
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
File: wfLqVt--Dy-St0HdaM9WcRWzspI.mft (raw, json)
Hash identifier: A7t3MTQ8OEcepKe9aXQg8LvTjHGEukY3ykytdfEo0es=
Subject key identifier: 35:2F:75:17:4D:26:C0:90:75:9C:6C:1F:E4:EA:C3:8F:6D:F3:08:9A
Authority key identifier: C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92
Certificate issuer: /CN=A9147150/serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
Manifest number: 7F
Signing time: Wed 25 Mar 2026 06:56:10 +0000
Manifest this update: Wed 25 Mar 2026 06:56:10 +0000
Manifest next update: Wed 01 Apr 2026 06:56:10 +0000
Files and hashes: 1: wfLqVt--Dy-St0HdaM9WcRWzspI.crl (hash: mUx914T8JmAKNTe8+riMVzQpee7feLRyhU05ErL4drA=)
2: EB6E0EE8677811F08B1EA154C4F9AE02.roa (hash: MMOwPnwsVwQiBGtfRhC6fRE74wLsOmC1//fo0Gh9Pfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl
rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147150, serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
Validity
Not Before: Mar 25 06:56:10 2026 GMT
Not After : Apr 1 06:56:10 2026 GMT
Subject: CN=69c3870a-e1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cc:54:48:8d:60:67:75:3d:92:37:e5:ed:77:
ae:7e:00:1e:7a:d2:d9:a8:c6:cc:d2:12:f2:22:cf:
09:a2:0b:93:2c:b8:72:e7:40:68:6f:3c:c4:31:79:
0e:bd:be:6c:0a:9e:d6:0d:8d:04:50:a2:80:9e:e3:
3d:f6:11:1c:73:37:69:3c:8c:b4:22:24:8a:95:71:
bb:68:83:0d:80:6d:94:54:3c:93:ff:ec:53:c8:7d:
fe:90:6a:09:3d:ac:74:d9:8a:3d:f7:92:6a:73:bd:
3f:b9:00:44:e9:97:69:60:b2:68:36:f0:61:78:80:
bb:62:50:b9:78:db:1b:13:85:23:70:c2:e6:83:92:
4a:2d:90:53:6c:2c:50:1d:4b:72:39:1c:9e:98:4f:
b9:ae:7e:cc:fb:6b:97:cb:07:c0:e5:75:a4:38:12:
be:b1:c2:2a:be:d2:80:e6:d0:00:e1:32:2a:c7:b3:
d4:c0:43:1d:a3:9d:e1:a0:d3:d8:14:97:ea:fb:34:
e3:36:4f:62:31:9f:e9:dc:7b:1a:c8:6d:bb:ae:c9:
0a:ce:d5:2c:87:c2:6e:27:c8:0f:9f:e3:99:d2:c2:
81:cf:48:51:03:87:d5:20:2f:c7:92:50:85:ec:57:
a2:18:3c:32:13:56:23:1b:e1:c1:b8:b1:04:09:57:
40:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2F:75:17:4D:26:C0:90:75:9C:6C:1F:E4:EA:C3:8F:6D:F3:08:9A
X509v3 Authority Key Identifier:
keyid:C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b7:c2:e5:c9:30:bd:f8:04:75:1d:d7:0c:f0:44:95:14:fb:
3e:65:f1:bd:59:ae:50:40:a1:1e:8f:eb:51:e4:5d:60:20:21:
f8:70:f8:74:5a:24:f6:63:f6:13:69:d8:68:a2:2e:77:7c:ac:
9c:21:28:37:a3:53:9c:ac:77:43:e8:ce:50:6d:05:53:49:c3:
3b:27:d4:18:6d:05:55:36:40:09:10:d7:5d:9b:48:87:be:2d:
42:c7:d0:40:e7:92:63:b2:15:77:59:8e:8a:a6:72:f4:5d:63:
3f:fe:f7:6c:71:67:dd:77:e6:d2:84:72:e7:e4:4a:14:70:9f:
bb:8a:bc:be:c5:2f:45:ed:9a:80:05:77:08:c0:35:17:c6:78:
45:c3:68:6f:a3:78:00:cf:2a:0f:90:f7:9c:a7:da:30:85:48:
c8:4d:72:c1:cb:91:64:d2:5b:ce:90:9a:a4:b2:51:44:ee:04:
f8:be:b9:f4:f1:1b:c9:80:fe:ef:bf:91:e8:34:b2:38:c5:87:
64:8f:65:16:89:06:03:73:39:12:be:70:94:3f:8d:0a:92:38:
2a:25:34:90:8a:5e:ad:97:6a:b0:ad:ea:b3:48:ed:13:8c:e6:
c7:26:56:06:ce:40:0c:67:31:f2:3d:5b:90:a8:ce:7d:ae:a0:
e9:f0:18:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:40:47 2026 by rpki-client