
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
File: WfIhqdcBRydJAka2joLCl2fHDTg.mft (raw, json)
Hash identifier: r2aYbMikn1l27dicgngkiVH/z9A7h8UIo6hVgNbG6lQ=
Subject key identifier: 1A:A0:66:3A:10:49:F4:A1:DD:F7:39:E0:34:9D:4B:7E:80:E4:30:0D
Authority key identifier: 59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38
Certificate issuer: /CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38
Certificate serial: 0378
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
Manifest number: 0372
Signing time: Mon 11 May 2026 00:55:31 +0000
Manifest this update: Mon 11 May 2026 00:55:30 +0000
Manifest next update: Mon 18 May 2026 00:55:30 +0000
Files and hashes: 1: WfIhqdcBRydJAka2joLCl2fHDTg.crl (hash: 4/dJRMQeAEF4C2bt0GU9pbTlb5W7wOInYggPELkL9wA=)
2: A033FFB4F7F511ECADEAB528C4F9AE02.roa (hash: isEssEWm0725iSvQv15Srmh7ru8PYttLm9Qb+FYEb6k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl
rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:55:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888 (0x378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CE21, serialNumber=59F221A9D7014727490246B68E82C29767C70D38
Validity
Not Before: May 11 00:55:30 2026 GMT
Not After : May 18 00:55:30 2026 GMT
Subject: CN=6a012903-cf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a6:56:96:a8:64:19:77:ee:0a:99:0c:48:db:
66:52:62:0d:7f:3f:b4:2c:e0:ed:20:27:c3:ee:cb:
1b:ea:32:54:f3:b4:08:36:c4:f0:c5:44:57:36:2b:
ea:4c:72:bd:6f:e4:cd:ce:4e:c4:27:2e:27:af:d6:
50:33:38:9f:28:56:72:da:22:f5:94:72:60:0e:75:
62:a2:d0:53:ea:8a:ba:92:cb:b9:5e:d2:79:1c:01:
04:1d:05:ef:d6:ea:ef:df:ba:d1:10:39:9b:0a:c5:
73:2f:4c:35:8f:f7:0e:e1:e8:ee:90:0c:bc:26:0b:
b8:b2:ac:d5:ec:5e:c8:1c:a8:fd:95:5d:80:52:fe:
35:e9:9e:54:f3:46:00:33:c9:80:a2:20:46:df:87:
da:17:42:79:6d:ed:d9:e8:71:15:bd:c0:15:e2:04:
12:12:ab:f4:02:0c:1c:e6:52:f4:cc:4b:07:27:d8:
d1:e2:1f:7b:ce:d6:05:2a:be:0f:d5:72:61:e1:ce:
6b:22:a0:a8:b7:69:a7:3a:4c:dd:e4:71:f9:3d:c9:
ea:3f:1c:a4:9a:7a:97:79:6e:33:1a:bb:5e:3f:4f:
94:e7:f1:0a:d9:64:f3:db:dc:da:3d:05:37:4d:23:
49:0a:b0:2e:44:84:6a:08:be:2f:db:4e:87:03:af:
23:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A0:66:3A:10:49:F4:A1:DD:F7:39:E0:34:9D:4B:7E:80:E4:30:0D
X509v3 Authority Key Identifier:
keyid:59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a1:30:ef:bb:9e:27:b2:4c:57:bd:1b:a3:a7:e3:5d:c5:ac:
5e:54:f4:f6:f8:11:b6:77:df:35:ba:e2:36:e0:1e:c0:19:17:
1f:ff:12:d8:e4:70:df:29:88:46:dd:fa:35:f0:58:9f:f5:ee:
b4:a1:98:c3:9a:3e:20:52:95:99:8d:05:da:3c:55:76:96:07:
1b:78:7e:3c:4b:d9:f6:71:3b:bf:7f:38:47:dd:b4:37:2b:1c:
f7:5e:48:0a:08:69:c6:6d:4f:1e:f7:58:3c:ff:14:77:55:23:
02:66:c7:d0:61:d7:e4:f9:92:9b:23:09:45:74:d6:2c:02:ff:
55:49:42:c6:6f:fc:62:0e:57:00:96:f0:c3:f6:b2:76:c9:be:
43:92:66:aa:b1:28:da:12:fb:c7:fb:33:6d:6a:f7:14:f5:57:
4c:6f:47:46:0b:48:5f:87:93:34:d5:07:e2:d2:06:9b:ec:9d:
85:40:62:91:45:d7:a7:c7:70:f6:7b:47:01:72:f0:7e:fa:36:
f4:2d:4a:6c:56:55:10:4d:ca:5f:6f:7d:42:2b:39:3f:72:36:
9f:a9:e8:66:0e:b5:af:72:70:93:e7:ae:ec:02:a0:dd:76:92:
9d:29:42:cf:61:1c:4b:c0:fb:82:65:4f:70:d6:75:5c:15:03:
24:9d:49:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:09:16 2026 by rpki-client