
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
File: fWozDw0BJJQnx_yd3dz0qCh2CwY.mft (raw, json)
Hash identifier: JwU8vARgojn5t89QJyzwZjUDAWpw2jXHzC1/K1lehr8=
Subject key identifier: 76:ED:73:46:2E:59:16:E7:6D:3C:69:0C:18:1C:A0:BB:32:87:26:B5
Authority key identifier: 7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06
Certificate issuer: /CN=A9145519/serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06
Certificate serial: 1CEC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
Manifest number: 1CD8
Signing time: Tue 24 Mar 2026 16:04:49 +0000
Manifest this update: Tue 24 Mar 2026 16:04:49 +0000
Manifest next update: Tue 31 Mar 2026 16:04:49 +0000
Files and hashes: 1: fWozDw0BJJQnx_yd3dz0qCh2CwY.crl (hash: 6uMoY4VaPYYHOT5pPvIK7XjhDRHlLzg63ZNtbN6h0uo=)
2: 78D1DAC8E45E11E681F82341C4F9AE02.roa (hash: 1+3PiyURCQ1dCtokVNGr5D8JpB6WOiYHI8MxHAWll5Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl
rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7404 (0x1cec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145519, serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06
Validity
Not Before: Mar 24 16:04:49 2026 GMT
Not After : Mar 31 16:04:49 2026 GMT
Subject: CN=69c2b621-605d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:53:76:47:f8:a0:11:92:fd:54:00:ce:58:
9d:94:56:fa:2e:34:50:73:c2:f0:66:7b:65:e2:4d:
39:aa:c3:eb:cf:3e:c0:66:b4:29:60:9e:87:2e:d9:
07:c5:f3:d3:13:b7:76:21:52:81:6e:12:c6:a9:45:
e1:41:8e:32:03:c0:8f:f8:6c:0a:00:9c:88:a6:74:
82:4b:0d:bb:17:3c:01:91:dd:7e:d1:6e:2c:e1:91:
f0:9c:bb:25:e3:ab:29:76:9c:e0:34:50:b5:d5:02:
b5:96:ea:7d:e2:8c:b4:9a:dd:c4:37:30:1b:e9:56:
f6:a5:24:fc:d8:04:aa:0d:61:1d:15:ed:54:48:cc:
51:87:8c:af:84:eb:4e:f6:f5:5e:82:2b:b6:f8:66:
3c:51:e4:30:cd:db:cd:ea:75:7a:9e:0b:2c:b8:7d:
39:30:05:89:b5:6c:f1:27:c4:a7:90:b6:2e:e5:fb:
4e:67:18:bb:67:bf:65:50:00:9b:e2:89:1c:30:e9:
24:a0:91:e1:cd:78:1d:20:58:cf:ed:9e:24:c7:c3:
16:4c:be:ab:40:fa:44:3d:ef:c6:15:65:94:8b:c7:
38:89:d0:69:91:6b:88:ef:7d:2c:ac:29:8e:d1:4e:
ff:e1:b9:cf:d0:6c:35:28:a3:bc:19:3b:61:f2:8d:
11:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:ED:73:46:2E:59:16:E7:6D:3C:69:0C:18:1C:A0:BB:32:87:26:B5
X509v3 Authority Key Identifier:
keyid:7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:2a:a9:1a:0a:88:ad:7e:db:2f:4c:f5:3c:cd:4e:ba:3a:9b:
84:5e:93:7f:37:2a:95:7e:36:9c:d1:75:5e:26:a6:26:76:93:
d5:34:c7:e3:77:77:40:e6:ce:41:27:40:64:a1:c6:1f:e7:e6:
e6:93:3d:39:9a:fb:8a:89:21:2d:e7:a3:57:11:ee:5f:0b:07:
12:d0:97:e5:63:5c:d5:7c:97:1d:1e:98:5a:2d:4b:1f:37:0b:
da:4a:59:5d:40:db:31:d2:8f:29:62:4d:f7:e3:64:41:20:0b:
98:39:73:30:0a:4f:c7:d7:2e:f7:97:3f:51:bd:2d:77:05:a9:
1a:27:a7:8f:a2:2f:b8:44:49:72:86:da:b2:16:7c:56:f2:81:
54:6a:7f:db:43:cb:e9:18:72:f8:cf:4b:81:0c:bd:61:81:2c:
4c:3e:43:3e:27:d6:9c:45:2b:c3:ba:37:14:c1:cb:51:e1:21:
0a:31:cf:ce:b6:7b:ab:c8:4f:54:64:c9:52:f1:0c:8b:ba:67:
36:ad:9c:cd:9f:5c:9a:cc:a8:be:75:21:10:2f:13:74:df:ec:
f2:bf:1c:66:b2:09:c3:5c:68:e6:34:4c:77:d5:3b:fb:65:73:
49:4b:5d:98:bc:16:44:c1:6a:c8:8d:2a:59:5a:e5:1c:d5:c3:
8a:87:a4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:37 2026 by rpki-client