
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
File: wfSjmGHK0883hCGN7aegXoUvIn8.mft (raw, json)
Hash identifier: 2xGAxbqsyBXHDnfMfJjUYQEUwyXpSMV/hPvA+m/CKPI=
Subject key identifier: 0B:F8:01:EB:82:6F:28:4C:71:37:F6:E3:AE:98:B4:9B:3D:B8:B3:CB
Authority key identifier: C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F
Certificate issuer: /CN=A912DB97/serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
Manifest number: BC
Signing time: Fri 27 Mar 2026 06:32:55 +0000
Manifest this update: Fri 27 Mar 2026 06:32:55 +0000
Manifest next update: Fri 03 Apr 2026 06:32:55 +0000
Files and hashes: 1: wfSjmGHK0883hCGN7aegXoUvIn8.crl (hash: LiRhIZ6EXyOpx2OqYLrBtFlkLll/0ZEdxYtJQutH+ww=)
2: 28F87D180A1611F0BC8FD10DC4F9AE02.roa (hash: m3TKEHo+4f4PhVTsk8vFCNaTsfWtmI9Nex70/u6yw60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl
rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 06:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DB97, serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F
Validity
Not Before: Mar 27 06:32:55 2026 GMT
Not After : Apr 3 06:32:55 2026 GMT
Subject: CN=69c62497-bca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:62:c8:c0:4d:53:c6:43:83:ce:0d:8c:f6:
fb:94:c0:67:e9:a5:96:88:82:35:c5:c2:b5:a8:a8:
24:9c:3a:b0:a7:d8:e1:7c:e7:28:2f:d6:f6:48:c3:
cc:b9:1b:d4:ea:b8:b2:bf:7f:f7:c3:0a:2c:1c:89:
74:50:28:3d:93:91:83:90:7b:46:1e:5d:16:36:a0:
fd:d6:64:7c:ef:a8:96:d0:3f:dc:5d:1f:d2:17:23:
d6:bb:be:07:00:0d:f7:6b:96:c3:2e:4c:ca:49:51:
8e:ae:56:63:60:14:38:a3:44:e5:4f:ce:76:ab:de:
bb:02:a7:29:9a:28:73:be:3d:bf:39:fa:51:b4:dd:
b6:e7:03:69:cc:9b:de:af:4f:a8:66:93:0e:c8:09:
69:42:91:3f:ec:c2:7c:b4:d1:35:99:39:18:6d:e1:
f7:a8:30:a8:bb:91:72:bf:ec:04:fa:db:c2:0c:5a:
4d:1a:b5:59:54:b3:33:d2:c8:e2:37:ed:0c:2b:a5:
10:bc:f5:08:bf:3a:1e:3d:10:27:94:44:1c:4a:41:
19:41:03:e6:15:f9:ae:ef:c6:e3:11:81:aa:54:b2:
ee:ff:e6:c3:b7:ad:ea:f1:04:1e:e0:ff:aa:ea:16:
bf:19:31:b3:06:34:60:c4:5e:cb:c2:78:ae:b1:b7:
cd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F8:01:EB:82:6F:28:4C:71:37:F6:E3:AE:98:B4:9B:3D:B8:B3:CB
X509v3 Authority Key Identifier:
keyid:C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:3d:a6:b5:b9:7b:02:d1:45:11:8d:d1:d0:95:ca:36:42:f0:
28:57:39:2a:51:4f:da:91:40:80:e9:a7:99:ec:47:ec:6d:58:
a5:e7:13:54:81:5a:5b:fa:95:7e:30:ac:ac:da:c8:2c:a0:75:
5e:2e:08:a4:0b:e3:58:70:5e:b5:95:d2:96:3d:a8:53:da:8f:
39:c2:0f:bb:01:b9:3c:84:88:cb:5f:5f:6b:45:ed:93:cb:24:
5d:5e:a6:4e:8b:66:70:53:4c:a8:4d:bb:9e:61:77:bd:78:df:
e4:2a:68:79:62:66:6f:87:41:96:c1:db:0a:6e:41:fc:89:f6:
bf:f9:39:5e:a0:6a:5b:11:cc:ba:3e:36:ce:6b:04:db:18:8d:
50:68:0a:27:5b:f9:20:4a:d5:c8:da:79:96:29:1b:ee:cd:3c:
8a:fd:2b:dc:07:e6:c0:fa:5b:e9:2c:16:bc:c4:6f:a7:3d:c1:
29:9f:a4:56:e3:39:59:cd:24:af:47:0a:8e:d8:ba:bb:12:1b:
10:a9:ac:db:bf:77:5d:91:b3:a4:0c:1d:d0:82:d1:23:01:ef:
98:92:52:05:c1:7c:be:a2:e3:a5:dd:d0:65:ab:34:2e:7a:a2:
47:cb:4e:f8:52:86:4b:ec:3f:36:63:53:71:94:ce:32:4b:94:
32:00:22:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkRCOTcxMTAvBgNVBAUTKEMxRjRBMzk4NjFDQUQzQ0YzNzg0MjE4REVEQTdBMDVF
ODUyRjIyN0YwHhcNMjYwMzI3MDYzMjU1WhcNMjYwNDAzMDYzMjU1WjAYMRYwFAYD
VQQDEw02OWM2MjQ5Ny1iY2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuDZiyMBNU8ZDg84NjPb7lMBn6aWWiII1xcK1qKgknDqwp9jhfOcoL9b2SMPM
uRvU6riyv3/3wwosHIl0UCg9k5GDkHtGHl0WNqD91mR876iW0D/cXR/SFyPWu74H
AA33a5bDLkzKSVGOrlZjYBQ4o0TlT852q967Aqcpmihzvj2/OfpRtN225wNpzJve
r0+oZpMOyAlpQpE/7MJ8tNE1mTkYbeH3qDCou5Fyv+wE+tvCDFpNGrVZVLMz0sji
N+0MK6UQvPUIvzoePRAnlEQcSkEZQQPmFfmu78bjEYGqVLLu/+bDt63q8QQe4P+q
6ha/GTGzBjRgxF7LwniusbfN2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAv4AeuC
byhMcTf2466YtJs9uLPLMB8GA1UdIwQYMBaAFMH0o5hhytPPN4Qhje2noF6FLyJ/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI5Ny81RDhCNTI2NDBB
MTQxMUYwQjQzREM1ODZDNEY5QUUwMi93ZlNqbUdISzA4ODNoQ0dON2FlZ1hvVXZJ
bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dmU2ptR0hLMDg4M2hDR043YWVnWG9VdkluOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
REI5Ny81RDhCNTI2NDBBMTQxMUYwQjQzREM1ODZDNEY5QUUwMi93ZlNqbUdISzA4
ODNoQ0dON2FlZ1hvVXZJbjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqj2mtbl7AtFFEY3R0JXKNkLwKFc5KlFP2pFAgOmnmexH7G1YpecTVIFaW/qV
fjCsrNrILKB1Xi4IpAvjWHBetZXSlj2oU9qPOcIPuwG5PISIy19fa0Xtk8skXV6m
TotmcFNMqE27nmF3vXjf5CpoeWJmb4dBlsHbCm5B/In2v/k5XqBqWxHMuj42zmsE
2xiNUGgKJ1v5IErVyNp5likb7s08iv0r3AfmwPpb6SwWvMRvpz3BKZ+kVuM5Wc0k
r0cKjti6uxIbEKms2793XZGzpAwd0ILRIwHvmJJSBcF8vqLjpd3QZas0LnqiR8tO
+FKGS+w/NmNTcZTOMkuUMgAi3w==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:34 2026 by rpki-client