
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
File: wzct4f6eU8GLMFFtlkxDZyLrPss.mft (raw, json)
Hash identifier: kXgLW+myPUqEJwF7sG+V3hLwwUKiUUWx7zuzwvq46+k=
Subject key identifier: 6B:5B:B7:02:1C:C2:5A:92:B7:42:EB:39:68:B9:E7:BD:72:40:CD:26
Authority key identifier: C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB
Certificate issuer: /CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
Manifest number: 014A
Signing time: Mon 11 May 2026 05:20:59 +0000
Manifest this update: Mon 11 May 2026 05:20:58 +0000
Manifest next update: Mon 18 May 2026 05:20:58 +0000
Files and hashes: 1: wzct4f6eU8GLMFFtlkxDZyLrPss.crl (hash: 7eUSrvr148h9pKSj9V6+LnovnHGtw3aIrTB2shVhyPI=)
2: 5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa (hash: fz5wGX8TCKnp2pv3oEZJbnk1JDuLkYxlHREJYhGasR8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl
rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:20:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C7CD, serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB
Validity
Not Before: May 11 05:20:58 2026 GMT
Not After : May 18 05:20:58 2026 GMT
Subject: CN=6a01673b-4c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:be:a5:ad:b3:f3:bc:44:f3:5a:db:f1:92:
c5:01:9b:3e:83:68:3f:01:69:23:48:ff:c4:5f:5d:
9b:5b:04:a4:5d:1b:11:d1:55:27:5b:98:1f:0b:f5:
3a:39:1c:28:c1:ca:a4:a8:fa:8f:e5:b8:67:7b:39:
95:89:b4:64:5a:78:3b:bf:8a:6b:d5:f6:27:a6:d8:
b4:cb:59:28:f6:b5:73:3a:6c:1b:e4:20:44:c4:71:
4e:f6:e0:90:6d:06:cf:38:7f:87:62:a8:55:c6:1e:
ef:28:a7:fa:8f:24:e1:a8:24:0a:9b:29:00:19:a9:
c4:ad:77:69:73:2d:2f:b3:43:c4:c8:48:3f:0b:fa:
98:ed:50:d7:13:f5:cb:15:6b:33:d7:0b:91:03:55:
36:98:22:76:b4:0a:3e:24:ad:52:e5:a2:45:c5:14:
d6:22:d0:88:2b:ee:4e:4b:06:69:ca:c8:33:12:33:
dc:ea:ef:7b:b3:7d:8c:29:da:f2:13:13:81:60:74:
ef:bd:ac:3c:fd:4c:4a:71:28:60:db:71:37:45:77:
ee:60:80:b4:34:d6:6a:55:93:bd:40:68:10:ff:19:
65:c5:ac:e0:e5:f5:76:c1:20:d6:5e:5a:98:49:ba:
94:8a:37:d0:80:59:ec:04:99:cf:6f:2e:9a:9d:21:
dd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5B:B7:02:1C:C2:5A:92:B7:42:EB:39:68:B9:E7:BD:72:40:CD:26
X509v3 Authority Key Identifier:
keyid:C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:97:74:4b:76:3f:5c:d7:ed:44:e1:ec:61:18:cc:5c:1a:d3:
40:89:63:24:6d:ba:db:54:43:c7:a4:3b:c0:4d:5d:37:77:61:
62:3b:20:24:f4:a1:ea:93:da:b2:f7:86:cf:d0:36:3c:e6:85:
6b:85:c1:96:fd:3b:5a:ec:c9:8c:7f:66:c3:06:dd:b8:ab:bd:
55:98:99:f9:a2:5c:66:68:90:a6:7d:37:17:13:51:cd:d7:db:
4d:ef:66:4b:81:47:9a:7c:0d:f5:fb:d4:17:de:ee:ef:05:6d:
15:63:a8:0d:b1:95:7b:0c:b2:74:4b:a4:c9:4b:af:2b:ee:6d:
05:f7:8c:5e:7d:73:a6:7e:df:8f:7f:04:9d:19:3c:0d:45:1d:
94:18:eb:b4:98:40:eb:af:54:1e:84:1c:91:47:42:3f:8b:73:
0b:04:18:cf:83:22:20:f3:ea:67:11:73:65:97:7d:4f:ca:6a:
16:bf:b7:d9:dc:d2:f1:4b:4a:9e:48:6c:33:0a:a1:7e:79:69:
1f:4a:34:0b:64:a6:46:4e:6d:31:44:78:51:a6:52:ed:17:b8:
d6:42:7d:66:c1:0b:b9:25:d0:ff:ae:24:a4:e3:91:72:2d:b2:
3e:87:1a:a3:61:aa:94:b9:df:00:44:7b:1e:14:38:ec:b6:a1:
f1:84:66:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM3Q0QxMTAvBgNVBAUTKEMzMzcyREUxRkU5RTUzQzE4QjMwNTE2RDk2NEM0MzY3
MjJFQjNFQ0IwHhcNMjYwNTExMDUyMDU4WhcNMjYwNTE4MDUyMDU4WjAYMRYwFAYD
VQQDEw02YTAxNjczYi00YzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsfe+pa2z87xE81rb8ZLFAZs+g2g/AWkjSP/EX12bWwSkXRsR0VUnW5gfC/U6
ORwowcqkqPqP5bhnezmVibRkWng7v4pr1fYnpti0y1ko9rVzOmwb5CBExHFO9uCQ
bQbPOH+HYqhVxh7vKKf6jyThqCQKmykAGanErXdpcy0vs0PEyEg/C/qY7VDXE/XL
FWsz1wuRA1U2mCJ2tAo+JK1S5aJFxRTWItCIK+5OSwZpysgzEjPc6u97s32MKdry
ExOBYHTvvaw8/UxKcShg23E3RXfuYIC0NNZqVZO9QGgQ/xllxazg5fV2wSDWXlqY
SbqUijfQgFnsBJnPby6anSHd9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGtbtwIc
wlqSt0LrOWi5571yQM0mMB8GA1UdIwQYMBaAFMM3LeH+nlPBizBRbZZMQ2ci6z7L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzdDRC9ENjRBMUZCNDVF
QTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4R0xNRkZ0bGt4RFp5THJQ
c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3d6Y3Q0ZjZlVThHTE1GRnRsa3hEWnlMclBzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzdDRC9ENjRBMUZCNDVFQTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4
R0xNRkZ0bGt4RFp5THJQc3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsZd0S3Y/XNftROHsYRjMXBrTQIljJG2621RDx6Q7wE1dN3dhYjsgJPSh6pPa
sveGz9A2POaFa4XBlv07WuzJjH9mwwbduKu9VZiZ+aJcZmiQpn03FxNRzdfbTe9m
S4FHmnwN9fvUF97u7wVtFWOoDbGVewyydEukyUuvK+5tBfeMXn1zpn7fj38EnRk8
DUUdlBjrtJhA669UHoQckUdCP4tzCwQYz4MiIPPqZxFzZZd9T8pqFr+32dzS8UtK
nkhsMwqhfnlpH0o0C2SmRk5tMUR4UaZS7Re41kJ9ZsELuSXQ/64kpOORci2yPoca
o2GqlLnfAER7HhQ47Lah8YRmVg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:33:24 2026 by rpki-client