
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
File: WfIhqdcBRydJAka2joLCl2fHDTg.mft (raw, json)
Hash identifier: IcUQ9MTJtdQG3Gjjbgy07JKqpHJ3cPB6YQmegABTysI=
Subject key identifier: 6E:3A:72:A7:A6:2C:36:9E:54:01:46:96:B8:39:3F:27:27:44:B0:E3
Authority key identifier: 59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38
Certificate issuer: /CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38
Certificate serial: 03A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
Manifest number: 0399
Signing time: Thu 23 Jul 2026 01:37:38 +0000
Manifest this update: Thu 23 Jul 2026 01:37:38 +0000
Manifest next update: Thu 30 Jul 2026 01:37:38 +0000
Files and hashes: 1: WfIhqdcBRydJAka2joLCl2fHDTg.crl (hash: gA6PxzpC3TK01bbWBVSJ/aBV1OXkQMUKEawpchU5fN4=)
2: A033FFB4F7F511ECADEAB528C4F9AE02.roa (hash: VMg0FbYsGm4Am7FsMSKTByp4rI7yTLLmWElUqa+g/C4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl
rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 928 (0x3a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CE21, serialNumber=59F221A9D7014727490246B68E82C29767C70D38
Validity
Not Before: Jul 23 01:37:38 2026 GMT
Not After : Jul 30 01:37:38 2026 GMT
Subject: CN=6a617062-246c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:50:35:8d:fa:4a:f3:f0:90:b5:57:65:26:
6a:b9:b3:c9:8b:69:fe:50:59:55:bb:00:82:97:bb:
ca:d3:a8:70:77:f7:c3:31:fb:77:2b:74:13:98:f5:
8f:9f:ef:f0:25:ff:da:06:58:50:cb:0c:51:2e:0c:
7b:70:6f:28:f1:c3:74:52:b1:c0:db:ac:9a:2c:15:
42:9e:5c:0f:67:90:b9:78:6e:d3:e1:3a:8d:3b:62:
4d:95:74:7b:47:5c:c8:57:20:cf:48:24:6f:ec:92:
3b:1b:80:e6:1d:85:c3:58:7e:50:15:d4:5d:36:e8:
86:ce:bc:89:b4:d5:e2:c5:40:d0:3e:47:0d:28:25:
bf:f3:91:70:78:cd:6d:6f:14:d4:72:8c:a5:a7:8b:
a8:4b:2c:2a:8b:55:8d:a5:1b:34:d2:7e:16:9f:1c:
5c:d7:11:12:35:aa:04:18:b8:0d:e1:3d:a5:d3:24:
4f:9b:02:7d:8d:07:44:93:c1:6f:5e:52:c9:af:14:
9e:f7:11:9d:eb:ee:4e:9a:77:8a:69:01:43:e2:d2:
c5:a8:7f:70:25:2d:f1:f3:d2:4b:4f:50:5b:43:48:
e1:ed:4d:a1:99:6f:5e:dc:e6:f6:da:55:37:30:83:
b2:98:41:fd:9e:79:9d:63:29:15:21:6f:3f:d1:f4:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3A:72:A7:A6:2C:36:9E:54:01:46:96:B8:39:3F:27:27:44:B0:E3
X509v3 Authority Key Identifier:
keyid:59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:c8:c2:22:e3:a8:1f:c0:e7:e3:e3:da:d3:59:f8:fa:73:23:
d9:94:6d:a4:33:ab:a9:cd:1e:31:98:4b:95:f4:d6:34:c5:a0:
16:a0:5c:43:95:53:f1:66:ca:8f:f1:d1:a2:4a:e2:71:5d:2b:
d0:67:7f:e4:31:79:77:5a:2d:d4:c0:22:ea:41:f4:5c:30:42:
1b:4c:46:2e:22:bd:68:51:a0:19:e7:1a:f2:c3:59:7a:25:a4:
d0:af:22:37:e3:a0:06:98:f3:e1:ce:6e:67:36:f5:2e:3f:7d:
61:e7:0c:a0:6f:9e:ce:63:00:bd:d8:2a:63:2e:91:bc:32:df:
f8:91:69:06:71:09:de:f1:ae:f1:3c:ce:06:37:f0:4b:78:dd:
d5:f0:65:5c:13:35:81:19:e1:d8:90:8f:90:53:d3:91:40:5b:
15:63:c4:af:be:dd:f6:53:60:eb:0f:e5:07:b5:6d:8a:69:1f:
33:8c:a2:ca:bb:9b:11:f5:b2:2a:2c:6c:df:ca:11:3b:d7:1f:
b0:f8:80:28:4e:3e:a4:d8:dd:c2:3f:89:04:52:67:c0:6a:3b:
d0:1d:09:f2:0a:6e:f9:6d:96:4f:a8:7b:0c:6d:45:4f:15:73:
0c:61:55:c0:5a:b0:b6:4e:77:aa:4c:fa:53:1d:b3:77:9d:58:
22:fb:fd:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkNFMjExMTAvBgNVBAUTKDU5RjIyMUE5RDcwMTQ3Mjc0OTAyNDZCNjhFODJDMjk3
NjdDNzBEMzgwHhcNMjYwNzIzMDEzNzM4WhcNMjYwNzMwMDEzNzM4WjAYMRYwFAYD
VQQDEw02YTYxNzA2Mi0yNDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoMtQNY36SvPwkLVXZSZqubPJi2n+UFlVuwCCl7vK06hwd/fDMft3K3QTmPWP
n+/wJf/aBlhQywxRLgx7cG8o8cN0UrHA26yaLBVCnlwPZ5C5eG7T4TqNO2JNlXR7
R1zIVyDPSCRv7JI7G4DmHYXDWH5QFdRdNuiGzryJtNXixUDQPkcNKCW/85FweM1t
bxTUcoylp4uoSywqi1WNpRs00n4Wnxxc1xESNaoEGLgN4T2l0yRPmwJ9jQdEk8Fv
XlLJrxSe9xGd6+5OmneKaQFD4tLFqH9wJS3x89JLT1BbQ0jh7U2hmW9e3Ob22lU3
MIOymEH9nnmdYykVIW8/0fTpLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG46cqem
LDaeVAFGlrg5PycnRLDjMB8GA1UdIwQYMBaAFFnyIanXAUcnSQJGto6Cwpdnxw04
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0UyMS9DRTQ4RTdDOEYx
OUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5ZEpBa2Eyam9MQ2wyZkhE
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dmSWhxZGNCUnlkSkFrYTJqb0xDbDJmSERUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Q0UyMS9DRTQ4RTdDOEYxOUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5
ZEpBa2Eyam9MQ2wyZkhEVGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIcjCIuOoH8Dn4+Pa01n4+nMj2ZRtpDOrqc0eMZhLlfTWNMWgFqBcQ5VT8WbK
j/HRokricV0r0Gd/5DF5d1ot1MAi6kH0XDBCG0xGLiK9aFGgGeca8sNZeiWk0K8i
N+OgBpjz4c5uZzb1Lj99YecMoG+ezmMAvdgqYy6RvDLf+JFpBnEJ3vGu8TzOBjfw
S3jd1fBlXBM1gRnh2JCPkFPTkUBbFWPEr77d9lNg6w/lB7VtimkfM4yiyrubEfWy
Kixs38oRO9cfsPiAKE4+pNjdwj+JBFJnwGo70B0J8gpu+W2WT6h7DG1FTxVzDGFV
wFqwtk53qkz6Ux2zd51YIvv95g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:04 2026 by rpki-client