
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
File: _wsVRthMDZNVkFtsopPiW0QJSMU.mft (raw, json)
Hash identifier: q+Gusnl5LERddfcQTbxxLJe9/3GvbJ8pIsm0ircR1FA=
Subject key identifier: 7B:02:2D:2E:1F:E3:79:B9:76:64:47:E5:2F:A2:E4:8D:6A:B8:B6:B7
Authority key identifier: FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5
Certificate issuer: /CN=A9198F53/serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
Certificate serial: 0BA6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
Manifest number: 0B9E
Signing time: Sat 28 Feb 2026 19:14:05 +0000
Manifest this update: Sat 28 Feb 2026 19:14:04 +0000
Manifest next update: Sat 07 Mar 2026 19:14:04 +0000
Files and hashes: 1: _wsVRthMDZNVkFtsopPiW0QJSMU.crl (hash: mja9VjW/kMVkTozYdrpXKQoLCslHew1uYwxqbz5N9lA=)
2: 0B1FBD4A40F611EAACD44866C4F9AE02.roa (hash: cE46r29KbbkAXjWAwbBON9XRly7r0/vPAZnB5kdMO20=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl
rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2982 (0xba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198F53, serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
Validity
Not Before: Feb 28 19:14:04 2026 GMT
Not After : Mar 7 19:14:04 2026 GMT
Subject: CN=69a33e7d-a042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2a:ea:97:4e:0d:48:79:e2:e8:16:df:c1:fb:
e9:ac:a4:25:77:19:5b:98:1c:19:19:dc:3c:af:2d:
72:e3:42:85:09:02:aa:fa:98:5a:75:bd:71:2c:75:
a3:b6:90:84:32:04:59:dc:d2:de:83:7a:f0:b6:00:
9c:d4:99:56:91:a4:c1:a7:78:e5:dd:4a:2d:1e:24:
32:07:b9:d6:cf:bb:71:64:46:b8:31:10:6c:fe:8a:
83:19:d1:80:24:83:d0:c7:7f:3f:63:db:b7:68:b5:
e6:09:8f:fd:af:a6:4f:26:08:0e:38:57:f1:29:98:
19:81:21:66:9d:42:50:a6:ec:46:7b:9c:65:72:3f:
20:99:b3:42:62:b9:ac:d4:72:11:14:dd:25:a5:21:
ba:79:79:d7:04:09:58:d5:a7:d0:b9:d9:e4:10:1c:
16:ac:da:90:0a:5e:ea:ed:1f:39:40:26:57:db:3f:
b1:53:2d:6f:df:0c:f5:d7:bc:e1:28:f3:fa:78:c4:
15:d0:ff:81:b1:fd:9f:e6:4b:8a:a6:bd:1b:44:29:
5a:4c:4c:1a:62:dc:ed:18:d5:ec:e2:ae:42:15:1f:
1e:ea:28:d7:73:50:7c:c7:e9:ce:a6:28:4c:89:08:
3f:2d:ce:4e:ce:2b:23:66:e0:6f:13:cd:ee:f0:64:
07:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:02:2D:2E:1F:E3:79:B9:76:64:47:E5:2F:A2:E4:8D:6A:B8:B6:B7
X509v3 Authority Key Identifier:
keyid:FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:26:84:a4:05:b5:25:92:1a:bc:3f:04:c1:07:1b:c8:01:4a:
35:34:e3:ca:ea:ae:5b:8d:76:42:48:70:f7:a2:72:06:ba:2c:
36:2d:27:f0:2b:c0:58:1b:e4:42:d5:a5:52:99:94:5e:e1:58:
fa:c4:93:21:ab:4a:b8:86:ff:12:1a:d0:d7:ff:fa:38:48:53:
b5:3d:3b:dd:ed:39:6a:ce:c1:02:25:d8:65:1e:e7:b7:93:be:
5e:ab:ab:21:8a:d4:74:5a:d0:5d:91:01:ed:24:6b:b0:e2:7c:
a7:6b:96:75:29:a0:59:c2:74:4b:d1:31:1c:fd:a0:1c:a2:b4:
f0:9a:e8:e8:5c:19:07:c9:79:4c:bd:83:f7:af:d4:33:9c:07:
2e:08:45:50:9d:e0:a9:a5:d4:9d:59:27:b8:42:df:4f:ec:6b:
f5:65:02:bb:33:26:61:d4:c7:05:a6:4f:ce:9e:3b:e9:ae:18:
0e:fc:ff:0a:cb:82:ab:77:72:39:86:ab:15:55:8e:26:29:ba:
63:f2:94:69:1c:08:a8:c4:f6:ac:2b:07:13:69:33:4f:79:d7:
6d:72:b2:ca:8d:05:87:64:dd:71:3a:32:f0:73:d4:a2:9c:a8:
e9:00:a2:2a:20:81:39:e9:02:e3:cc:29:bf:ef:e4:22:65:86:
6d:49:69:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OThGNTMxMTAvBgNVBAUTKEZGMEIxNTQ2RDg0QzBEOTM1NTkwNUI2Q0EyOTNFMjVC
NDQwOTQ4QzUwHhcNMjYwMjI4MTkxNDA0WhcNMjYwMzA3MTkxNDA0WjAYMRYwFAYD
VQQDDA02OWEzM2U3ZC1hMDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6yrql04NSHni6BbfwfvprKQldxlbmBwZGdw8ry1y40KFCQKq+phadb1xLHWj
tpCEMgRZ3NLeg3rwtgCc1JlWkaTBp3jl3UotHiQyB7nWz7txZEa4MRBs/oqDGdGA
JIPQx38/Y9u3aLXmCY/9r6ZPJggOOFfxKZgZgSFmnUJQpuxGe5xlcj8gmbNCYrms
1HIRFN0lpSG6eXnXBAlY1afQudnkEBwWrNqQCl7q7R85QCZX2z+xUy1v3wz117zh
KPP6eMQV0P+Bsf2f5kuKpr0bRClaTEwaYtztGNXs4q5CFR8e6ijXc1B8x+nOpihM
iQg/Lc5OzisjZuBvE83u8GQH3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHsCLS4f
43m5dmRH5S+i5I1quLa3MB8GA1UdIwQYMBaAFP8LFUbYTA2TVZBbbKKT4ltECUjF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEY1My9DRDA2MjE3NjQw
RjQxMUVBQUU3NzgyNjFDNEY5QUUwMi9fd3NWUnRoTURaTlZrRnRzb3BQaVcwUUpT
TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL193c1ZSdGhNRFpOVmtGdHNvcFBpVzBRSlNNVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OEY1My9DRDA2MjE3NjQwRjQxMUVBQUU3NzgyNjFDNEY5QUUwMi9fd3NWUnRoTURa
TlZrRnRzb3BQaVcwUUpTTVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiyaEpAW1JZIavD8EwQcbyAFKNTTjyuquW412Qkhw96JyBrosNi0n8CvAWBvk
QtWlUpmUXuFY+sSTIatKuIb/EhrQ1//6OEhTtT073e05as7BAiXYZR7nt5O+Xqur
IYrUdFrQXZEB7SRrsOJ8p2uWdSmgWcJ0S9ExHP2gHKK08Jro6FwZB8l5TL2D96/U
M5wHLghFUJ3gqaXUnVknuELfT+xr9WUCuzMmYdTHBaZPzp476a4YDvz/CsuCq3dy
OYarFVWOJim6Y/KUaRwIqMT2rCsHE2kzT3nXbXKyyo0Fh2TdcToy8HPUopyo6QCi
KiCBOekC48wpv+/kImWGbUlpPQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:10 2026 by rpki-client