
$ rpki-client -vvf rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
File: w9DuaJTOj1bPawcKsT-YFp39QR8.mft (raw, json)
Hash identifier: 7VD8hmAqFPWXdquoR4PKawRD9Qe0/eBSq/3wyfWveYc=
Subject key identifier: F6:60:C4:F6:06:87:33:1C:7B:23:0F:85:AA:1C:E2:88:48:4E:26:4E
Authority key identifier: C3:D0:EE:68:94:CE:8F:56:CF:6B:07:0A:B1:3F:98:16:9D:FD:41:1F
Certificate issuer: /CN=A912380D/serialNumber=C3D0EE6894CE8F56CF6B070AB13F98169DFD411F
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
Manifest number: 21
Signing time: Wed 25 Mar 2026 08:03:45 +0000
Manifest this update: Wed 25 Mar 2026 08:03:45 +0000
Manifest next update: Wed 01 Apr 2026 08:03:45 +0000
Files and hashes: 1: w9DuaJTOj1bPawcKsT-YFp39QR8.crl (hash: Upfq+/uhs3S/fYNERZe+YaIQchqNY7JXmPQY2hfX4bY=)
2: 5147C064FFE611F0819299B6756F56BC.roa (hash: dxqWrt5xYEHSokLX0i3WpHa5o0vkk7mwt4FA5//2TjY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.crl
rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912380D, serialNumber=C3D0EE6894CE8F56CF6B070AB13F98169DFD411F
Validity
Not Before: Mar 25 08:03:45 2026 GMT
Not After : Apr 1 08:03:45 2026 GMT
Subject: CN=69c396e1-e3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:22:51:39:67:c8:55:2c:51:a6:1b:2e:97:
cb:4b:a3:fa:9d:9b:1c:c6:69:29:cb:7a:35:5a:82:
13:b4:0c:54:93:bd:1e:31:eb:ac:3a:9f:78:53:b0:
58:ad:af:c7:3f:98:c7:11:94:31:e0:3e:1e:e8:0a:
48:e6:bd:1b:20:d0:69:82:ae:c8:af:f6:7c:06:eb:
88:4d:9a:26:44:ca:ee:ef:1a:37:0b:a4:ed:69:df:
69:43:3f:2b:97:31:4f:bb:ed:72:6b:c6:fd:03:98:
c1:30:53:50:0d:b2:f9:1f:49:82:f8:0d:a0:5b:82:
48:d8:54:d4:04:4a:5a:19:e4:cc:04:2d:88:b8:76:
ff:7a:03:a3:f3:35:1e:de:83:e1:2d:6b:6d:21:8d:
bd:62:82:69:02:9f:50:b5:0d:af:84:a5:6e:05:f3:
7b:7b:1d:3c:d5:57:cd:1f:50:69:3c:13:a3:da:8b:
ac:51:ac:0f:72:d0:17:c4:72:31:06:be:50:83:fb:
75:4d:6f:a9:e1:49:3f:64:07:d5:ea:1b:28:6d:f1:
6d:d5:49:0f:c1:f4:e8:17:32:b2:60:e9:00:3f:1b:
8a:90:f2:9b:70:10:e8:d2:89:b3:12:69:5e:cb:f9:
c5:67:83:de:39:00:f9:7b:dd:ad:11:b2:6f:48:fd:
ef:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:60:C4:F6:06:87:33:1C:7B:23:0F:85:AA:1C:E2:88:48:4E:26:4E
X509v3 Authority Key Identifier:
keyid:C3:D0:EE:68:94:CE:8F:56:CF:6B:07:0A:B1:3F:98:16:9D:FD:41:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:4c:dd:46:ec:4f:91:43:9c:28:9a:b9:3d:f6:fb:a2:88:76:
