
$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
File: wN0sVYV6kv_nzcuilJmD1IpCudg.mft (raw, json)
Hash identifier: ZKhh2Z/w3a4GXrFKvkC1SyR4OVuuWK332F+UcLUSFYs=
Subject key identifier: BF:F5:91:B7:D1:3F:98:52:07:8D:32:1C:29:3E:89:5E:F8:1D:49:E7
Authority key identifier: C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8
Certificate issuer: /CN=A91326FF/serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8
Certificate serial: 0135
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
Manifest number: 012D
Signing time: Wed 25 Mar 2026 04:48:03 +0000
Manifest this update: Wed 25 Mar 2026 04:48:02 +0000
Manifest next update: Wed 01 Apr 2026 04:48:02 +0000
Files and hashes: 1: wN0sVYV6kv_nzcuilJmD1IpCudg.crl (hash: FunRea2bSMsQt5KJTcIlLsyVhYK1n0vPztRLiR/2a7M=)
2: 002622285F8F11EF9D02A046C4F9AE02.roa (hash: 8bGb+pMrm5fozKF07TQ3fY5ramo2lQU1ubKXT4CDsCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl
rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91326FF, serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8
Validity
Not Before: Mar 25 04:48:02 2026 GMT
Not After : Apr 1 04:48:02 2026 GMT
Subject: CN=69c36902-a229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6b:fe:71:33:13:92:c2:ea:d8:bc:f2:3b:06:
d9:8e:14:bd:60:74:c8:21:b4:94:32:b5:00:40:d3:
0f:4f:ab:45:d8:9f:dc:d1:b4:58:3b:67:ba:7e:64:
f3:f1:94:93:77:18:28:7e:b2:99:b5:f1:e3:8d:67:
ad:c9:ea:81:71:55:e0:a7:1b:e8:3f:80:8b:c3:44:
e2:62:f7:fe:ce:49:01:5a:8f:b1:ad:05:71:cf:82:
d9:d7:a4:39:f0:15:e2:23:77:53:e0:6c:bc:06:b9:
3a:86:40:4c:7b:43:23:ec:7b:60:e9:a8:cd:b7:fe:
e3:3f:3f:48:da:62:2a:8d:44:18:68:54:fc:74:da:
10:5d:78:1f:74:06:44:7a:03:fb:1e:1a:b0:5f:17:
6b:54:17:2d:74:76:d6:86:47:7e:e7:f2:cd:11:7c:
49:40:ff:a3:4b:db:86:cb:e6:b6:2c:30:50:03:9e:
74:2d:09:67:bd:ef:ec:dc:fa:6b:1b:59:fa:6f:e4:
3d:ea:64:51:0f:1b:97:9b:4c:eb:fe:a5:3b:29:69:
8d:e4:24:10:9e:d3:2d:13:82:4a:47:6b:17:dd:09:
70:6f:89:b6:9c:24:0a:f2:d6:35:fd:f5:3a:e5:01:
59:70:1d:b0:9b:2c:dd:98:fb:e6:a0:88:26:e5:56:
ec:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F5:91:B7:D1:3F:98:52:07:8D:32:1C:29:3E:89:5E:F8:1D:49:E7
X509v3 Authority Key Identifier:
keyid:C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:03:e1:06:6a:16:d9:97:85:74:b6:c8:90:cb:ae:14:c9:f2:
b1:7a:b0:b3:c6:53:08:2e:61:6b:78:b8:e5:a8:e9:4f:54:72:
37:e2:58:34:d8:7f:3b:18:8c:96:78:16:73:cb:60:cb:3d:a0:
99:37:80:fa:55:65:bd:72:7c:1d:77:51:72:53:08:00:bb:45:
e8:1c:56:fc:8a:d3:c7:17:ad:43:44:bd:ee:47:32:83:cb:0f:
40:4d:a1:7c:ca:5e:0f:ba:dc:50:65:0a:fa:ff:8a:5a:56:bd:
42:05:aa:af:07:1b:17:ac:7a:62:07:53:db:25:ed:fd:62:54:
b8:39:ac:bd:b6:3b:2a:aa:34:dd:a8:79:78:1c:a7:3f:b2:a1:
0b:f0:38:45:35:a0:08:8d:87:ed:8a:80:15:20:31:ec:64:4c:
43:70:c0:aa:18:14:93:69:6e:9e:18:2d:1d:ae:bb:73:f3:d0:
60:7f:5f:68:4e:fb:a5:40:c1:cc:91:8c:f1:bc:3a:61:cc:ba:
49:aa:e0:f0:9b:a9:6b:21:30:88:12:59:7e:bb:a3:cd:90:fa:
4d:36:e9:ef:e3:34:a5:51:62:1a:e4:4b:41:4b:10:3f:a0:5f:
84:b9:5c:39:63:4b:3f:9b:0d:98:8e:f6:c8:16:cd:8f:15:e5:
92:33:5a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:08:59 2026 by rpki-client