
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft
File: WFTG2IaugFcOzmJHTVQZnE6CnKs.mft (raw, json)
Hash identifier: MuxyYpTqp/8YS1u6nwHmRw1QEm86I6TgQhImWMB5AOc=
Subject key identifier: CA:23:6E:90:30:B2:B5:A7:75:36:EF:6E:6D:B6:D9:D2:53:3D:7C:4E
Authority key identifier: 58:54:C6:D8:86:AE:80:57:0E:CE:62:47:4D:54:19:9C:4E:82:9C:AB
Certificate issuer: /CN=A9110AD1/serialNumber=5854C6D886AE80570ECE62474D54199C4E829CAB
Certificate serial: 0702
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFTG2IaugFcOzmJHTVQZnE6CnKs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft
Manifest number: 06FB
Signing time: Tue 24 Mar 2026 21:44:27 +0000
Manifest this update: Tue 24 Mar 2026 21:44:26 +0000
Manifest next update: Tue 31 Mar 2026 21:44:26 +0000
Files and hashes: 1: WFTG2IaugFcOzmJHTVQZnE6CnKs.crl (hash: olMc4Ax5DQfMyHNTXsbLURUCH0ZwUDJ4xyMLI+4i1zI=)
2: 5F38A4F082D611EB802C1A55C4F9AE02.roa (hash: ldfzXY+/A9VMiOIQtTVcd92d4P0qkx/grGqPWElbxL0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.crl
rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFTG2IaugFcOzmJHTVQZnE6CnKs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1794 (0x702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110AD1, serialNumber=5854C6D886AE80570ECE62474D54199C4E829CAB
Validity
Not Before: Mar 24 21:44:26 2026 GMT
Not After : Mar 31 21:44:26 2026 GMT
Subject: CN=69c305ba-c1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:21:bc:e0:20:7d:c8:42:c1:e6:49:73:57:f1:
f7:fa:ff:c1:ca:1d:61:c2:8e:f5:06:5f:01:07:32:
29:62:e6:9c:e8:bf:a3:0a:f4:7d:44:6e:b0:93:f6:
90:60:3b:38:9c:31:35:0d:1f:b9:96:6a:19:f9:85:
69:62:ed:6a:62:08:e8:62:cf:ea:1c:d6:6a:b9:41:
b3:da:18:57:28:e3:75:f0:2d:10:12:91:9a:e6:ab:
6e:3a:d2:bb:fe:47:e3:64:87:43:08:71:84:da:a6:
68:cd:b5:45:d7:f2:13:c8:29:57:7c:ac:89:a9:86:
b8:3b:c3:ca:f4:d3:b6:6b:03:e5:ca:71:07:ab:c1:
c3:8b:7e:55:cb:84:d9:cf:4c:10:ea:d0:dc:f8:99:
a5:65:6e:61:97:f4:ca:8b:44:03:11:aa:b6:d6:b1:
1d:fd:96:e9:d3:91:c3:19:54:3b:43:35:75:45:08:
bc:00:45:23:b3:38:98:d1:b4:6a:82:87:fd:86:1d:
e5:a1:a9:08:53:13:48:31:60:f3:74:66:15:19:f4:
db:33:72:02:66:03:a3:ae:8a:ed:d1:45:db:a0:a1:
a0:6a:c7:63:38:85:fe:eb:49:10:4f:e4:55:1a:50:
60:64:90:80:85:ce:bb:a2:25:fc:17:0e:1e:71:5c:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:23:6E:90:30:B2:B5:A7:75:36:EF:6E:6D:B6:D9:D2:53:3D:7C:4E
X509v3 Authority Key Identifier:
