
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
File: WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft (raw, json)
Hash identifier: R4s4gPH6mI18geHd19EMz49uMNKdeAQO4RRiwyQujqE=
Subject key identifier: BF:1A:75:D2:B8:02:EA:4C:0F:AE:FD:DD:B4:BF:AD:3D:64:F2:5C:45
Authority key identifier: 58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B
Certificate issuer: /CN=A912C72C/serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B
Certificate serial: 068D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
Manifest number: 0668
Signing time: Tue 24 Mar 2026 22:21:14 +0000
Manifest this update: Tue 24 Mar 2026 22:21:14 +0000
Manifest next update: Tue 31 Mar 2026 22:21:14 +0000
Files and hashes: 1: WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl (hash: MB+bzw+VPgHOGkPrkpLt7Q9eTsAp/R7dqAfRvjcLnho=)
2: 101150200BF211ECB242D930C4F9AE02.roa (hash: ssvfMr799f/mTVyYIgMj9bRfKIkNqOfU6Gmkf1qphqQ=)
3: D756DF180BF411ECB17CCF3AC4F9AE02.roa (hash: y2SnfxEi58D0PUlHFRCgP8HkpNi6RCfX061Zf6HOU64=)
4: D84424F80BF411ECB17CCF3AC4F9AE02.roa (hash: OPDCRi7CT4/YzJXmmua8bhI/wRwIZzxKrVPfIH2gRdg=)
5: C2BDF91086EE11EFB5A6B352C4F9AE02.roa (hash: DGkc44cg4KTTtMc35ker9L4kUFjIMHeDUThOm8rbEJU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl
rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:21:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1677 (0x68d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C72C, serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B
Validity
Not Before: Mar 24 22:21:14 2026 GMT
Not After : Mar 31 22:21:14 2026 GMT
Subject: CN=69c30e5a-6aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:63:b4:e5:08:d0:28:8d:56:c6:ca:96:cd:37:
ba:64:54:0d:fa:77:68:e3:ea:a0:c3:82:cc:fe:5b:
10:44:ab:16:8e:7f:ec:db:d0:cc:e9:80:35:14:3e:
3f:b9:8b:6a:a6:72:93:89:8d:ca:4d:1a:e7:ca:a2:
b4:08:72:8c:a6:e1:ae:bb:86:b9:a1:f7:e5:60:8f:
8c:70:8d:51:bb:9d:59:86:ea:a4:cc:58:f5:a1:76:
c4:43:4b:1e:d7:7d:77:46:99:65:2b:9b:f3:da:b1:
96:d6:a3:5d:62:41:38:c9:61:75:6c:6d:4d:74:d9:
ba:58:f4:6e:d5:34:dc:13:50:8f:ae:f2:23:40:18:
26:6b:b8:a5:df:55:3a:94:2a:1e:e5:90:1b:94:b9:
ec:93:ae:bb:bb:9f:82:03:2f:fd:bf:f9:b4:e1:e8:
f1:06:43:99:5e:fe:c7:4b:05:a9:b0:b0:57:f2:a5:
f3:f6:a3:b4:2b:d6:c2:c7:cf:c7:42:ef:82:f0:93:
be:6d:8e:a1:d0:41:bc:f9:a9:7e:d2:ce:60:93:6a:
7f:a5:11:24:fb:61:0f:bc:a6:e1:89:f5:02:e5:b2:
fc:0e:a9:6d:1f:f2:c0:de:9b:ee:ce:bb:86:34:76:
7f:f9:3b:14:8d:3c:f4:77:e9:50:de:af:ee:a5:fb:
45:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1A:75:D2:B8:02:EA:4C:0F:AE:FD:DD:B4:BF:AD:3D:64:F2:5C:45
X509v3 Authority Key Identifier:
keyid:58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:07:e6:c1:25:3d:1b:21:d7:4b:e6:96:d8:17:46:55:71:1c:
94:b6:67:2e:6c:46:40:27:d1:b0:ca:31:a5:8b:c3:d4:c3:2b:
ae:66:7c:19:2a:e7:9d:17:58:b0:f3:0d:6b:ef:bc:f2:e8:0a:
56:6b:0f:5c:39:bc:ea:d2:b6:61:2e:1b:ee:12:c2:28:36:4f:
90:f8:3c:1e:6b:4c:05:19:ae:aa:8f:f7:82:8d:c0:6d:7a:9a:
23:93:ce:3e:be:e0:12:93:34:02:c2:da:f1:4c:59:59:ff:64:
f0:2e:87:cf:14:aa:06:3e:fb:d9:5a:bb:fd:62:c0:04:cd:3d:
05:3d:cf:7c:22:b1:3a:af:53:93:31:37:f2:d6:f9:9d:0c:cf:
47:5e:5a:ef:81:9f:c4:65:96:1e:c5:d2:5b:bc:08:39:74:9a:
2a:62:4c:5d:f9:4a:32:e5:62:7d:36:28:74:92:f7:03:6d:57:
94:e9:f4:eb:37:e1:3e:8a:d7:8a:3d:b2:a0:40:c6:78:e0:a1:
e7:55:fb:19:41:af:4d:6d:da:9e:44:09:c9:43:d0:41:83:5b:
bf:62:4e:96:24:44:48:6d:ec:2f:99:01:bc:b4:b7:77:53:6b:
d2:0e:7a:6b:57:b8:85:ae:b7:c1:e2:dc:ff:4d:ce:a2:0e:c9:
b5:9d:73:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:09:34 2026 by rpki-client