
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
File: WF3cT9n54xQAXzcZj9HiLmgknes.mft (raw, json)
Hash identifier: 04V8oWcJcQEN9teq6TA7pLVPtwV6kJTAX9AkJyKL5eY=
Subject key identifier: D4:74:72:58:E4:2C:5A:71:D9:0D:9E:B3:96:1C:60:5C:CD:8E:6F:B6
Authority key identifier: 58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB
Certificate issuer: /CN=A912871A/serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
Certificate serial: 0559
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
Manifest number: 0552
Signing time: Sat 26 Sep 2026 23:28:46 +0000
Manifest this update: Sat 26 Sep 2026 23:28:46 +0000
Manifest next update: Sat 03 Oct 2026 23:28:46 +0000
Files and hashes: 1: WF3cT9n54xQAXzcZj9HiLmgknes.crl (hash: 7qhiN2c2e9CZEeAmZCbPGmnYiWIfUvJW/DpSxRLbdsA=)
2: 5431D022524211ECA52D990FC4F9AE02.roa (hash: OxBZXjM5WU3mTzBTkJpk2hM02aP7JRhZY0bot56cYO4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl
rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 23:28:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1369 (0x559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912871A, serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB
Validity
Not Before: Sep 26 23:28:46 2026 GMT
Not After : Oct 3 23:28:46 2026 GMT
Subject: CN=6ab8552e-f76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:54:21:66:3b:4a:36:de:34:8d:0f:92:83:8d:
bf:23:33:52:16:2f:cf:44:9b:fd:fb:7a:af:44:99:
d2:1d:40:bb:29:b6:8a:e8:1f:14:9a:4d:c5:2e:ef:
82:55:29:36:3a:2a:5a:3f:88:20:41:22:c2:5d:14:
af:e8:2b:f5:4d:21:ec:96:f6:54:ed:4f:76:39:f7:
11:60:05:c2:ec:aa:ff:80:5b:d4:d7:0a:1e:8e:9d:
ab:86:2b:66:85:8f:b8:31:db:f4:81:35:c2:3c:8f:
0a:a3:7b:80:32:f7:7b:94:3d:09:4a:07:2c:2c:ea:
c2:48:55:50:71:04:c4:0b:49:de:65:c8:4e:61:2c:
c6:d7:ef:d3:14:0a:bf:d4:71:92:3d:56:a7:e4:bc:
4f:38:91:10:dc:8b:07:2b:8d:0a:5c:6f:8c:e5:19:
6e:dc:e8:3a:b3:3d:d5:73:4b:de:8f:f4:91:31:10:
66:c0:b0:9e:d8:4d:42:38:a7:95:54:e8:6d:d9:e9:
87:79:f9:74:75:3e:2e:ad:d2:0c:3a:3e:4b:9c:5a:
dd:a8:b4:03:69:cb:6f:5b:69:f3:a2:64:79:89:d8:
89:89:31:de:b8:01:60:61:cb:9b:22:6c:f2:37:dc:
58:e6:9e:de:07:37:0e:20:41:d1:df:22:90:17:47:
b5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:74:72:58:E4:2C:5A:71:D9:0D:9E:B3:96:1C:60:5C:CD:8E:6F:B6
X509v3 Authority Key Identifier:
keyid:58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9c:1e:9a:ed:e8:33:63:fb:fd:9c:ef:c3:bc:ef:88:b1:3c:
