
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
File: WjWLSErYf-ApwQHa5tLtgo2GBVM.mft (raw, json)
Hash identifier: VnkxR+rKhwFhzyxRRgfcpfqcRdPLiHe9hOMs58lmDR4=
Subject key identifier: EC:1B:DD:CC:8B:2B:6D:66:B1:01:36:AB:68:4D:A4:A2:EA:7E:DB:86
Authority key identifier: 5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53
Certificate issuer: /CN=A9125949/serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
Manifest number: A4
Signing time: Fri 27 Mar 2026 06:52:08 +0000
Manifest this update: Fri 27 Mar 2026 06:52:07 +0000
Manifest next update: Fri 03 Apr 2026 06:52:07 +0000
Files and hashes: 1: WjWLSErYf-ApwQHa5tLtgo2GBVM.crl (hash: MU28ZIEPnHwSIqYXb+icmRVIGgNjvnz+6G8g26hXaLo=)
2: D01462D636E611F090C5647FC4F9AE02.roa (hash: o2ClPvigt44EqHdI4QXa4+RC4H1zD8Ut65gPQzhhh7I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl
rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 06:52:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125949, serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553
Validity
Not Before: Mar 27 06:52:07 2026 GMT
Not After : Apr 3 06:52:07 2026 GMT
Subject: CN=69c62918-248d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:09:42:d5:24:b2:1f:66:63:47:ac:08:d3:92:
a3:58:b0:c2:d5:e8:ad:96:5d:85:65:a1:35:3a:84:
6c:bb:06:08:2e:6e:32:f6:ec:66:0d:79:2a:06:26:
aa:0b:c7:29:fc:0c:e6:3b:ca:6b:f4:29:5f:d5:24:
21:b7:c4:c0:ef:84:8c:44:00:e5:bf:7f:6e:54:26:
99:88:39:62:c7:33:d8:3a:d4:44:5a:19:20:a6:69:
51:2e:19:e1:a2:bb:58:67:31:74:82:0b:40:f9:9f:
27:ec:d4:bd:5e:22:e2:68:b4:85:af:fa:ca:b4:7f:
37:c2:df:1f:69:95:f4:24:f9:e7:c5:53:d6:28:29:
01:83:93:41:0c:bf:3a:3f:7d:ae:e0:63:2f:37:ab:
9c:1f:90:b0:6a:cd:ab:59:86:66:15:7a:1b:25:0d:
4b:2c:c1:57:d6:71:5c:34:3b:0f:d2:e2:79:ce:31:
d6:4c:34:8e:49:a7:26:5c:75:ac:40:e9:c8:e1:09:
8f:6f:43:81:0f:d4:7b:6b:fe:47:c0:f0:bc:ae:a5:
df:0a:ab:1f:4a:bb:6b:86:b6:3e:e1:ab:35:94:05:
ae:da:db:84:19:39:f1:2d:3c:53:a0:7e:1b:0f:4e:
bb:2d:c8:56:5e:b3:bb:fc:8f:46:3c:d5:51:a4:23:
a7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1B:DD:CC:8B:2B:6D:66:B1:01:36:AB:68:4D:A4:A2:EA:7E:DB:86
X509v3 Authority Key Identifier:
keyid:5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:38:86:1d:ff:25:bb:2a:ac:1a:cf:97:8b:f2:83:80:a1:de:
c4:83:ab:c1:12:60:8c:05:2e:3a:76:4c:03:ec:df:2f:80:f2:
3f:c7:a6:54:bf:b4:9b:f3:a7:80:d5:c1:a0:9d:54:40:43:05:
f8:4a:e3:f7:39:40:46:99:ce:29:54:ae:50:30:52:43:cb:08:
70:51:12:67:2d:f6:3b:92:27:e5:64:03:fe:f1:18:ee:73:61:
0d:ff:01:c4:b7:0d:5d:7d:ed:26:4b:63:8f:d5:a2:ec:86:99:
7a:9f:44:d4:d5:49:5e:65:e6:a5:c0:42:3d:eb:1e:31:33:b2:
52:d6:6b:66:b9:ac:0d:72:17:e2:b8:16:65:ab:c7:76:ac:0a:
eb:a1:91:53:fe:5e:ff:5c:98:da:bc:6e:af:23:52:41:02:07:
39:85:f3:ca:7d:35:cf:4c:39:69:0a:6c:e5:7e:39:a6:45:99:
09:bb:e0:75:7e:4f:c9:dd:c6:96:58:a6:f3:51:2a:5b:a5:ff:
8d:2b:f8:2c:43:54:4d:3c:eb:cb:b0:40:d5:6b:88:84:92:eb:
c2:f4:ff:be:61:36:88:08:f3:36:3e:28:f1:06:a8:9f:ec:f7:
ae:4d:47:35:f8:13:8f:34:30:d2:55:06:ba:af:8d:2d:d6:4d:
2c:c1:47:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:23 2026 by rpki-client