
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
File: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft (raw, json)
Hash identifier: b4uW+sfLu+4O9GP6xyCztoPPidWWU7z7fN8yU2ea3ms=
Subject key identifier: 6C:59:0B:30:E4:66:3F:9C:D1:E6:E2:5E:AA:2A:0D:10:95:66:6B:F3
Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43
Certificate issuer: /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
Certificate serial: 01D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
Manifest number: 01CA
Signing time: Wed 13 May 2026 03:50:43 +0000
Manifest this update: Wed 13 May 2026 03:50:42 +0000
Manifest next update: Wed 20 May 2026 03:50:42 +0000
Files and hashes: 1: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl (hash: gWJSaduBO4nQ45BBSHBIG3beQrCOXjJeDOhu4YGDS7I=)
2: D973D5BE97D711EEA1B09A33C4F9AE02.roa (hash: vK6UgwvhHzxe7wOhZkBOrNQ5FiwefRM4NQVFNi53pvw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl
rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F437, serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
Validity
Not Before: May 13 03:50:42 2026 GMT
Not After : May 20 03:50:42 2026 GMT
Subject: CN=6a03f513-24ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:95:95:54:2f:14:29:57:9c:17:d4:42:04:d0:
8f:58:3e:b0:ef:3d:57:ec:d8:7b:2b:b2:01:86:ce:
3d:97:1e:00:df:de:a0:e9:39:04:85:d7:f6:e2:52:
96:10:43:fa:da:75:6f:9f:1e:d9:5b:f1:a8:e1:5f:
ef:b5:e5:c7:17:b6:5e:77:af:49:3a:bb:d4:fb:ff:
31:5b:71:df:04:53:6f:b8:a2:5c:9e:af:b2:9b:25:
45:25:46:74:cd:24:ad:61:3c:af:f7:f9:8c:1d:c5:
e1:59:56:e2:db:05:f3:28:c3:f6:35:08:c7:c1:d1:
af:f1:17:96:30:d1:23:11:b1:80:7b:53:14:e7:73:
92:89:6d:b2:d9:a3:fd:63:32:b6:a3:90:2e:29:fc:
64:57:d5:1b:d0:5c:ae:9d:bf:62:3b:f4:f3:f1:ad:
04:f2:9d:c3:92:91:54:08:ea:19:4c:34:f6:14:93:
6b:61:ad:70:7b:2a:3f:37:93:f6:c4:bc:cb:10:29:
5f:f6:3b:8e:eb:40:0f:91:da:3f:fa:4d:d9:10:7e:
73:b2:f9:20:21:7a:d2:c1:e9:73:09:68:ea:72:c0:
a7:cf:3f:26:f3:17:ac:f5:d3:d9:0a:43:ae:05:6b:
6b:2e:a8:d1:c1:e8:68:52:0e:c5:a7:84:32:51:a5:
32:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:59:0B:30:E4:66:3F:9C:D1:E6:E2:5E:AA:2A:0D:10:95:66:6B:F3
X509v3 Authority Key Identifier:
keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:a6:35:0d:0c:12:dd:56:b0:fe:d8:df:6a:6f:71:98:ac:de:
bb:61:a1:f1:e3:93:b2:38:bf:31:20:06:b4:d2:3b:d8:27:c5:
5f:46:13:c8:e8:f7:9d:c9:35:22:cc:d0:79:a7:7f:f2:20:55:
05:25:58:f0:b8:ab:70:0a:f0:b7:1e:3d:28:d2:9e:00:18:d7:
c0:85:5b:cf:52:ba:ec:2e:2c:75:09:ba:85:df:32:99:9b:bb:
99:b7:f7:64:dc:29:8c:d8:6b:7e:a7:0a:e2:34:40:43:d4:18:
26:af:1d:f1:a0:ac:d2:7f:4e:5f:49:99:46:13:c2:7e:71:7d:
94:35:22:ff:5a:2d:71:d0:56:a9:92:3b:b7:fe:5b:32:7b:cb:
b1:08:f7:07:73:ea:01:f0:9e:0a:d5:a6:91:4c:71:94:fb:d6:
b5:59:77:f1:e5:b1:10:16:61:2b:fd:af:5f:0a:60:8f:9e:51:
20:04:3a:78:40:1a:42:59:ed:a5:18:d3:c3:d4:a2:e5:f4:29:
d3:eb:5b:4b:05:45:7b:45:cb:65:e6:ac:92:79:9b:45:27:4d:
5e:80:20:5c:30:83:ae:cd:d0:ec:d6:c6:12:ad:6b:e7:d5:11:
91:54:f8:e0:59:7f:1e:e4:09:33:62:ec:95:36:da:1d:58:d3:
e3:60:e2:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY0MzcxMTAvBgNVBAUTKEZCMDJFQ0Q2Qzc3ODlBMzk2QjUzQTQ4RkE5MjQzNjYw
RTI1MkMxNDMwHhcNMjYwNTEzMDM1MDQyWhcNMjYwNTIwMDM1MDQyWjAYMRYwFAYD
VQQDEw02YTAzZjUxMy0yNGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAopWVVC8UKVecF9RCBNCPWD6w7z1X7Nh7K7IBhs49lx4A396g6TkEhdf24lKW
EEP62nVvnx7ZW/Go4V/vteXHF7Zed69JOrvU+/8xW3HfBFNvuKJcnq+ymyVFJUZ0
zSStYTyv9/mMHcXhWVbi2wXzKMP2NQjHwdGv8ReWMNEjEbGAe1MU53OSiW2y2aP9
YzK2o5AuKfxkV9Ub0Fyunb9iO/Tz8a0E8p3DkpFUCOoZTDT2FJNrYa1weyo/N5P2
xLzLEClf9juO60APkdo/+k3ZEH5zsvkgIXrSwelzCWjqcsCnzz8m8xes9dPZCkOu
BWtrLqjRwehoUg7Fp4QyUaUyEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGxZCzDk
Zj+c0ebiXqoqDRCVZmvzMB8GA1UdIwQYMBaAFPsC7NbHeJo5a1Okj6kkNmDiUsFD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQzNy84MUY2NjlEQzk3
RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1qbHJVNlNQcVNRMllPSlN3
VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy13THMxc2Q0bWpsclU2U1BxU1EyWU9KU3dVTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjQzNy84MUY2NjlEQzk3RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1q
bHJVNlNQcVNRMllPSlN3VU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmKY1DQwS3Vaw/tjfam9xmKzeu2Gh8eOTsji/MSAGtNI72CfFX0YTyOj3nck1
IszQead/8iBVBSVY8LircArwtx49KNKeABjXwIVbz1K67C4sdQm6hd8ymZu7mbf3
ZNwpjNhrfqcK4jRAQ9QYJq8d8aCs0n9OX0mZRhPCfnF9lDUi/1otcdBWqZI7t/5b
MnvLsQj3B3PqAfCeCtWmkUxxlPvWtVl38eWxEBZhK/2vXwpgj55RIAQ6eEAaQlnt
pRjTw9Si5fQp0+tbSwVFe0XLZeasknmbRSdNXoAgXDCDrs3Q7NbGEq1r59URkVT4
4Fl/HuQJM2LslTbaHVjT42Di5Q==
-----END CERTIFICATE-----
Generated at Wed May 13 17:57:34 2026 by rpki-client