
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
File: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json)
Hash identifier: N4TGUjJl+soBgqi7vv0NVrX6k2rKaR7H/9HOo0RngB8=
Subject key identifier: B9:46:C1:57:C7:BD:85:CA:B0:69:E0:C7:05:41:11:AC:06:68:5F:B9
Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2
Certificate issuer: /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
Certificate serial: 04EA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
Manifest number: 04E5
Signing time: Tue 24 Mar 2026 23:25:39 +0000
Manifest this update: Tue 24 Mar 2026 23:25:38 +0000
Manifest next update: Tue 31 Mar 2026 23:25:38 +0000
Files and hashes: 1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: Bl1FmPnP0Xb8CQPr/VdbEjF45CSwM5xqZOt6wS15PrU=)
2: 94FA2A66174B11EF84A2715AC4F9AE02.roa (hash: 2bvU2l27JfiDPTUt5UdrWGWC12SuTqfGvD8E40bRY/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl
rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1258 (0x4ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147016, serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
Validity
Not Before: Mar 24 23:25:38 2026 GMT
Not After : Mar 31 23:25:38 2026 GMT
Subject: CN=69c31d73-d35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:cd:38:81:d3:97:f2:c3:b4:c8:b6:d1:ef:
99:5c:70:f3:c6:a8:11:9c:f2:a2:15:89:f6:e2:90:
eb:91:ad:61:1c:83:48:52:23:e5:7c:9b:d4:c4:0e:
96:e4:4a:12:11:65:3c:d1:c0:83:cd:7a:4a:ab:f5:
c2:6f:89:84:75:3e:d8:7e:d1:b6:32:ff:23:c5:6a:
81:79:59:83:9d:9f:d6:18:b7:8e:b7:6a:92:47:0c:
35:61:28:9a:98:fd:81:b3:56:e1:50:96:92:cb:0d:
0d:f4:81:1f:c5:d8:36:10:ba:96:3f:ad:b4:e5:3b:
c1:b2:8f:b5:d0:eb:61:f9:b0:54:f7:81:d1:38:c1:
96:17:bb:1c:8b:91:35:20:52:e3:34:50:72:68:d5:
ca:ce:5d:b1:17:a0:9d:c2:9b:a7:da:34:17:7b:c2:
05:45:bc:d0:23:b8:90:98:19:e5:4d:39:ce:2d:bb:
60:07:92:9c:fc:c7:79:ca:85:48:ce:95:6b:da:1c:
c4:12:fb:f3:11:a1:cb:56:ef:7f:6a:5e:c2:40:36:
9c:14:84:2d:d3:e4:c6:30:2f:a7:9e:1a:87:22:8f:
31:83:5f:14:4a:cd:4d:8a:5c:82:b2:93:de:0d:01:
34:3f:d4:3e:aa:29:f9:00:bf:15:56:22:9e:f1:c6:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:46:C1:57:C7:BD:85:CA:B0:69:E0:C7:05:41:11:AC:06:68:5F:B9
X509v3 Authority Key Identifier:
keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d3:5d:f8:e8:37:dd:e5:d9:c4:42:05:84:5e:a0:c5:c9:83:
3c:68:fa:42:80:72:dd:8b:30:38:d4:41:00:48:f0:55:47:eb:
59:54:1e:59:07:45:73:fa:f3:8b:69:47:78:81:43:48:ad:44:
f8:00:c2:58:d8:6b:cc:17:35:50:c6:04:e8:10:02:bb:fc:b9:
21:00:b2:86:ab:b4:72:7d:bf:ed:f9:4d:33:1d:f9:42:1b:3b:
f4:ab:8d:eb:f7:88:ac:f9:1d:ec:90:b5:6f:88:98:c7:b1:5b:
b5:e8:75:3c:d8:f6:86:b0:0b:3a:58:78:39:11:cc:54:7b:f9:
28:d5:04:4b:92:ea:f9:e1:b6:ee:76:f0:42:42:94:0f:8d:e0:
d5:ed:d4:55:44:8d:12:34:9a:c1:c0:3e:5d:07:0a:b1:81:ed:
03:5f:e1:c8:08:a1:ce:1f:64:f0:07:12:f9:34:07:6e:b3:36:
88:b6:f8:c0:30:77:79:ad:b8:98:a8:88:df:31:d4:20:fc:e0:
59:6a:e8:38:02:38:b4:09:c8:a6:34:d4:2f:64:be:bd:e6:4c:
cc:09:89:36:a0:5b:75:01:d5:81:a0:97:10:d7:f5:ca:87:55:
e7:95:1f:00:d3:bb:ea:21:d1:3d:63:32:61:40:00:95:06:88:
3d:5c:7a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:50:55 2026 by rpki-client