
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
File: W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft (raw, json)
Hash identifier: nWN+hEhsrrAI4M+OBlxArHGzEHBAblvHUvpgZdrH554=
Subject key identifier: 97:D2:AA:3C:74:FD:B1:28:E8:0F:46:06:8D:AE:D0:E8:58:2A:39:94
Authority key identifier: 5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21
Certificate issuer: /CN=A911069A/serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
Certificate serial: 023A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
Manifest number: 022D
Signing time: Wed 23 Sep 2026 02:34:06 +0000
Manifest this update: Wed 23 Sep 2026 02:34:05 +0000
Manifest next update: Wed 30 Sep 2026 02:34:05 +0000
Files and hashes: 1: W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl (hash: A8PQEh2LxslW7tXYwvXKiipboY7Am4AvYuvARgm/13s=)
2: E286BAA24B5611F0A987864DC4F9AE02.roa (hash: mERSRsM56zZVM538VlKpNkeRtK+AXD86sag0pr0Q6X4=)
3: 12C3947A66F611EE82864875C4F9AE02.roa (hash: AMUUmBAUXG3TqchlULyq4/LQSR5p+XXlHRR72xWw5jg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl
rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:34:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911069A, serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
Validity
Not Before: Sep 23 02:34:05 2026 GMT
Not After : Sep 30 02:34:05 2026 GMT
Subject: CN=6ab33a9e-3d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:b1:3f:3e:62:30:f7:e7:97:07:49:9f:6c:
12:9c:5c:6e:1f:51:9e:14:e0:d9:2c:fe:0e:86:f0:
c3:fa:d1:18:7f:ae:37:e7:61:b6:c9:c2:26:1d:74:
81:fb:77:29:1d:41:8c:29:4f:3a:55:94:33:bb:38:
32:ee:c5:48:01:d0:b8:87:8f:da:7c:ab:93:94:33:
eb:db:03:3b:9c:03:7b:2b:83:fb:65:1a:13:d8:14:
3f:98:ff:e5:b9:0f:3a:d0:cf:fe:6e:50:3d:70:3b:
01:3f:f0:e3:b1:4e:d5:7f:5f:01:b8:9e:03:d6:2a:
c2:97:46:77:9d:74:be:6f:0d:04:4d:e0:80:1d:5b:
93:86:c8:53:79:a3:78:f1:2c:d9:87:95:df:15:bb:
93:83:93:f2:2a:e2:8a:f9:7e:70:dc:38:26:24:5f:
f6:51:16:0e:41:c9:30:3e:3d:90:bc:36:1c:24:05:
ea:16:48:29:79:29:6d:4a:03:a8:0c:47:fb:77:7c:
d3:6a:b2:93:66:89:d6:7b:92:da:30:55:64:aa:f2:
97:3c:f7:e3:dc:90:53:06:31:e7:70:76:03:9f:f5:
f1:f9:bd:ee:90:dc:16:a3:a3:f9:6d:84:91:a7:9e:
bd:0e:c6:97:79:b6:de:9d:b5:ed:01:e6:cb:8d:d3:
dc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D2:AA:3C:74:FD:B1:28:E8:0F:46:06:8D:AE:D0:E8:58:2A:39:94
X509v3 Authority Key Identifier:
keyid:5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:4d:ca:ba:9c:c3:11:be:94:bd:ba:a4:9d:42:f1:3e:b8:08:
97:09:af:52:aa:fa:cb:7b:80:d5:2c:34:af:d9:f9:3f:09:33:
b0:6b:ae:62:7c:ef:f3:8e:6d:29:8b:09:69:03:dd:db:bd:1b:
d3:42:9f:4b:e0:b5:c0:3c:cb:3b:7e:a5:8d:20:cd:fe:f9:cc:
68:9b:dd:4d:81:47:ab:84:9f:5a:67:ec:2f:08:6a:e4:4d:71:
27:32:39:5f:c8:18:51:31:2e:d1:74:ed:e0:09:99:46:8b:c5:
5f:55:3a:a2:f0:4a:b7:47:80:6f:e9:3f:e2:a2:fc:40:79:ba:
29:5a:d0:f0:04:8b:b7:a1:86:b9:d2:91:a9:b9:36:8c:18:24:
38:39:75:6a:e8:a5:3c:8e:ee:be:a6:61:32:64:bd:28:85:61:
26:7e:05:0f:de:aa:cf:a3:b8:79:b3:6c:a8:5d:71:fb:cc:76:
bc:09:dd:d4:34:72:49:0d:96:fb:07:1d:0c:a8:59:04:77:6c:
d2:70:f9:35:ec:2f:65:8f:62:a1:0a:90:ff:e2:ed:52:2f:55:
cb:60:f3:29:6a:0b:d4:4d:ff:8c:f6:d2:95:b5:dc:08:64:dd:
8d:fa:7c:95:ff:fc:12:04:34:ab:c9:9f:ee:7f:bd:11:ad:14:
9f:5d:bf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:02:48 2026 by rpki-client