
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft
File: wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft (raw, json)
Hash identifier: LJGDl+J79EjSu4/CbxKataWLibzfsZzdgRe6qV5IZm4=
Subject key identifier: F9:E1:27:B0:90:5F:3E:1B:57:A4:FD:16:58:5A:0C:94:0C:36:CE:16
Authority key identifier: C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59
Certificate issuer: /CN=A912B85B/serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59
Certificate serial: 01A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft
Manifest number: 019B
Signing time: Wed 25 Mar 2026 03:31:52 +0000
Manifest this update: Wed 25 Mar 2026 03:31:52 +0000
Manifest next update: Wed 01 Apr 2026 03:31:52 +0000
Files and hashes: 1: wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl (hash: ASNgaBbVx+zbCbtrGkawv0VSPWQGbLrYPvImkxroVM8=)
2: 7DE2804AB4BC11EEA02E9A19C4F9AE02.roa (hash: m0EtsgnFteaZumXXNJzKKsBn+VRdGLka+E0ADygv+iA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl
rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B85B, serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59
Validity
Not Before: Mar 25 03:31:52 2026 GMT
Not After : Apr 1 03:31:52 2026 GMT
Subject: CN=69c35728-7282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:3c:6f:20:47:dc:c6:d2:5c:ae:4f:6f:f1:
e5:e3:37:b0:d7:f4:4d:7c:28:59:bd:56:e2:b6:90:
74:36:e6:6c:ab:ba:1e:75:64:c7:c4:e2:02:bb:a1:
c0:01:e2:16:41:09:2d:00:c2:29:a5:cd:f5:2e:a8:
c2:a3:9c:9c:3b:67:5d:78:df:4f:7b:d1:ea:a3:94:
f8:b2:a0:c5:4e:cf:24:69:24:a4:ca:c2:1a:b9:9b:
f8:d6:69:70:c9:cd:90:b6:12:a6:5a:1b:92:24:c4:
a0:1f:06:08:95:10:97:43:97:0d:13:21:4a:a6:78:
d1:99:e7:99:ea:e2:d5:07:25:85:b6:44:62:81:a1:
90:dc:f0:3c:34:fa:49:77:1f:78:29:42:3c:7c:24:
53:a1:dc:1c:81:bd:47:56:07:13:3c:90:a6:b1:b0:
cd:8b:5f:b8:47:62:6f:4c:45:10:6a:41:b8:a3:38:
8f:9d:f7:6d:bb:c4:c2:73:1c:9d:86:e7:b4:94:65:
41:da:e9:69:25:7f:35:57:61:f4:9d:63:58:3c:49:
79:67:b8:11:ca:62:1b:07:30:23:22:3f:2d:a1:f5:
03:0c:36:33:99:2a:0c:bb:21:71:84:1c:83:ba:b7:
90:c4:b9:26:a3:b9:63:f4:65:b5:33:d8:2c:22:b1:
c5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E1:27:B0:90:5F:3E:1B:57:A4:FD:16:58:5A:0C:94:0C:36:CE:16
X509v3 Authority Key Identifier:
keyid:C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:5a:14:5e:3d:18:60:35:4c:3d:19:81:56:c0:91:dc:04:1b:
34:61:db:86:4f:ee:ec:4a:27:39:63:24:3f:da:e4:85:c0:be:
3c:a7:4a:1f:e4:a2:b8:0c:37:7a:50:04:bf:c9:61:4f:e1:a9:
32:3b:17:68:6a:bc:39:3f:6c:1d:ce:87:19:5b:54:93:a9:6b:
18:fc:5c:f7:dd:10:d4:31:b1:68:e6:76:35:9a:2f:54:e0:c9:
ef:5d:93:fc:9a:d8:b4:bb:06:14:b2:14:55:b5:38:d7:15:15:
71:b6:d5:cb:5b:33:ec:c1:4d:d1:da:1c:62:3d:41:ed:de:8b:
a8:36:c5:f6:6d:68:4b:8b:ba:51:44:6c:be:89:37:fe:92:7a:
e6:25:d3:ce:53:2c:b1:aa:ab:c9:3a:62:50:8f:08:23:f6:67:
da:9a:5c:15:6c:29:a6:84:4c:55:56:84:31:92:d8:27:f5:60:
82:a7:6a:77:0b:f9:13:0c:e6:85:27:9e:b0:6b:85:5d:54:54:
d5:92:24:04:cf:c1:fd:0d:6a:e3:50:f6:3f:2e:55:83:9a:90:
ae:cb:c0:5e:ea:c3:4f:61:9a:07:49:45:55:76:19:1d:3a:93:
7a:47:cd:d3:4a:b2:0a:ce:e5:dd:0e:79:8a:2b:81:2e:09:23:
36:6f:95:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:44:36 2026 by rpki-client