
$ rpki-client -vvf rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
File: WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft (raw, json)
Hash identifier: NNbiy/moOBC3eDH/w4ydGI25uQLAsvJRpbn1UaWARhc=
Subject key identifier: 3C:B0:23:0A:BD:8F:F1:91:A9:A2:9C:AE:1F:A8:51:9C:2A:D4:33:45
Authority key identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5
Certificate issuer: /CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
Certificate serial: 0C7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
Manifest number: 0C3A
Signing time: Tue 24 Mar 2026 18:39:46 +0000
Manifest this update: Tue 24 Mar 2026 18:39:45 +0000
Manifest next update: Tue 31 Mar 2026 18:39:45 +0000
Files and hashes: 1: WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl (hash: NMwohQBUGk8AMwUaSZLUgGFOAzDr611n8vJ6C9Jifc0=)
2: 140D52F2854B11EAACB2FE39C4F9AE02.roa (hash: NJ/7oIBGXC/PxDjKoZF+pd55TEkTum40/RwHEfCwL4Y=)
3: 474DC6748C2B11EA90152018C4F9AE02.roa (hash: TiR/THxTv+8Q4xjFCU9Crz8ZRBbuW10DJLAKMkvQPtc=)
4: 21A731506C9B11ED93A7513AC4F9AE02.roa (hash: +MbypgVzLHUTjgMkgZKJV+5xplqp/2u1VVeYBMIe3Jw=)
5: 1495D7EE854B11EAACB2FE39C4F9AE02.roa (hash: 86i08HrYhIHd5/tlQfJiPI8WTmudehhqB9JwGxyXYX8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl
rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:39:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3197 (0xc7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91274A4, serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
Validity
Not Before: Mar 24 18:39:45 2026 GMT
Not After : Mar 31 18:39:45 2026 GMT
Subject: CN=69c2da71-8c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:89:bb:96:27:7d:25:9c:8f:77:8b:7b:60:
bf:da:e2:17:32:71:a7:5b:36:14:bc:0b:da:7f:49:
13:c9:c0:2e:ac:36:cf:e0:02:73:2a:1d:8f:a8:5e:
5a:79:78:fe:c4:53:b7:f2:93:97:c0:23:43:43:64:
71:35:31:b7:3d:de:66:13:e8:85:f5:f7:77:73:73:
ea:50:a4:31:08:6e:af:b0:48:3a:f2:5a:54:d7:07:
c5:f6:2a:bb:db:81:d2:58:a6:ce:b1:29:06:46:34:
b5:5b:69:3f:0b:f9:cb:f5:5d:e5:37:af:49:b2:60:
4c:21:3b:22:db:0c:be:c0:fc:56:6a:1a:b2:c2:5f:
de:e9:f0:99:93:cc:7b:32:3f:7c:1a:5f:92:01:b8:
b8:ef:de:f9:f2:12:10:2e:98:49:05:b7:6d:6e:9e:
07:16:ba:78:e5:8c:7b:67:09:77:b7:98:67:f8:25:
e1:4b:bf:9a:39:cd:36:d8:52:8e:2d:64:3e:81:28:
23:f6:37:04:fa:ac:08:86:71:9b:4f:fb:3a:a1:30:
8c:2e:72:8e:d5:7d:7d:8b:bd:c3:ac:6a:02:e5:7f:
fa:99:92:76:ef:01:66:9b:41:99:27:51:e9:08:42:
d2:be:a4:92:4a:47:7b:91:50:92:da:64:b3:67:62:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B0:23:0A:BD:8F:F1:91:A9:A2:9C:AE:1F:A8:51:9C:2A:D4:33:45
X509v3 Authority Key Identifier:
keyid:59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:43:71:b3:2e:6b:1e:b5:dd:1a:a0:aa:91:9d:9b:ac:23:21:
d8:04:70:78:0f:f5:7a:b0:6e:bb:cf:64:07:44:57:61:ae:62:
f3:b1:ea:4b:9d:7b:45:ec:63:a4:f5:b4:82:79:48:15:78:be:
0e:4e:11:77:a6:32:50:5b:7c:a1:5d:5a:67:28:6f:0d:82:ea:
8a:48:02:43:bf:90:0f:80:8b:c2:6f:e9:74:4b:2e:cf:88:d9:
1c:ce:bd:48:78:3c:8b:be:df:07:c0:83:13:bb:1b:19:0e:ad:
83:80:a9:b4:7b:af:3f:97:fe:62:6d:6c:a4:ff:01:b9:14:fc:
36:6b:37:dd:da:31:3a:63:f7:bf:d0:3e:50:23:9d:6e:9e:a1:
be:e1:01:f1:75:9a:0b:a9:74:06:e6:67:be:2e:9c:82:d0:fe:
9d:3c:96:6c:fb:ba:3a:ca:71:36:b8:2e:13:a8:9a:bb:9d:f1:
23:a0:36:4a:4e:5f:b0:19:77:e7:60:20:75:0d:3e:47:13:18:
8e:f4:dd:fa:a5:a8:cc:a5:73:29:62:b0:91:63:c3:55:7d:70:
a0:75:7a:73:73:30:26:74:94:27:c5:a7:05:9a:cd:f7:c0:78:
6b:b3:55:15:25:1b:c3:1c:4a:99:2f:5d:9c:ac:28:65:ca:6b:
46:06:dd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:25 2026 by rpki-client