
$ rpki-client -vvf rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
File: W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft (raw, json)
Hash identifier: cb8BR+SL+VI3wAQN9pO/TWkzWAXeKFkUbZaI/W+i8jg=
Subject key identifier: 90:AF:61:13:02:71:DA:7C:B3:7B:7F:C1:1A:E1:06:AA:FC:15:0A:93
Authority key identifier: 5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21
Certificate issuer: /CN=A911069A/serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
Manifest number: 01D0
Signing time: Fri 27 Mar 2026 03:08:46 +0000
Manifest this update: Fri 27 Mar 2026 03:08:45 +0000
Manifest next update: Fri 03 Apr 2026 03:08:45 +0000
Files and hashes: 1: W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl (hash: hj/c1ccRe8zfj5PDbe9dVxWouHwJuaaaL5u3b88C+Jo=)
2: E286BAA24B5611F0A987864DC4F9AE02.roa (hash: vGinucXQRTUIefk4Tv24gNqw96gHy08KtOxMfZPJt7Y=)
3: 12C3947A66F611EE82864875C4F9AE02.roa (hash: Wz6nogB+wbKBt8GTzhszxFQph1Av594K7rD96UDLujQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl
rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 03:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911069A, serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
Validity
Not Before: Mar 27 03:08:45 2026 GMT
Not After : Apr 3 03:08:45 2026 GMT
Subject: CN=69c5f4be-58f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e2:95:f9:5d:56:95:d4:89:23:ce:d7:5e:73:
ac:93:e6:38:90:65:7f:88:c2:fe:84:d7:84:6d:d3:
b4:bc:cc:94:ab:8f:a4:f0:54:a4:3d:7d:c4:76:cf:
48:8c:91:0a:8c:5c:de:97:42:e5:c0:92:69:4c:b8:
17:f9:17:f2:24:88:1e:64:6b:b7:02:c9:59:3b:9f:
0c:2d:39:ea:30:06:fb:13:95:c6:77:87:c9:18:6d:
f0:2b:eb:37:81:f5:af:74:53:b5:76:2a:f7:d6:3d:
b4:b6:40:d5:9e:5a:ff:70:b0:05:1d:d4:af:02:cb:
7d:f6:1f:84:a5:40:86:15:6f:f9:bc:a7:c5:97:06:
97:9e:3d:6e:e1:50:ec:66:8d:31:11:19:a8:5c:43:
47:1c:a5:dc:47:b3:89:66:b9:d7:95:71:7d:5f:2d:
05:3f:04:63:cc:7c:65:b0:6a:3d:db:16:c4:4e:9a:
c7:c2:14:56:a1:73:97:59:91:76:66:cb:9b:67:ff:
12:4f:a2:56:09:fc:e0:12:bc:67:0a:6b:76:ff:76:
04:47:42:37:35:ba:a1:e9:f3:1e:b0:e4:a8:6b:19:
b0:c3:44:bf:41:81:5e:d9:3b:7b:06:25:fa:da:ed:
36:4b:f5:29:88:fb:5d:6d:e1:e2:ed:5b:9f:d8:66:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AF:61:13:02:71:DA:7C:B3:7B:7F:C1:1A:E1:06:AA:FC:15:0A:93
X509v3 Authority Key Identifier:
keyid:5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:85:24:29:49:d1:4b:75:3f:da:41:12:4c:53:f0:55:9e:23:
9e:7e:9a:6b:45:7a:09:46:78:c5:7c:ac:27:f3:e5:ae:10:8c:
a6:30:86:88:91:44:d5:78:bd:9f:00:ba:6a:05:d6:b0:09:c8:
26:0c:97:d8:06:49:3d:d8:79:bc:0f:39:53:a3:bd:15:94:d2:
98:a0:d2:99:5f:71:32:01:c5:dc:f3:6b:11:d6:d8:9e:5b:62:
5c:96:05:33:b7:3b:e2:3e:98:b0:df:c1:ef:73:a9:13:fb:27:
52:94:43:b1:74:e7:20:2a:80:e7:3c:36:f1:5c:88:7c:fd:50:
92:5e:2e:18:db:e3:5c:38:2d:5c:0f:a7:07:d4:53:8e:e3:f4:
a9:6d:84:e1:6b:29:30:d8:b8:e0:e6:7b:10:dd:1e:6d:fc:62:
f6:8f:b0:34:34:bf:e3:86:2d:68:b8:13:2d:d7:93:b7:65:a9:
ab:08:d9:6e:9d:71:ca:45:10:d0:5a:68:fc:4e:8c:91:ca:47:
51:a9:f9:f7:59:41:e4:bf:40:48:ed:f8:26:9d:88:7d:23:ec:
03:dc:82:5f:6f:ba:4e:64:bc:57:8e:cd:8e:d2:7f:ee:00:5a:
3a:a1:17:9c:46:05:2c:23:56:05:79:24:be:eb:ec:a0:8f:c2:
64:68:89:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:28:40 2026 by rpki-client