
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
File: _wsVRthMDZNVkFtsopPiW0QJSMU.mft (raw, json)
Hash identifier: Vy+20TwJqvk4w5s+uDmfX+wb+8+rCUt2Ij6jzk+rkZc=
Subject key identifier: F1:1E:E5:1A:3F:FD:47:D6:73:86:00:30:F0:2B:CF:A2:6D:80:38:A9
Authority key identifier: FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5
Certificate issuer: /CN=A9198F53/serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
Certificate serial: 0C17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
Manifest number: 0C09
Signing time: Sun 20 Sep 2026 18:48:25 +0000
Manifest this update: Sun 20 Sep 2026 18:48:25 +0000
Manifest next update: Sun 27 Sep 2026 18:48:25 +0000
Files and hashes: 1: _wsVRthMDZNVkFtsopPiW0QJSMU.crl (hash: bldnYKHJd+K+Yrw9pMbXkpW1McvGsQWwzzuTJCTSHBM=)
2: 0B1FBD4A40F611EAACD44866C4F9AE02.roa (hash: DFdvRHgXchuBm4qDLuYljzDy6YW5jSvcOAQEQdXRUns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl
rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3095 (0xc17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198F53, serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
Validity
Not Before: Sep 20 18:48:25 2026 GMT
Not After : Sep 27 18:48:25 2026 GMT
Subject: CN=6ab02a79-6dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:c7:22:95:23:a3:e7:b5:4c:d0:82:05:17:
58:04:fa:b2:b3:0c:f2:cc:e3:d4:a8:ce:00:ef:16:
c0:e2:12:9e:7c:25:98:5e:97:4f:62:85:b0:0b:59:
3a:79:66:8f:e8:d6:4b:76:ee:06:9b:49:af:81:ea:
c3:2e:bd:71:68:bf:c2:df:5b:d5:e2:8b:01:74:eb:
b3:9e:d5:34:23:61:4a:d7:a4:76:e8:44:23:2e:f6:
7b:e0:a4:26:ee:29:ba:18:9d:ff:fb:e9:9d:47:a7:
a4:0d:f0:98:f8:d1:86:f3:2c:5f:05:87:e9:24:32:
e2:a4:77:56:af:08:fa:70:87:45:b6:b9:c9:cc:75:
66:d5:36:1d:2b:44:2a:dc:6e:6f:43:90:26:c2:5b:
7e:53:fa:ff:17:3f:ac:fa:2a:a8:55:00:8c:20:9b:
ca:d9:95:9a:23:39:7d:0f:31:4c:2e:cf:1d:b4:73:
cd:81:88:e3:94:7c:3e:54:5e:aa:db:88:d2:0d:a2:
08:c5:33:80:1f:4d:52:a9:e1:67:9b:8d:54:01:63:
78:3f:ef:05:3b:5e:4e:08:e5:e4:ea:35:52:75:74:
45:b0:32:10:42:09:83:bc:de:a3:b7:4f:29:4a:a1:
f7:70:b3:6c:8e:d1:50:7e:b6:f5:3d:8f:c4:88:b0:
0f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1E:E5:1A:3F:FD:47:D6:73:86:00:30:F0:2B:CF:A2:6D:80:38:A9
X509v3 Authority Key Identifier:
keyid:FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:e0:03:8e:6a:94:9c:e6:b8:56:bb:3f:8b:61:54:80:ab:a4:
4e:ff:08:7b:cf:15:75:34:1e:3c:a1:31:7d:63:da:94:79:b8:
f8:66:6c:c9:77:94:aa:a1:18:9a:bf:c6:a3:37:cb:39:c2:9b:
c7:10:b6:a2:b1:2b:10:2b:d0:ef:74:6a:c9:06:5b:7f:68:5c:
4f:9f:28:65:be:d4:b0:f3:d5:3f:b5:d9:ca:76:db:ab:65:5e:
55:7c:d1:7a:2b:df:82:fa:0c:c9:fc:b6:f7:b7:bf:4f:e3:0b:
43:3c:17:51:a0:64:36:f6:1c:33:79:e1:16:10:f0:b4:3a:ea:
74:54:e2:08:03:f9:59:05:6f:18:68:ea:4d:af:9b:0b:dc:e9:
d4:2c:c3:57:17:a8:d0:76:3b:da:ad:54:bd:49:42:64:44:ef:
a3:b1:54:33:a9:44:07:1f:3a:23:b3:43:a1:d2:54:56:de:4c:
4f:ae:23:bb:96:5c:2b:e6:fe:7d:a8:1b:87:b6:93:51:69:34:
0d:38:58:15:63:10:16:4f:60:4b:8e:20:00:ea:62:1e:4d:c7:
19:fe:b7:b4:fd:be:fa:99:6f:26:9c:65:b9:a0:c5:95:1a:6e:
f8:08:99:58:9a:a7:19:fb:91:df:98:99:d7:b2:d3:6c:5a:6e:
e6:4c:3e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:32:53 2026 by rpki-client