5e:59:3a:1f:be:91:89:1f:19:af:f9:7e:27:
05:e0:56:b9:12:87:b7:b0:5e:b4:64:10:8d:33:a2:
bd:8c:ca:08:00:86:ca:cc:cb:8a:64:54:6e:e5:7e:
5a:1f:c5:3b:38:dc:3c:e1:2b:9c:fe:72:ce:f5:d0:
cc:ba:f3:9c:aa:ed:d4:6d:88:be:db:e3:95:98:83:
80:fa:93:53:fe:a6:56:c4:e7:bf:ca:99:48:be:95:
37:58:49:3a:41:57:6e:9d:e3:bd:80:7c:57:bf:84:
63:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7E:42:16:CF:9F:30:95:2A:BA:B9:6A:59:65:7F:23:E7:54:2A:F0
X509v3 Authority Key Identifier:
keyid:5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:e8:a2:79:15:69:76:2a:63:92:1c:5e:ee:17:6e:8c:10:72:
c0:8f:20:d7:14:5d:bf:8d:d2:04:c1:1d:49:b4:1c:e2:c0:d2:
a0:2b:12:cf:51:6f:5f:cf:17:d7:ec:ef:3f:ec:0c:20:fc:05:
65:7f:83:f7:c4:7d:c1:85:35:4e:41:44:f2:9f:57:9e:e6:f5:
fc:ae:18:f9:4b:46:37:06:e5:0b:76:0c:ac:d2:96:90:9e:3b:
1c:ff:70:4b:7c:39:72:c3:a1:02:f8:d5:f4:d0:f6:1f:5d:6a:
bc:2e:2b:a2:a6:60:a1:21:55:46:36:a7:ca:6f:ce:ab:4a:73:
cc:8f:54:f8:de:49:cc:5a:66:ca:b6:c1:78:70:d6:f3:f3:56:
cf:23:0a:05:78:00:24:e9:5b:50:2c:c2:df:1e:58:69:8f:45:
49:9c:4a:17:70:ad:b9:09:e2:02:c4:2f:53:ec:f7:7d:9c:e6:
3a:a6:dc:77:86:33:99:3d:27:52:de:b2:e4:66:8e:c1:c1:67:
27:3d:7c:88:4d:3e:9b:b0:71:24:1c:a2:17:95:9f:63:88:a9:
48:fb:e8:35:e4:cb:05:bb:7c:ba:d8:8d:8b:b3:04:16:ff:41:
38:cf:99:81:bc:92:42:97:03:8f:5d:1b:3a:25:42:5b:c1:64:
12:d4:72:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:43:52 2026 by rpki-client