
$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
File: wLnBGxsWDzIbiuxM_N3a2JX8R94.mft (raw, json)
Hash identifier: e6A7Agc4/DArfAqIUTYiGUk4Hx2oJYtbr57dCv9jWTI=
Subject key identifier: 95:AC:62:FD:30:C5:80:AE:06:7B:A1:5B:DF:5E:68:90:C2:90:10:74
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial: 0F4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
Manifest number: 0F22
Signing time: Tue 12 May 2026 17:37:27 +0000
Manifest this update: Tue 12 May 2026 17:37:26 +0000
Manifest next update: Tue 19 May 2026 17:37:26 +0000
Files and hashes: 1: wLnBGxsWDzIbiuxM_N3a2JX8R94.crl (hash: 4lQncpiY718qZs0Xp2rLtLxCXLu72oHExwpcwFSiLNE=)
2: DC185D0CB0A111EE8C78834EC4F9AE02.roa (hash: HrbRpfH7PxwlVsWwc7Cd0leITyH+N1wvPWwJUeGi0Gc=)
3: A2E6430C595F11EF8C3B3D31C4F9AE02.roa (hash: pf0ymMCA7Kgme/fzn7Eyo+fP+Qj1bUavN39NpzB8q9I=)
4: 247099D084C611F09EBC052BC4F9AE02.roa (hash: +Q3AY1Q5BFNg+gcQ3gSJEdo3yWPoccjg5VLaMkkAwiE=)
5: 2569C82ADC2311F08AE4CDD5626F56BC.roa (hash: +GvRnx4kGmdGhgUa7+g7/7rbplkPi3N501wiLsGfa8A=)
6: E54A88DE595F11EFB2BAB431C4F9AE02.roa (hash: fixrg42NYphqE0nuKL6zNk+ZD0rf70DKNO2L7OI16Rg=)
7: A2369FBA595F11EF8C3B3D31C4F9AE02.roa (hash: /Wf9VOD/h7uLy8JdaHzkcRxgJZN0cMoOva7RxEI3K2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3918 (0xf4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912698E, serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Validity
Not Before: May 12 17:37:26 2026 GMT
Not After : May 19 17:37:26 2026 GMT
Subject: CN=6a036557-0fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:73:98:53:55:47:57:b1:93:b5:da:44:ca:be:
81:0e:c4:73:8a:31:87:5f:ad:28:62:bb:92:da:23:
5a:77:ea:cd:46:40:e8:87:4b:9f:78:e6:40:d4:d8:
cd:c3:82:e9:fa:2b:86:32:39:07:da:7a:a3:76:12:
06:34:6d:4b:a3:49:85:02:01:f6:87:2d:f2:d9:a6:
7e:4c:b8:d9:5a:07:91:27:f4:1d:d7:e8:79:78:37:
f5:75:d9:3c:8b:b5:93:7d:89:d3:51:f7:57:ed:2a:
4d:66:8e:f2:db:cd:87:aa:8c:e7:07:a4:d4:b5:20:
47:af:59:fd:80:b6:ed:00:b0:2c:fc:71:75:47:f9:
da:bd:48:db:19:33:77:2a:2c:ba:d6:55:5a:dd:ac:
52:de:3f:12:5a:54:26:f4:bc:bd:7e:57:61:15:82:
b5:32:08:26:be:09:ba:f3:4c:a3:0c:75:ab:d6:98:
8d:45:33:bc:6e:c8:58:0e:eb:c6:b5:69:20:55:78:
d3:e6:7f:16:15:4c:a9:37:3e:47:10:29:a5:e3:0b:
d6:9b:9a:70:18:14:bb:c2:fb:e6:54:79:39:24:7a:
5c:16:6a:4e:be:bd:e8:86:26:e9:9c:a3:89:90:04:
71:37:73:bc:f8:43:14:a2:3a:75:9e:b6:03:99:73:
75:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AC:62:FD:30:C5:80:AE:06:7B:A1:5B:DF:5E:68:90:C2:90:10:74
X509v3 Authority Key Identifier:
keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4c:36:5e:ec:49:f7:f1:83:2a:38:21:bf:a2:7b:7f:56:a6:
39:cd:32:5a:01:79:12:50:a0:f9:8a:0a:bb:c9:0d:1d:e7:e6:
b8:37:7a:f0:66:35:0b:ba:90:7e:b4:cc:c6:16:f4:14:b6:31:
02:42:82:1e:e8:d6:39:1c:88:ac:35:8c:a4:71:b3:a2:30:29:
c7:4d:b1:a1:b2:c3:dc:56:44:fc:25:1f:ac:00:4a:c8:5a:7d:
69:94:bf:d5:9d:4e:75:5d:3f:bd:8c:51:4a:d7:6f:55:18:d6:
7f:00:af:8f:af:4b:28:f3:2e:24:c5:e4:50:96:7c:37:bf:d0:
ab:b1:97:13:b9:83:bd:c3:3d:5c:f4:73:23:6f:65:14:ff:aa:
dc:7c:61:ad:16:9d:e8:ab:a9:44:86:96:e2:a4:d4:c6:50:4a:
5f:26:1d:14:ab:47:c3:89:f0:2f:31:08:0e:80:d8:60:cf:a1:
3f:5d:e0:6e:c5:8e:b2:55:45:e1:17:03:5b:a4:42:64:83:a8:
87:b9:86:0a:c3:71:a7:25:eb:df:2a:1f:df:ce:79:d8:8b:3b:
6b:e8:3c:df:31:4e:39:81:de:4a:9d:ee:82:b0:87:0c:d3:b3:
72:28:cc:b2:e5:da:8b:13:37:79:8a:40:40:2c:25:6c:7c:d6:
ba:8b:e1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:55:08 2026 by rpki-client