
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.mft
File: -4WO-66Tw4ktlJvcQfxEao687hs.mft (raw, json)
Hash identifier: MvyW3EeRpryrcviKCpVK10cLcz/eCRCqDgoEJVHASiU=
Subject key identifier: 02:6A:78:16:B7:6F:7F:8C:10:B8:C9:CB:3A:9D:01:B0:AA:90:F0:2D
Authority key identifier: FB:85:8E:FB:AE:93:C3:89:2D:94:9B:DC:41:FC:44:6A:8E:BC:EE:1B
Certificate issuer: /CN=A919B59F/serialNumber=FB858EFBAE93C3892D949BDC41FC446A8EBCEE1B
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.mft
Manifest number: 34
Signing time: Sun 01 Mar 2026 10:01:41 +0000
Manifest this update: Sun 01 Mar 2026 10:01:41 +0000
Manifest next update: Sun 08 Mar 2026 10:01:41 +0000
Files and hashes: 1: -4WO-66Tw4ktlJvcQfxEao687hs.crl (hash: +c434uUkh94kSwRiEeFxUwd8H2xvvhfE5ZeWutG7p9Q=)
2: 45395E28C8F411F0A2F04129C4F9AE02.roa (hash: D2Zdr1KjCtW0v7SwktRTkUb9mkJrYGEuJhxB/QmO9bg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.crl
rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B59F, serialNumber=FB858EFBAE93C3892D949BDC41FC446A8EBCEE1B
Validity
Not Before: Mar 1 10:01:41 2026 GMT
Not After : Mar 8 10:01:41 2026 GMT
Subject: CN=69a40e85-71a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:42:5f:10:1a:66:e1:cb:65:96:77:e2:2a:
7e:f8:f1:af:ae:36:a3:d8:ab:1a:ec:88:04:c7:e8:
1f:ee:a4:07:10:30:3a:05:7a:4a:f3:21:8d:35:b2:
3b:39:18:aa:34:86:87:0d:91:20:15:b7:14:ad:91:
59:f3:b6:3d:8c:8e:f9:be:88:58:fb:81:f4:5d:d8:
c4:b2:79:0f:a9:d6:51:ef:18:d6:a1:f7:29:d0:e7:
d6:7d:c4:ae:82:7b:6c:ad:49:23:5f:12:2f:92:a5:
49:1d:d2:94:9a:ea:40:be:c1:5c:3d:90:b5:af:33:
61:2c:13:a4:68:b6:73:9f:c0:d5:74:35:c7:4b:03:
f9:28:b7:da:cd:7e:45:9f:23:0b:48:b3:7a:2a:98:
bc:6f:12:60:9a:15:45:4c:b3:83:17:a3:80:f9:06:
6e:6c:9b:b2:ef:00:e0:c9:62:94:50:e6:ac:25:c9:
8c:9d:8a:3c:8a:3c:b6:a8:81:d3:b7:0b:62:fb:74:
a8:dd:c2:34:8b:c6:58:f6:bb:8d:d6:e1:f9:c6:c4:
44:be:2f:ad:9b:0b:60:79:80:f6:71:1f:75:e3:35:
bd:62:6e:22:da:a9:95:5e:9e:8d:89:d5:34:2f:5f:
4a:7a:0d:56:77:f2:c6:e2:ad:7f:37:4b:1a:40:fb:
95:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6A:78:16:B7:6F:7F:8C:10:B8:C9:CB:3A:9D:01:B0:AA:90:F0:2D
X509v3 Authority Key Identifier:
keyid:FB:85:8E:FB:AE:93:C3:89:2D:94:9B:DC:41:FC:44:6A:8E:BC:EE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6b:46:ea:00:59:28:89:0d:a0:91:d8:38:62:78:de:b6:de:
e9:63:be:0c:08:04:d3:50:2c:4c:9d:26:99:b6:49:0f:ac:cb:
42:51:a5:54:29:64:c2:0e:5f:d4:69:51:27:9a:57:16:50:cc:
9e:43:c0:49:9c:d3:ce:d2:fb:66:6c:45:20:85:2d:c1:bb:4f:
90:27:ca:4b:70:4b:51:61:68:7b:9d:d2:d9:97:c6:de:f9:94:
7d:7a:55:aa:03:ff:d6:f7:d4:80:67:9f:d5:99:33:c8:c9:2a:
de:d6:d2:54:b8:0a:73:87:ff:67:ff:5f:b4:9e:1e:13:83:5d:
be:04:00:67:ee:5e:f3:5a:ca:dd:37:67:4e:ef:87:52:14:f5:
63:3e:91:27:70:9b:1f:54:5b:31:ff:d5:f2:68:54:58:12:b1:
d9:5e:55:8a:ec:bd:80:fe:3d:99:7c:c1:38:3c:2e:43:a1:71:
9a:51:db:eb:05:50:d8:f3:9d:00:c4:8e:34:81:bd:d8:5d:03:
20:04:ca:53:d7:b6:2f:9c:50:99:ec:49:48:56:2d:13:2b:4c:
47:73:67:0e:bd:76:97:6d:da:58:e7:5f:b0:8d:be:96:83:e2:
ed:47:90:c7:cc:8e:73:b5:db:fa:06:86:e9:5b:fa:1c:e5:cf:
2e:f3:f7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:16 2026 by rpki-client