
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
File: WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft (raw, json)
Hash identifier: t2DjpmCUu0g5kzVs34BrKmGQXiAfJV6L2gyE8pHFjP0=
Subject key identifier: 82:A6:B9:4A:2F:4F:D8:F4:D8:51:B6:37:6F:57:3A:F5:54:E1:4D:F3
Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04
Certificate issuer: /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804
Certificate serial: 0617
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
Manifest number: 060F
Signing time: Tue 12 May 2026 22:56:28 +0000
Manifest this update: Tue 12 May 2026 22:56:27 +0000
Manifest next update: Tue 19 May 2026 22:56:27 +0000
Files and hashes: 1: WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl (hash: Ww7I1fGvFhqN74uN4ivqdiVV3VvHJsTnl4aL97rV2aY=)
2: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (hash: QnCIfaBwZolfnjhgtwAliuHrR1tHCV7ZzJ1Dz2+uA9o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl
rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1559 (0x617)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137843, serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804
Validity
Not Before: May 12 22:56:27 2026 GMT
Not After : May 19 22:56:27 2026 GMT
Subject: CN=6a03b01c-e49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:07:4d:69:6c:57:8b:8b:16:ed:40:78:c8:41:
13:f8:f6:af:bf:2e:83:9b:94:01:4a:dc:1e:89:2d:
04:20:3e:64:bf:b8:73:55:40:0a:15:c5:ad:47:f3:
2b:d3:1a:15:28:7b:fc:72:b4:05:c3:03:ba:85:27:
36:60:2d:64:b5:d2:de:71:44:9d:4a:be:98:4c:ed:
a8:ae:a7:6c:21:d8:b0:25:63:ba:9f:a2:ba:54:d3:
3f:07:94:53:18:91:3d:a2:1c:28:d5:7e:a2:70:63:
a9:c4:72:18:75:44:a5:d7:d4:5c:dc:1f:8a:d9:fc:
95:c1:35:e9:4a:97:a6:56:d3:7c:4f:60:8d:bc:c0:
01:6c:3a:77:d7:68:14:e6:5d:e8:f3:96:5e:61:96:
42:a3:0d:37:79:69:2f:de:1e:9f:14:08:e3:a5:3a:
59:75:92:db:af:ef:5a:42:6c:3c:06:18:dd:68:3e:
b5:e0:80:fe:88:9f:39:72:83:58:90:ad:50:35:b1:
76:61:3e:87:a5:49:a0:d9:8e:bc:9e:7f:5c:94:ce:
3c:64:2f:c2:d9:1b:55:b7:ec:ca:25:9c:6d:3e:50:
c4:3d:a7:79:6a:5a:cf:ae:3d:5b:a5:d4:ac:49:f0:
cf:7b:7b:fc:df:12:36:1e:06:f1:cd:dd:11:c1:17:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A6:B9:4A:2F:4F:D8:F4:D8:51:B6:37:6F:57:3A:F5:54:E1:4D:F3
X509v3 Authority Key Identifier:
keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:46:50:c1:1c:1b:8c:47:08:b2:7f:f9:6a:db:5b:61:68:b7:
5c:51:01:de:d9:63:71:ed:9b:74:55:f3:c5:69:6d:6a:84:dd:
85:e3:eb:43:ee:a3:78:d3:1b:dd:ba:db:28:09:01:86:c2:48:
ba:5b:70:7c:e6:11:19:a7:cc:56:18:16:63:42:18:eb:2e:08:
fa:49:a7:51:06:d5:43:8d:35:70:c1:25:bb:a7:91:eb:f2:b2:
56:17:6b:e9:3f:d1:e6:4c:07:d1:d1:7e:23:12:51:ac:b6:10:
7e:4f:b9:58:d6:9f:fe:bb:12:c5:63:d6:ba:57:66:93:7d:bb:
26:58:8b:58:93:39:51:94:5e:e2:8d:de:2f:66:87:7c:d7:b7:
96:c0:38:07:e4:b5:0e:b6:30:f7:f2:a5:c0:f9:d8:68:e1:f9:
a4:fe:2c:7d:2c:97:86:ed:ec:f8:34:cb:4c:e4:d8:81:9f:b6:
05:1a:3b:31:36:5b:9b:39:67:24:7c:30:2a:3b:ba:dc:d7:10:
76:37:e2:c4:a3:b9:89:44:70:0f:de:b1:15:82:4c:1b:93:3b:
b5:e1:b0:b2:71:80:3d:90:49:d8:4f:11:be:98:5c:e5:c0:8d:
12:5b:b2:13:88:1f:3f:ad:a7:31:d2:65:0f:78:96:26:59:4f:
35:c0:a4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:31:41 2026 by rpki-client