
$ rpki-client -vvf rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
File: 0wlAzG8MECS4QLu309gBJjYGylk.mft (raw, json)
Hash identifier: aKfrSztMAQcY8CbNCv8cHNMGIC65gXchFGxAEWVUKRo=
Subject key identifier: C9:EC:74:25:BC:C4:ED:C4:BD:3B:A5:2B:FD:DD:4B:CD:DE:62:0C:7D
Authority key identifier: D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59
Certificate issuer: /CN=A91412BC/serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
Manifest number: A8
Signing time: Wed 25 Mar 2026 06:24:16 +0000
Manifest this update: Wed 25 Mar 2026 06:24:15 +0000
Manifest next update: Wed 01 Apr 2026 06:24:15 +0000
Files and hashes: 1: 0wlAzG8MECS4QLu309gBJjYGylk.crl (hash: Ot2GOb7c358bnmSL9AjBa/a2gZEUsZDF4Mc5zregf78=)
2: 936B147E248A11F0AD4B1179C4F9AE02.roa (hash: KKNZk8TKKutrrsf25zmuk68cl+IkZVqZN/02Jy9kkJk=)
3: 92F3063C248A11F0AD4B1179C4F9AE02.roa (hash: gg3dy1VemygngsJpaRmfWK/QMAHg/KD+YdVdOG6ayvU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl
rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91412BC, serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
Validity
Not Before: Mar 25 06:24:15 2026 GMT
Not After : Apr 1 06:24:15 2026 GMT
Subject: CN=69c37f90-a13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:cf:3a:56:a0:ec:b8:11:76:c6:e0:20:0f:
dd:29:0a:d9:ba:f7:43:8f:3a:56:78:7b:3c:b9:04:
ca:24:69:13:e8:f8:69:c2:be:d9:57:40:b6:a8:8d:
48:7e:3c:3f:c0:1a:e3:eb:26:61:f6:cc:1e:12:0c:
65:2d:4c:83:62:be:da:77:20:cd:dc:d0:4c:bb:dc:
f0:ec:7f:cc:40:cb:20:48:bf:c8:02:90:70:0f:15:
00:7c:38:83:7e:b4:35:35:f6:37:22:64:74:6e:41:
37:02:ba:1b:aa:f6:c2:ab:7d:75:0d:58:a4:cd:d7:
1c:2c:8c:f5:15:15:43:e0:30:dc:01:9d:d4:8f:7d:
fa:96:7f:24:b3:77:9d:72:2d:c0:32:1d:58:2e:2b:
1e:c0:7e:2e:f5:57:b0:3b:ec:11:ea:3a:24:29:1b:
73:23:2d:d7:00:5d:6f:22:7e:27:95:9f:c6:f9:b1:
32:0c:7f:ca:2d:5a:68:24:0f:93:83:af:8d:a6:61:
9c:d4:06:f7:cd:95:52:fc:24:e5:e6:78:f3:86:13:
d5:e0:c1:43:90:a6:86:a9:21:3d:85:3b:a3:5f:56:
5f:4f:fd:bc:0f:1e:5c:aa:6f:05:eb:87:72:50:97:
20:12:48:2c:f0:ad:b1:04:4a:87:3b:f4:90:f8:8d:
e3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EC:74:25:BC:C4:ED:C4:BD:3B:A5:2B:FD:DD:4B:CD:DE:62:0C:7D
X509v3 Authority Key Identifier:
keyid:D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:5a:e9:9e:c0:da:87:ad:46:cc:aa:57:5d:41:8b:81:98:d5:
