
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
File: 1WjiWa6pXRNIxmPjlfyma-wQwwk.mft (raw, json)
Hash identifier: 0EvvGwqWfDAJp8RIRkYwEE+q1gCX01jOIA8RXVSFQhM=
Subject key identifier: B4:C1:DB:C5:EA:6C:A7:AA:7A:DA:72:4C:FD:F4:95:07:65:9F:EF:05
Authority key identifier: D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09
Certificate issuer: /CN=A914C086/serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309
Certificate serial: 3522
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
Manifest number: 3521
Signing time: Tue 24 Mar 2026 15:04:21 +0000
Manifest this update: Tue 24 Mar 2026 15:04:20 +0000
Manifest next update: Tue 31 Mar 2026 15:04:20 +0000
Files and hashes: 1: 1WjiWa6pXRNIxmPjlfyma-wQwwk.crl (hash: Bk0a91L09u+D45hJ0IcAryM6GLgYBx2LubTb7NoW4Cw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl
rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13602 (0x3522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C086, serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309
Validity
Not Before: Mar 24 15:04:20 2026 GMT
Not After : Mar 31 15:04:20 2026 GMT
Subject: CN=69c2a7f5-57b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0c:f5:c9:c3:be:72:03:31:3e:23:81:e6:bf:
81:56:c9:c3:ec:bf:9c:d4:4c:e3:72:cb:17:51:62:
b9:33:6f:c9:7b:da:5d:8a:2b:0d:0e:57:33:b9:1e:
8d:88:32:1e:36:44:ca:88:b0:e5:b5:d1:1a:6f:18:
7d:01:33:3f:ef:b5:40:7b:bc:53:b6:02:b7:f3:05:
51:47:00:03:86:df:ca:fb:f3:b5:cb:c8:0b:d9:55:
82:08:42:59:7e:55:2a:9e:82:6a:a7:58:b2:a4:cd:
8c:90:15:cb:45:93:8a:81:08:c3:20:4a:bc:f2:f4:
a9:c9:a6:5f:19:4b:83:45:24:30:00:4c:6e:0d:20:
24:77:5f:6f:ed:fe:54:73:0c:c0:7a:c9:39:57:a8:
11:f7:83:c9:44:3c:37:fd:91:de:9e:96:a4:8d:dc:
ce:d4:a1:77:71:06:30:dc:d1:b9:fb:d1:e0:52:15:
80:a3:fc:7c:8a:19:58:a8:42:34:d9:51:2e:f8:0e:
33:45:c0:8a:d5:ff:55:c7:9a:c1:af:eb:65:d0:c2:
e2:58:8f:3d:4c:43:d3:a9:2c:20:1c:35:eb:7f:3b:
df:2b:69:db:a2:d5:4c:0d:f4:84:d9:43:06:71:a3:
4d:3f:3f:6e:ea:00:58:97:c8:25:e2:3d:a6:53:14:
da:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C1:DB:C5:EA:6C:A7:AA:7A:DA:72:4C:FD:F4:95:07:65:9F:EF:05
X509v3 Authority Key Identifier:
keyid:D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:99:f3:8e:57:11:4f:e8:fa:85:a2:08:c3:89:91:35:24:02:
e1:22:df:46:8a:52:4d:1f:57:eb:2d:7d:9b:c5:b9:e6:a5:8e:
50:3a:11:12:27:e4:0d:38:aa:49:4e:f0:7f:f7:22:06:5e:b4:
6f:fe:84:29:00:07:8b:43:61:34:0f:e4:af:c4:08:6c:e4:b4:
34:a2:eb:c2:c0:98:dd:29:d5:b1:81:6a:c5:ac:d8:fc:c3:50:
aa:7d:e8:b2:fe:d6:55:d9:be:df:f3:99:cb:0d:ec:1b:34:da:
19:2d:74:3f:aa:8c:c9:1b:d0:9e:0c:55:86:04:9d:d4:34:76:
07:91:ca:12:1f:5a:c7:f9:5e:47:b1:35:48:7a:52:6c:2a:96:
57:a7:2b:7a:b5:6e:29:6e:8b:98:d3:29:78:d9:80:b1:e8:66:
d2:ba:17:97:d7:9f:13:fe:37:a7:3f:b8:4f:b4:23:d5:e1:7c:
fe:b7:b9:08:e6:12:0b:7b:48:36:e0:6b:1b:25:00:49:2e:12:
f5:04:94:80:62:1f:5e:66:6b:35:d2:2a:ac:37:dd:a5:b7:28:
ea:7f:f8:1e:64:fa:dd:52:45:6b:4e:66:99:6b:5a:33:58:c9:
6a:62:8a:a1:0f:d8:22:91:63:66:6f:20:41:50:eb:00:93:89:
7e:ac:76:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEMwODYxMTAvBgNVBAUTKEQ1NjhFMjU5QUVBOTVEMTM0OEM2NjNFMzk1RkNBNjZC
RUMxMEMzMDkwHhcNMjYwMzI0MTUwNDIwWhcNMjYwMzMxMTUwNDIwWjAYMRYwFAYD
VQQDEw02OWMyYTdmNS01N2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2wz1ycO+cgMxPiOB5r+BVsnD7L+c1EzjcssXUWK5M2/Je9pdiisNDlczuR6N
iDIeNkTKiLDltdEabxh9ATM/77VAe7xTtgK38wVRRwADht/K+/O1y8gL2VWCCEJZ
flUqnoJqp1iypM2MkBXLRZOKgQjDIEq88vSpyaZfGUuDRSQwAExuDSAkd19v7f5U
cwzAesk5V6gR94PJRDw3/ZHenpakjdzO1KF3cQYw3NG5+9HgUhWAo/x8ihlYqEI0
2VEu+A4zRcCK1f9Vx5rBr+tl0MLiWI89TEPTqSwgHDXrfzvfK2nbotVMDfSE2UMG
caNNPz9u6gBYl8gl4j2mUxTa/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLTB28Xq
bKeqetpyTP30lQdln+8FMB8GA1UdIwQYMBaAFNVo4lmuqV0TSMZj45X8pmvsEMMJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzA4Ni9BODExNEY1ODFE
QTIxMUUyQTA1NThCOTUwOEIwMkNEMi8xV2ppV2E2cFhSTkl4bVBqbGZ5bWEtd1F3
d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFXamlXYTZwWFJOSXhtUGpsZnltYS13UXd3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzA4Ni9BODExNEY1ODFEQTIxMUUyQTA1NThCOTUwOEIwMkNEMi8xV2ppV2E2cFhS
Tkl4bVBqbGZ5bWEtd1F3d2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAipnzjlcRT+j6haIIw4mRNSQC4SLfRopSTR9X6y19m8W55qWOUDoREifkDTiq
SU7wf/ciBl60b/6EKQAHi0NhNA/kr8QIbOS0NKLrwsCY3SnVsYFqxazY/MNQqn3o
sv7WVdm+3/OZyw3sGzTaGS10P6qMyRvQngxVhgSd1DR2B5HKEh9ax/leR7E1SHpS
bCqWV6crerVuKW6LmNMpeNmAsehm0roXl9efE/43pz+4T7Qj1eF8/re5COYSC3tI
NuBrGyUASS4S9QSUgGIfXmZrNdIqrDfdpbco6n/4HmT63VJFa05mmWtaM1jJamKK
oQ/YIpFjZm8gQVDrAJOJfqx2wA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:21 2026 by rpki-client