
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
File: wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft (raw, json)
Hash identifier: xHj7/q0Fy3yjWCoqCp9iNkErPMS1+caVNVjRdHSRRK4=
Subject key identifier: A1:9A:D7:62:F0:A2:8C:EA:24:C1:06:97:C4:0F:D1:43:02:EA:B5:77
Authority key identifier: C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF
Certificate issuer: /CN=A911EB2D/serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF
Certificate serial: 0952
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
Manifest number: 0A56
Signing time: Thu 26 Mar 2026 20:06:11 +0000
Manifest this update: Thu 26 Mar 2026 20:06:11 +0000
Manifest next update: Thu 02 Apr 2026 20:06:11 +0000
Files and hashes: 1: wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl (hash: 6Sbi9FznYGv+wr7IPi2zBCH9zu/+WDqAYreYFF8Bl0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl
rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 20:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2386 (0x952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EB2D, serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF
Validity
Not Before: Mar 26 20:06:11 2026 GMT
Not After : Apr 2 20:06:11 2026 GMT
Subject: CN=69c591b3-2fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:90:1c:bb:6b:ca:9f:61:c0:47:a7:00:3a:45:
bc:82:18:9e:8b:00:82:1f:62:20:a8:26:dd:a7:5d:
58:d7:2a:ab:a3:d6:c2:6e:be:03:69:ec:ef:54:d5:
ab:eb:8f:dc:37:0e:2b:ce:db:1e:95:d0:47:73:2c:
31:1d:1d:c7:02:57:ac:a0:14:6f:6e:7e:30:69:eb:
3c:6f:d8:07:74:92:5e:b5:a4:81:5f:8c:16:ab:59:
2d:e3:c7:0d:fc:a9:98:27:bc:68:fb:a0:22:a5:7d:
43:f9:f7:82:59:54:a3:cd:d5:f5:d1:fc:ce:b3:57:
9d:3a:6a:eb:15:a0:d6:31:b2:0d:52:9d:94:28:94:
6a:c4:cd:a0:ea:82:28:da:10:fd:8e:f5:ea:a2:2a:
83:25:01:37:6f:79:be:38:46:dd:18:af:68:5d:9c:
4c:02:49:4f:9b:6f:a6:a6:d2:c7:9b:61:50:8b:0c:
a0:d2:1e:b0:d4:bc:f6:a7:22:fa:81:08:6a:c7:a6:
1a:c0:93:00:14:c4:8f:bf:d8:59:69:a0:70:73:52:
66:5e:1d:d4:93:69:30:36:d0:02:cb:61:d1:c4:cd:
ee:91:e0:23:c2:9f:6e:bf:8b:3d:bc:a4:00:a7:09:
a2:47:f1:20:15:01:c4:3c:a3:fe:ca:1d:3b:8b:70:
65:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9A:D7:62:F0:A2:8C:EA:24:C1:06:97:C4:0F:D1:43:02:EA:B5:77
X509v3 Authority Key Identifier:
keyid:C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:99:91:1d:c6:6c:9c:a3:a2:aa:f3:e0:a8:38:6d:44:04:e0:
2d:d3:3e:f5:75:fe:e3:ed:63:b1:ff:a7:f7:90:be:aa:35:68:
e8:91:d0:56:8f:93:72:ac:ae:ae:e2:bc:d9:bc:e3:24:4e:14:
c4:e3:87:ec:1d:92:62:3d:57:bc:35:ed:4c:b5:67:b1:12:e2:
1e:68:b0:3e:d0:ac:58:c2:8c:4c:5b:9d:c2:ea:0b:06:3a:ca:
db:a0:00:76:df:57:8d:bc:0b:bf:25:ac:51:fa:75:5c:2e:97:
c4:46:be:6f:fb:1c:57:65:b1:bf:6a:00:97:4c:ad:17:66:12:
9a:02:20:b7:dc:70:f2:e5:4d:51:af:63:04:53:56:a1:94:15:
f5:8a:24:53:fc:2a:5b:3c:ff:a2:c6:2d:38:80:dc:2f:44:ac:
f8:e2:0f:2b:df:5d:01:de:b5:76:01:37:ee:92:05:32:07:73:
ae:a7:79:ca:63:2c:f7:c6:df:94:17:32:fb:a4:00:de:75:0a:
ed:8f:80:dc:d3:e5:22:4f:86:4a:03:7c:cf:ea:36:15:6f:85:
21:b2:9c:43:f5:b1:66:f1:25:f8:9f:30:e4:f7:58:0a:6f:bb:
48:63:6c:03:df:25:b0:5f:a1:c6:d0:b0:69:ad:ac:a2:25:d7:
dd:dd:db:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:08:18 2026 by rpki-client