
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
File: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft (raw, json)
Hash identifier: 6MERfJrSq25mjVJBCZ4KQFdki+tbzeat6WgBXEZHhHI=
Subject key identifier: EF:78:AE:3A:4E:FD:1B:A4:B5:FC:7C:BA:FD:5B:5A:86:E6:C7:7D:05
Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43
Certificate issuer: /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
Certificate serial: 01BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
Manifest number: 01B1
Signing time: Wed 25 Mar 2026 03:20:36 +0000
Manifest this update: Wed 25 Mar 2026 03:20:36 +0000
Manifest next update: Wed 01 Apr 2026 03:20:36 +0000
Files and hashes: 1: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl (hash: 0Tno5w6HuUdpCRHHzI1QOMv/OSi8YFafP5UAqJQRH7Y=)
2: D973D5BE97D711EEA1B09A33C4F9AE02.roa (hash: vK6UgwvhHzxe7wOhZkBOrNQ5FiwefRM4NQVFNi53pvw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl
rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443 (0x1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F437, serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
Validity
Not Before: Mar 25 03:20:36 2026 GMT
Not After : Apr 1 03:20:36 2026 GMT
Subject: CN=69c35484-688b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1e:5c:e0:e0:00:df:92:16:6a:db:a7:1f:d4:
6f:95:ec:32:0e:3a:a8:99:9b:15:69:ed:a9:46:d2:
18:5f:33:06:e3:17:5b:72:83:4a:60:ce:6f:84:70:
f7:f0:1f:c7:20:ee:4b:93:2b:c6:5f:fa:d2:4b:b1:
37:36:87:6a:e2:7b:7b:bd:f8:9b:6b:7a:cd:f7:4e:
76:0b:e2:09:62:f7:eb:74:d5:a3:6b:6c:d7:e3:11:
53:c0:de:61:c2:7a:80:93:c6:2a:7d:79:6e:fe:1d:
bc:26:4e:e0:c6:74:62:48:ca:82:ab:d0:a8:9b:06:
77:09:05:ec:d9:b6:0c:7e:6b:55:93:32:69:73:48:
c4:73:d7:ac:12:82:f4:90:cf:0f:b9:0a:27:7f:8f:
96:a7:7b:4d:49:51:62:68:5e:94:63:82:cb:a0:48:
98:f6:38:ed:54:9d:ae:04:ef:07:17:84:84:97:43:
d5:cb:ce:86:0b:86:4c:2d:78:b2:0d:05:b6:50:bb:
ab:77:84:b7:28:cf:4a:53:13:da:73:73:78:89:4a:
42:5a:25:f7:61:0f:7e:1b:45:2e:f9:ff:7d:2c:8c:
a4:10:ec:a9:45:27:2b:27:1f:64:d6:ca:7b:5b:c1:
b8:6d:23:60:c0:3f:10:03:89:55:b9:d4:ce:a2:0a:
2a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:78:AE:3A:4E:FD:1B:A4:B5:FC:7C:BA:FD:5B:5A:86:E6:C7:7D:05
X509v3 Authority Key Identifier:
keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:0e:7b:7b:ff:bd:3c:e1:81:b2:49:58:06:d7:27:fc:75:cb:
d9:52:5c:2d:d2:ad:42:4b:1b:23:af:d5:43:42:0c:ba:75:3d:
b4:73:a5:0f:a0:06:61:9d:3e:d9:24:90:de:cc:bb:ef:8a:e4:
16:4e:0e:e0:ec:17:33:96:80:f0:94:b4:07:6c:93:6d:e3:4a:
8f:29:95:27:06:9c:54:2c:22:03:59:02:a6:71:21:0a:5c:57:
c6:c9:ed:0f:f2:46:5d:85:a1:8f:73:4c:05:29:af:f1:2a:59:
ac:99:88:6e:c4:9b:14:10:0f:ac:e6:82:e2:d3:56:7f:23:73:
06:9b:48:45:dc:81:66:a6:e6:14:8c:a8:03:f4:ab:23:3e:a7:
88:88:15:98:03:ef:0b:b5:8b:23:92:14:08:d5:32:37:d3:ff:
4c:53:32:66:11:22:c2:3c:79:98:de:aa:c9:7a:6e:33:8d:8e:
2a:5e:34:4f:81:a9:8d:f5:e5:0f:4b:34:c5:3e:c4:05:f5:f1:
62:c6:34:17:5e:ea:45:30:2a:2b:b5:3e:aa:9c:83:0c:0b:f8:
fe:6e:d7:0e:89:3e:d0:c4:76:2e:05:6a:77:79:04:38:de:ff:
3a:77:ed:96:52:d2:20:3c:d9:cb:60:15:e3:62:c5:53:58:7a:
57:83:d8:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY0MzcxMTAvBgNVBAUTKEZCMDJFQ0Q2Qzc3ODlBMzk2QjUzQTQ4RkE5MjQzNjYw
RTI1MkMxNDMwHhcNMjYwMzI1MDMyMDM2WhcNMjYwNDAxMDMyMDM2WjAYMRYwFAYD
VQQDEw02OWMzNTQ4NC02ODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0h5c4OAA35IWatunH9RvlewyDjqomZsVae2pRtIYXzMG4xdbcoNKYM5vhHD3
8B/HIO5LkyvGX/rSS7E3Nodq4nt7vfiba3rN9052C+IJYvfrdNWja2zX4xFTwN5h
wnqAk8YqfXlu/h28Jk7gxnRiSMqCq9ComwZ3CQXs2bYMfmtVkzJpc0jEc9esEoL0
kM8PuQonf4+Wp3tNSVFiaF6UY4LLoEiY9jjtVJ2uBO8HF4SEl0PVy86GC4ZMLXiy
DQW2ULurd4S3KM9KUxPac3N4iUpCWiX3YQ9+G0Uu+f99LIykEOypRScrJx9k1sp7
W8G4bSNgwD8QA4lVudTOogoqSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO94rjpO
/Ruktfx8uv1bWobmx30FMB8GA1UdIwQYMBaAFPsC7NbHeJo5a1Okj6kkNmDiUsFD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQzNy84MUY2NjlEQzk3
RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1qbHJVNlNQcVNRMllPSlN3
VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy13THMxc2Q0bWpsclU2U1BxU1EyWU9KU3dVTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjQzNy84MUY2NjlEQzk3RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1q
bHJVNlNQcVNRMllPSlN3VU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASQ57e/+9POGBsklYBtcn/HXL2VJcLdKtQksbI6/VQ0IMunU9tHOlD6AGYZ0+
2SSQ3sy774rkFk4O4OwXM5aA8JS0B2yTbeNKjymVJwacVCwiA1kCpnEhClxXxsnt
D/JGXYWhj3NMBSmv8SpZrJmIbsSbFBAPrOaC4tNWfyNzBptIRdyBZqbmFIyoA/Sr
Iz6niIgVmAPvC7WLI5IUCNUyN9P/TFMyZhEiwjx5mN6qyXpuM42OKl40T4GpjfXl
D0s0xT7EBfXxYsY0F17qRTAqK7U+qpyDDAv4/m7XDok+0MR2LgVqd3kEON7/Onft
llLSIDzZy2AV42LFU1h6V4PYgQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:39:34 2026 by rpki-client