keyid:58:54:C6:D8:86:AE:80:57:0E:CE:62:47:4D:54:19:9C:4E:82:9C:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFTG2IaugFcOzmJHTVQZnE6CnKs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AD1/5A83A58482CE11EBBB694F87C4F9AE02/WFTG2IaugFcOzmJHTVQZnE6CnKs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1e:b3:30:6f:73:56:3f:77:22:4a:fa:ed:57:ca:9a:52:6f:
7e:63:04:6a:ca:42:09:72:f7:02:87:ff:f8:a3:be:e9:64:36:
16:b2:08:04:b5:c3:c5:af:91:dd:08:74:d0:44:69:b4:d3:7f:
a1:c4:89:6e:f9:fa:92:4a:83:3a:c2:02:06:c9:6e:99:de:19:
3d:ec:83:6e:0c:db:3c:e6:57:39:f2:39:93:a0:c2:ef:f6:6b:
72:63:92:f7:46:b6:23:26:a0:4d:d5:71:a3:41:20:65:27:70:
51:05:74:30:2a:47:6f:fd:fa:aa:dd:15:f0:2a:29:e8:bc:1e:
5b:84:52:ea:18:ef:03:b1:de:01:0b:64:a1:3a:b0:e6:76:f2:
c2:bd:4d:fc:03:6e:46:1f:d4:db:9e:18:13:60:09:fa:11:72:
16:91:a5:58:3b:62:8f:c3:28:a9:9a:cd:ab:61:61:24:3f:19:
04:a9:da:9f:b7:7c:04:81:d1:7b:d0:77:c9:e8:d3:a5:c1:83:
63:0a:a7:93:84:3f:77:38:b9:bf:81:6a:ee:3e:fd:6b:3c:3a:
0c:0e:e0:f6:86:ee:5a:35:fa:a9:e9:74:91:f9:8c:0f:c1:5a:
94:70:d4:cd:12:97:d2:2a:5c:5a:75:50:ff:60:c4:4d:f7:b7:
87:03:a3:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBBRDExMTAvBgNVBAUTKDU4NTRDNkQ4ODZBRTgwNTcwRUNFNjI0NzRENTQxOTlD
NEU4MjlDQUIwHhcNMjYwMzI0MjE0NDI2WhcNMjYwMzMxMjE0NDI2WjAYMRYwFAYD
VQQDEw02OWMzMDViYS1jMWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjyG84CB9yELB5klzV/H3+v/Byh1hwo71Bl8BBzIpYuac6L+jCvR9RG6wk/aQ
YDs4nDE1DR+5lmoZ+YVpYu1qYgjoYs/qHNZquUGz2hhXKON18C0QEpGa5qtuOtK7
/kfjZIdDCHGE2qZozbVF1/ITyClXfKyJqYa4O8PK9NO2awPlynEHq8HDi35Vy4TZ
z0wQ6tDc+JmlZW5hl/TKi0QDEaq21rEd/Zbp05HDGVQ7QzV1RQi8AEUjsziY0bRq
gof9hh3loakIUxNIMWDzdGYVGfTbM3ICZgOjrort0UXboKGgasdjOIX+60kQT+RV
GlBgZJCAhc67oiX8Fw4ecVyT3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMojbpAw
srWndTbvbm222dJTPXxOMB8GA1UdIwQYMBaAFFhUxtiGroBXDs5iR01UGZxOgpyr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEFEMS81QTgzQTU4NDgy
Q0UxMUVCQkI2OTRGODdDNEY5QUUwMi9XRlRHMklhdWdGY096bUpIVFZRWm5FNkNu
S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dGVEcySWF1Z0ZjT3ptSkhUVlFabkU2Q25Lcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MEFEMS81QTgzQTU4NDgyQ0UxMUVCQkI2OTRGODdDNEY5QUUwMi9XRlRHMklhdWdG
Y096bUpIVFZRWm5FNkNuS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApB6zMG9zVj93Ikr67VfKmlJvfmMEaspCCXL3Aof/+KO+6WQ2FrIIBLXDxa+R
3Qh00ERptNN/ocSJbvn6kkqDOsICBslumd4ZPeyDbgzbPOZXOfI5k6DC7/ZrcmOS
90a2IyagTdVxo0EgZSdwUQV0MCpHb/36qt0V8Cop6LweW4RS6hjvA7HeAQtkoTqw
5nbywr1N/ANuRh/U254YE2AJ+hFyFpGlWDtij8MoqZrNq2FhJD8ZBKnan7d8BIHR
e9B3yejTpcGDYwqnk4Q/dzi5v4Fq7j79azw6DA7g9obuWjX6qel0kfmMD8FalHDU
zRKX0ipcWnVQ/2DETfe3hwOjNg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:20 2026 by rpki-client