0c:81:14:be:bc:67:99:ed:46:db:00:69:98:92:ad:da:ed:05:
e9:c0:be:e6:cf:47:74:26:be:3a:22:de:5a:5c:ac:37:9f:59:
d2:c3:ce:74:ca:31:2a:a5:44:0c:f2:ff:3b:32:b0:78:21:52:
00:4a:1e:64:c3:ac:ac:e7:26:1f:8a:7b:5d:14:b1:1a:4e:d1:
3d:82:1c:d7:f1:50:41:00:44:7c:d0:c6:0a:2d:f0:c6:d0:25:
d1:a3:e5:cb:29:cb:b1:8c:74:4a:c4:6c:80:64:eb:03:c7:91:
c8:cf:6f:78:94:86:19:1f:e4:1b:a6:3b:d6:1d:89:67:42:a2:
70:3f:10:53:3f:15:4a:57:2a:77:40:8c:2b:b2:c2:24:c3:ae:
45:f3:fe:42:97:d7:df:ff:42:d1:2e:33:96:e1:b3:6e:11:85:
ae:38:ea:17:38:04:48:c5:25:23:db:71:f3:11:75:62:29:d1:
ac:e0:06:bd:44:01:f1:e3:5c:fd:ac:2c:47:03:b8:70:ad:fc:
d5:90:c3:d5:e4:c4:fc:ab:48:47:b2:80:48:fa:92:2a:29:d0:
9f:56:8f:3a:75:cc:cc:a5:78:7e:09:d4:7b:24:b6:f4:10:f7:
fa:e6:92:ca
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
MzgwRDExMC8GA1UEBRMoQzNEMEVFNjg5NENFOEY1NkNGNkIwNzBBQjEzRjk4MTY5
REZENDExRjAeFw0yNjAzMjUwODAzNDVaFw0yNjA0MDEwODAzNDVaMBgxFjAUBgNV
BAMTDTY5YzM5NmUxLWUzYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC82SJROWfIVSxRphsul8tLo/qdmxzGaSnLejVaghO0DFSTvR4x66w6n3hTsFit
r8c/mMcRlDHgPh7oCkjmvRsg0GmCrsiv9nwG64hNmiZEyu7vGjcLpO1p32lDPyuX
MU+77XJrxv0DmMEwU1ANsvkfSYL4DaBbgkjYVNQESloZ5MwELYi4dv96A6PzNR7e
g+Eta20hjb1igmkCn1C1Da+EpW4F83t7HTzVV80fUGk8E6Pai6xRrA9y0BfEcjEG
vlCD+3VNb6nhST9kB9XqGyht8W3VSQ/B9OgXMrJg6QA/G4qQ8ptwEOjSibMSaV7L
+cVng945APl73a0Rsm9I/e+rAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9mDE9gaH
Mxx7Iw+FqhziiEhOJk4wHwYDVR0jBBgwFoAUw9DuaJTOj1bPawcKsT+YFp39QR8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzODBELzFCMDZDNDRDRkRB
MTExRjA5OEQ3NDZBQzVGNkY1NkJDL3c5RHVhSlRPajFiUGF3Y0tzVC1ZRnAzOVFS
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdzlEdWFKVE9qMWJQYXdjS3NULVlGcDM5UVI4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz
ODBELzFCMDZDNDRDRkRBMTExRjA5OEQ3NDZBQzVGNkY1NkJDL3c5RHVhSlRPajFi
UGF3Y0tzVC1ZRnAzOVFSOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBwTN1G7E+RQ5womrk99vuiiHYMgRS+vGeZ7UbbAGmYkq3a7QXpwL7mz0d0Jr46
It5aXKw3n1nSw850yjEqpUQM8v87MrB4IVIASh5kw6ys5yYfintdFLEaTtE9ghzX
8VBBAER80MYKLfDG0CXRo+XLKcuxjHRKxGyAZOsDx5HIz294lIYZH+QbpjvWHYln
QqJwPxBTPxVKVyp3QIwrssIkw65F8/5Cl9ff/0LRLjOW4bNuEYWuOOoXOARIxSUj
23HzEXViKdGs4Aa9RAHx41z9rCxHA7hwrfzVkMPV5MT8q0hHsoBI+pIqKdCfVo86
dczMpXh+CdR7JLb0EPf65pLK
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:59:02 2026 by rpki-client