
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft
File: WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft (raw, json)
Hash identifier: fP7utUtbh05iy6NYV4rKJZtucgVHePGbY7M88eXBBlk=
Subject key identifier: 34:DF:27:72:6C:1F:3A:FC:58:FE:EB:F0:84:9D:74:95:DC:64:31:3E
Authority key identifier: 58:5E:4E:B5:94:0C:D8:07:A1:F7:94:53:1B:05:A1:0D:C7:E4:33:B2
Certificate issuer: /CN=A9193227/serialNumber=585E4EB5940CD807A1F794531B05A10DC7E433B2
Certificate serial: 02
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WF5OtZQM2Aeh95RTGwWhDcfkM7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft
Manifest number: 02
Signing time: Tue 28 Jul 2026 06:19:18 +0000
Manifest this update: Tue 28 Jul 2026 06:19:18 +0000
Manifest next update: Tue 04 Aug 2026 06:19:18 +0000
Files and hashes: 1: WF5OtZQM2Aeh95RTGwWhDcfkM7I.crl (hash: WMZoW/6g8OG95q6oi4PS+Ts+z813u4EhiBw6cEp/MMg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.crl
rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WF5OtZQM2Aeh95RTGwWhDcfkM7I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 06:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193227, serialNumber=585E4EB5940CD807A1F794531B05A10DC7E433B2
Validity
Not Before: Jul 28 06:19:18 2026 GMT
Not After : Aug 4 06:19:18 2026 GMT
Subject: CN=6a6849e6-b406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:36:36:2e:0d:64:19:d5:3f:8d:2b:ec:e1:
c4:48:c5:27:69:04:7e:f0:34:14:77:e3:ca:8a:e6:
20:42:a7:13:8f:68:89:d7:48:5e:4d:e0:63:85:d8:
c6:32:ea:03:a8:f4:6f:3d:41:1f:67:2f:4a:07:99:
67:0b:01:d3:5e:9a:5b:11:c2:5d:99:2b:18:4d:5e:
24:33:b1:7a:ab:68:77:96:a1:e3:7a:e2:84:fd:74:
30:c7:55:db:c1:51:51:90:3e:3a:18:14:38:51:e5:
3c:8a:99:10:3a:68:13:e3:f3:19:6f:6a:3d:ee:92:
7b:f3:9d:62:1d:75:e7:01:33:f0:4a:29:4c:7b:d5:
79:f8:27:c4:56:33:81:5f:5e:da:bb:97:7f:c6:9a:
79:63:4a:55:32:30:a8:c3:de:11:8e:0d:b5:a3:e4:
43:47:59:b0:5c:0c:c5:7f:bc:8a:aa:af:a4:b5:a0:
a8:ad:f8:39:6b:d0:cb:69:c4:7a:8f:10:20:5c:e9:
b9:8d:9a:8f:75:b1:f8:f8:db:d7:45:6f:23:28:2e:
a2:db:57:7e:67:94:db:6c:09:07:94:d1:92:58:88:
cf:77:91:fd:86:54:65:3d:d5:e4:ee:f1:57:4c:12:
37:f0:42:b8:3a:b8:0e:de:76:4f:03:8f:74:2b:14:
de:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DF:27:72:6C:1F:3A:FC:58:FE:EB:F0:84:9D:74:95:DC:64:31:3E
X509v3 Authority Key Identifier:
keyid:58:5E:4E:B5:94:0C:D8:07:A1:F7:94:53:1B:05:A1:0D:C7:E4:33:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WF5OtZQM2Aeh95RTGwWhDcfkM7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:6f:7a:01:c3:7f:08:66:c1:cc:12:0d:73:ad:dd:ff:4f:f5:
54:c1:fe:34:e8:3c:e5:d1:74:76:89:3e:47:7a:bf:4a:8a:f5:
0b:64:47:db:8d:e6:52:a8:99:f3:75:63:2d:48:e5:77:0a:86:
97:f3:05:3c:e0:14:60:09:78:26:bf:36:e7:75:11:7c:18:70:
04:77:1c:3a:ab:6e:47:f9:fd:6d:a4:b9:55:a3:c2:7a:73:73:
5f:c8:5f:d2:8c:e1:dc:f9:22:fd:0c:7d:10:d0:f3:f2:22:9f:
e5:1a:76:ec:15:c6:ac:2d:1f:e5:aa:02:88:e4:79:50:ca:6e:
68:0b:35:18:31:17:a6:57:f9:ea:a1:32:25:99:22:f9:51:36:
77:68:54:a5:ba:5a:b3:fd:e4:d1:80:a4:e9:99:a6:ff:2b:5b:
44:0c:f3:20:2c:62:3e:f1:97:8e:f9:dd:34:09:f3:a1:7f:09:
cf:a7:f8:b3:e0:52:a4:ca:08:d7:d5:ed:d9:c8:a5:cb:45:95:
20:59:ec:6c:5a:ff:50:3c:dd:6f:b4:cf:36:b6:6d:e3:a6:7a:
95:99:a4:19:ff:9b:23:ce:a6:f9:a8:bf:7d:e1:58:88:d2:c1:
35:82:3a:bc:e8:1e:1b:47:31:a7:cf:2a:53:75:8a:61:86:9e:
6d:97:5c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:38:19 2026 by rpki-client