de:68:17:c4:2b:cf:dc:be:0c:3f:0d:02:00:96:cc:85:b2:ad:
ef:1a:4a:87:75:f1:da:ab:1b:8e:dc:32:dd:1d:ae:f7:53:0a:
de:66:bc:dc:79:79:f6:4f:50:df:38:e0:32:fa:59:bc:02:0b:
de:f8:2d:a7:7b:15:19:e5:31:a3:6d:c0:8c:d8:2c:a2:bb:ca:
fd:4f:a4:78:7f:af:19:04:7a:97:a6:7c:1d:b6:4e:e3:c9:72:
b5:c7:82:6e:fb:60:17:31:fe:cf:b5:d7:63:7b:a2:34:82:fc:
21:f0:77:54:2a:0d:06:f7:13:b1:b7:50:f7:8e:c3:96:5f:c4:
4f:d0:bc:66:e1:30:cd:17:bd:8e:43:67:fc:18:eb:1f:5f:6b:
3e:9e:df:78:ad:41:5e:d7:0d:c6:4b:3e:51:13:46:f7:3d:fd:
95:e1:70:ea:7f:96:c0:45:48:4b:40:0a:2c:e6:a3:1c:8d:70:
81:d1:68:16:07:ed:3f:76:97:9d:b4:2a:a8:dd:f6:7e:34:34:
d9:14:36:18:85:cf:59:e5:08:a3:60:98:31:49:2e:9a:a1:7f:
80:ec:eb:0c:82:24:0f:49:59:c5:1b:19:64:49:63:f8:c5:51:
dd:0e:ee:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg3MUExMTAvBgNVBAUTKDU4NUREQzRGRDlGOUUzMTQwMDVGMzcxOThGRDFFMjJF
NjgyNDlERUIwHhcNMjYwOTI2MjMyODQ2WhcNMjYxMDAzMjMyODQ2WjAYMRYwFAYD
VQQDEw02YWI4NTUyZS1mNzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+VQhZjtKNt40jQ+Sg42/IzNSFi/PRJv9+3qvRJnSHUC7KbaK6B8Umk3FLu+C
VSk2OipaP4ggQSLCXRSv6Cv1TSHslvZU7U92OfcRYAXC7Kr/gFvU1woejp2rhitm
hY+4Mdv0gTXCPI8Ko3uAMvd7lD0JSgcsLOrCSFVQcQTEC0neZchOYSzG1+/TFAq/
1HGSPVan5LxPOJEQ3IsHK40KXG+M5Rlu3Og6sz3Vc0vej/SRMRBmwLCe2E1COKeV
VOht2emHefl0dT4urdIMOj5LnFrdqLQDactvW2nzomR5idiJiTHeuAFgYcubImzy
N9xY5p7eBzcOIEHR3yKQF0e1cwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNR0cljk
LFpx2Q2es5YcYFzNjm+2MB8GA1UdIwQYMBaAFFhd3E/Z+eMUAF83GY/R4i5oJJ3r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODcxQS8wNUJEMEYzMDUy
NDAxMUVDODY1ODA2MEVDNEY5QUUwMi9XRjNjVDluNTR4UUFYemNaajlIaUxtZ2tu
ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dGM2NUOW41NHhRQVh6Y1pqOUhpTG1na25lcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODcxQS8wNUJEMEYzMDUyNDAxMUVDODY1ODA2MEVDNEY5QUUwMi9XRjNjVDluNTR4
UUFYemNaajlIaUxtZ2tuZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAopwemu3oM2P7/Zzvw7zviLE83mgXxCvP3L4MPw0CAJbMhbKt7xpKh3Xx2qsb
jtwy3R2u91MK3ma83Hl59k9Q3zjgMvpZvAIL3vgtp3sVGeUxo23AjNgsorvK/U+k
eH+vGQR6l6Z8HbZO48lytceCbvtgFzH+z7XXY3uiNIL8IfB3VCoNBvcTsbdQ947D
ll/ET9C8ZuEwzRe9jkNn/BjrH19rPp7feK1BXtcNxks+URNG9z39leFw6n+WwEVI
S0AKLOajHI1wgdFoFgftP3aXnbQqqN32fjQ02RQ2GIXPWeUIo2CYMUkumqF/gOzr
DIIkD0lZxRsZZElj+MVR3Q7uow==
-----END CERTIFICATE-----
Generated at Mon Sep 28 20:11:52 2026 by rpki-client