
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
File: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json)
Hash identifier: dyXwXVniZJs2EwKMEPOidiHL/qP7hkwUId6ca6aF1tM=
Subject key identifier: BC:B1:86:D6:58:B1:98:0B:80:9D:D6:79:8D:A9:98:CA:5A:87:78:51
Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2
Certificate issuer: /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
Certificate serial: 0503
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
Manifest number: 04FE
Signing time: Tue 12 May 2026 23:46:21 +0000
Manifest this update: Tue 12 May 2026 23:46:20 +0000
Manifest next update: Tue 19 May 2026 23:46:20 +0000
Files and hashes: 1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: Y4WG78n2o6GHvQArbFQ+LXwKaYcBu0gglWbCuEPhOaI=)
2: 94FA2A66174B11EF84A2715AC4F9AE02.roa (hash: 2bvU2l27JfiDPTUt5UdrWGWC12SuTqfGvD8E40bRY/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl
rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1283 (0x503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147016, serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
Validity
Not Before: May 12 23:46:20 2026 GMT
Not After : May 19 23:46:20 2026 GMT
Subject: CN=6a03bbcc-7b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:05:98:27:c9:62:f9:05:f1:d2:32:51:8f:4b:
4c:ac:1b:56:da:e8:58:07:c4:c0:9f:a5:ed:59:4e:
0c:69:57:93:d8:4f:c5:e2:14:7e:50:33:9a:72:fb:
79:7d:e7:4e:c3:26:dc:1d:cc:2a:d7:7f:a9:36:7c:
d0:f5:d8:2c:83:c7:8f:57:70:97:2a:c1:68:ab:b7:
22:fe:ae:d7:95:3f:6e:3a:43:a4:8c:4c:ce:dd:93:
0e:88:a8:86:a3:b4:0a:dc:43:c5:30:53:2a:3d:d9:
9b:3a:5b:d0:92:ed:e7:09:7d:30:be:29:29:ed:6c:
ad:b5:88:74:fb:5b:18:ab:d2:f3:e2:92:c3:17:50:
c9:d4:1d:19:64:07:17:51:85:3b:66:44:c6:d5:57:
31:c0:7e:d4:51:5c:1c:68:27:ad:46:09:c6:b8:67:
44:93:91:eb:00:6c:5e:7a:5d:c3:1e:ca:4c:65:13:
68:ed:2d:ba:52:6e:e6:3c:0a:04:32:28:5b:cf:f8:
28:8e:60:2e:92:a5:dc:a3:84:f3:91:7a:62:0d:1e:
73:64:ee:6a:49:36:00:1d:d7:74:94:03:de:b1:40:
a0:19:cc:e8:2d:fd:09:21:71:54:ec:70:01:7d:e0:
18:6f:de:af:c3:bc:0c:2d:8a:80:64:3d:be:a2:9d:
a7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B1:86:D6:58:B1:98:0B:80:9D:D6:79:8D:A9:98:CA:5A:87:78:51
X509v3 Authority Key Identifier:
keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:b3:c8:fe:40:c9:20:f4:46:21:c0:ce:f7:27:d5:ec:9e:19:
ea:9f:09:85:46:9a:87:05:1c:41:f3:40:b4:66:4c:99:a2:d8:
14:eb:3b:c6:6d:1c:61:13:c8:34:06:f3:e6:bb:b4:5a:35:e5:
8c:82:bd:d6:db:60:c7:8d:1e:03:68:87:ab:69:f6:49:04:bf:
91:03:98:49:8d:9f:3d:e9:69:b6:ab:30:ce:66:d7:41:86:9d:
9b:7b:9f:56:a4:61:f0:05:40:9f:b5:7f:e5:2b:b2:4f:34:4b:
6a:cb:4a:45:25:04:8f:46:50:86:d0:3a:b8:9d:56:18:dc:2f:
78:d6:ed:ef:d4:96:e2:2a:03:24:5e:4d:fd:81:8f:27:b3:72:
00:c0:e9:64:d9:84:e1:d2:54:3b:45:31:67:05:44:ef:3e:60:
59:10:44:dd:2f:2d:f2:10:91:9b:86:ae:65:d9:d1:85:19:6c:
1a:08:5c:95:a5:e1:a3:f5:f8:a0:fd:82:b5:33:6e:32:9c:11:
42:89:52:cf:00:4a:49:04:2a:ef:c0:f5:db:9d:28:4a:17:49:
09:fc:20:57:6d:f6:00:20:9f:ca:49:0f:8c:aa:40:99:bc:22:
0d:25:92:54:bc:48:aa:81:92:6b:05:a4:dc:09:4d:ed:9d:d2:
c1:35:78:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:42:59 2026 by rpki-client