
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
File: _wsVRthMDZNVkFtsopPiW0QJSMU.mft (raw, json)
Hash identifier: F8SrbNdgpA49Tb8q0DQGtzIccuX8xt4cVdc1uGWz8pY=
Subject key identifier: D1:B0:EB:C1:96:F1:B6:05:A3:21:83:94:16:97:4C:A3:86:64:ED:01
Authority key identifier: FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5
Certificate issuer: /CN=A9198F53/serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
Certificate serial: 0BC7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
Manifest number: 0BB9
Signing time: Thu 16 Apr 2026 18:53:41 +0000
Manifest this update: Thu 16 Apr 2026 18:53:41 +0000
Manifest next update: Thu 23 Apr 2026 18:53:41 +0000
Files and hashes: 1: _wsVRthMDZNVkFtsopPiW0QJSMU.crl (hash: dtYqpXTQ26/MF7DKJxljzPRZjItDGMyT0CPN2wlxpzo=)
2: 0B1FBD4A40F611EAACD44866C4F9AE02.roa (hash: DFdvRHgXchuBm4qDLuYljzDy6YW5jSvcOAQEQdXRUns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl
rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:53:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3015 (0xbc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198F53, serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
Validity
Not Before: Apr 16 18:53:41 2026 GMT
Not After : Apr 23 18:53:41 2026 GMT
Subject: CN=69e13035-99d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:84:85:43:19:f7:9f:c2:22:0e:d3:2c:08:
73:62:2d:cd:ba:de:3a:7e:c8:2c:f0:21:db:52:d0:
ba:54:b8:fa:b5:70:65:a8:86:5a:5a:5d:d5:76:f5:
53:3b:ee:c5:cf:62:fd:39:34:ee:27:83:22:c2:c6:
52:15:f3:4b:34:fd:89:af:fd:3b:72:b4:75:99:a9:
8a:0d:ef:2b:94:54:a6:ae:59:86:ff:66:64:87:b3:
54:88:de:43:a3:9f:3e:69:c7:52:95:54:68:d2:b8:
92:64:5d:14:5a:1d:6a:c8:34:db:22:e4:71:d3:cb:
47:95:d2:6e:3b:48:46:da:83:b4:21:46:59:87:d2:
69:f1:be:c9:83:ff:8a:99:7f:86:b2:af:cd:44:c9:
7a:5b:90:20:32:2e:3c:bc:f8:90:31:ec:0d:0a:85:
28:56:68:34:86:3a:9c:40:f7:b3:40:1d:0e:47:23:
1d:97:2f:f4:c0:ee:aa:00:13:64:36:f4:b6:77:9c:
b2:f0:3e:76:a2:71:49:4f:a3:22:0d:96:cb:1e:ce:
0a:b3:13:72:74:74:d6:2f:75:3b:5c:e4:87:8b:30:
28:5a:c8:84:81:e3:04:09:97:af:5c:48:20:f8:d1:
b0:37:97:b3:00:da:e5:b4:a3:b1:a1:9c:af:93:2d:
5b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B0:EB:C1:96:F1:B6:05:A3:21:83:94:16:97:4C:A3:86:64:ED:01
X509v3 Authority Key Identifier:
keyid:FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:9e:5f:c9:ff:34:b6:01:f9:05:33:41:f0:d7:06:b5:d3:ef:
12:2f:2c:4d:38:a4:b6:44:ec:a1:d1:6b:ca:4f:75:e9:73:dd:
3f:df:91:d0:38:8f:af:e5:5b:30:63:25:25:d1:8b:b6:eb:bd:
ce:a0:f1:a3:58:ca:b9:f0:7d:41:ef:84:01:4f:69:db:69:8a:
90:83:30:85:41:ff:3c:ee:95:6e:4b:c6:18:27:68:a4:4f:6c:
2b:20:77:0c:56:67:c8:1c:e7:a2:f7:3d:92:b5:73:c4:67:3f:
ca:b7:c6:50:ee:39:ac:40:64:9c:1b:26:a8:19:82:6b:73:e6:
9c:89:12:3c:d4:67:28:ac:17:e3:09:fa:10:f5:eb:aa:dd:77:
d1:31:57:c3:af:44:f1:3f:02:3f:b6:5b:62:f8:4b:d8:1d:17:
0e:28:b6:a2:75:db:e8:4c:a0:7c:2d:08:f3:08:d8:98:6f:c2:
37:33:32:da:78:53:ec:26:f4:e9:ca:bd:19:c3:cc:81:ac:e6:
d3:7c:43:7d:49:8d:6b:06:41:2a:74:dc:55:a0:c6:7d:b2:ed:
b2:bd:87:8b:ae:5b:ed:23:dc:f6:65:1d:2a:db:f1:db:9d:d7:
6c:aa:22:1a:db:f2:3b:01:ec:0c:68:f8:00:fb:93:88:83:02:
59:bc:9f:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OThGNTMxMTAvBgNVBAUTKEZGMEIxNTQ2RDg0QzBEOTM1NTkwNUI2Q0EyOTNFMjVC
NDQwOTQ4QzUwHhcNMjYwNDE2MTg1MzQxWhcNMjYwNDIzMTg1MzQxWjAYMRYwFAYD
VQQDEw02OWUxMzAzNS05OWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw3aEhUMZ95/CIg7TLAhzYi3Nut46fsgs8CHbUtC6VLj6tXBlqIZaWl3VdvVT
O+7Fz2L9OTTuJ4MiwsZSFfNLNP2Jr/07crR1mamKDe8rlFSmrlmG/2Zkh7NUiN5D
o58+acdSlVRo0riSZF0UWh1qyDTbIuRx08tHldJuO0hG2oO0IUZZh9Jp8b7Jg/+K
mX+Gsq/NRMl6W5AgMi48vPiQMewNCoUoVmg0hjqcQPezQB0ORyMdly/0wO6qABNk
NvS2d5yy8D52onFJT6MiDZbLHs4KsxNydHTWL3U7XOSHizAoWsiEgeMECZevXEgg
+NGwN5ezANrltKOxoZyvky1b+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNGw68GW
8bYFoyGDlBaXTKOGZO0BMB8GA1UdIwQYMBaAFP8LFUbYTA2TVZBbbKKT4ltECUjF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEY1My9DRDA2MjE3NjQw
RjQxMUVBQUU3NzgyNjFDNEY5QUUwMi9fd3NWUnRoTURaTlZrRnRzb3BQaVcwUUpT
TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL193c1ZSdGhNRFpOVmtGdHNvcFBpVzBRSlNNVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OEY1My9DRDA2MjE3NjQwRjQxMUVBQUU3NzgyNjFDNEY5QUUwMi9fd3NWUnRoTURa
TlZrRnRzb3BQaVcwUUpTTVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg55fyf80tgH5BTNB8NcGtdPvEi8sTTiktkTsodFryk916XPdP9+R0DiPr+Vb
MGMlJdGLtuu9zqDxo1jKufB9Qe+EAU9p22mKkIMwhUH/PO6VbkvGGCdopE9sKyB3
DFZnyBznovc9krVzxGc/yrfGUO45rEBknBsmqBmCa3PmnIkSPNRnKKwX4wn6EPXr
qt130TFXw69E8T8CP7ZbYvhL2B0XDii2onXb6EygfC0I8wjYmG/CNzMy2nhT7Cb0
6cq9GcPMgazm03xDfUmNawZBKnTcVaDGfbLtsr2Hi65b7SPc9mUdKtvx253XbKoi
GtvyOwHsDGj4APuTiIMCWbyfQw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:28:56 2026 by rpki-client