b8:ee:cc:88:ce:46:e8:29:51:d1:69:5c:24:36:51:fd:2b:c3:
e7:ff:c8:69:bd:af:3d:d1:4a:5e:8a:8d:8d:fc:b1:6f:2c:79:
77:7f:7c:23:fa:3d:2e:c3:a5:34:ab:28:d1:68:37:0b:1b:a0:
c4:33:d2:fa:b5:36:49:65:d2:85:95:e2:56:98:af:86:71:19:
95:95:64:17:82:f2:8d:93:69:71:29:43:5a:60:d5:27:8d:e7:
8c:47:21:83:68:3b:a8:bf:ba:17:1d:38:d4:7a:30:f9:e4:9b:
85:94:49:20:47:28:76:1a:6a:7c:0f:c4:7a:ed:76:f4:53:02:
7a:ac:03:5b:c3:23:3f:bc:51:9e:5d:f4:fa:53:8f:17:7c:fb:
dc:02:a7:da:2e:55:4d:59:34:aa:aa:37:c6:5a:b2:05:a1:13:
a9:7d:03:c9:b2:4d:ed:26:25:a4:3f:87:e6:a5:3c:7f:b2:50:
7f:37:d5:de:c8:83:c0:d1:13:eb:46:8e:e7:98:5f:1b:e2:f3:
8c:42:73:30:34:df:4c:c9:23:3e:21:c9:12:7e:15:ea:30:ab:
dc:dd:56:6c:5e:d8:61:d9:3b:e5:2f:3b:15:0c:f4:31:89:22:
20:d0:97:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDEyQkMxMTAvBgNVBAUTKEQzMDk0MENDNkYwQzEwMjRCODQwQkJCN0QzRDgwMTI2
MzYwNkNBNTkwHhcNMjYwMzI1MDYyNDE1WhcNMjYwNDAxMDYyNDE1WjAYMRYwFAYD
VQQDEw02OWMzN2Y5MC1hMTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs6jPOlag7LgRdsbgIA/dKQrZuvdDjzpWeHs8uQTKJGkT6Phpwr7ZV0C2qI1I
fjw/wBrj6yZh9sweEgxlLUyDYr7adyDN3NBMu9zw7H/MQMsgSL/IApBwDxUAfDiD
frQ1NfY3ImR0bkE3ArobqvbCq311DVikzdccLIz1FRVD4DDcAZ3Uj336ln8ks3ed
ci3AMh1YLisewH4u9VewO+wR6jokKRtzIy3XAF1vIn4nlZ/G+bEyDH/KLVpoJA+T
g6+NpmGc1Ab3zZVS/CTl5njzhhPV4MFDkKaGqSE9hTujX1ZfT/28Dx5cqm8F64dy
UJcgEkgs8K2xBEqHO/SQ+I3jfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMnsdCW8
xO3EvTulK/3dS83eYgx9MB8GA1UdIwQYMBaAFNMJQMxvDBAkuEC7t9PYASY2BspZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTJCQy8yMUE5NTMxNDI0
OEExMUYwOTk4NkQwNzdDNEY5QUUwMi8wd2xBekc4TUVDUzRRTHUzMDlnQkpqWUd5
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzB3bEF6RzhNRUNTNFFMdTMwOWdCSmpZR3lsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTJCQy8yMUE5NTMxNDI0OEExMUYwOTk4NkQwNzdDNEY5QUUwMi8wd2xBekc4TUVD
UzRRTHUzMDlnQkpqWUd5bGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEFrpnsDah61GzKpXXUGLgZjVuO7MiM5G6ClR0WlcJDZR/SvD5//Iab2vPdFK
XoqNjfyxbyx5d398I/o9LsOlNKso0Wg3CxugxDPS+rU2SWXShZXiVpivhnEZlZVk
F4LyjZNpcSlDWmDVJ43njEchg2g7qL+6Fx041How+eSbhZRJIEcodhpqfA/Eeu12
9FMCeqwDW8MjP7xRnl30+lOPF3z73AKn2i5VTVk0qqo3xlqyBaETqX0DybJN7SYl
pD+H5qU8f7JQfzfV3siDwNET60aO55hfG+LzjEJzMDTfTMkjPiHJEn4V6jCr3N1W
bF7YYdk75S87FQz0MYkiINCXXw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:50:01 2026 by rpki-client