
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
File: WKqOb2Cb9VgUA20moSpeKyUViTo.mft (raw, json)
Hash identifier: 5m4IGk3/XtPzbaxVPJsKWXaGEuxptRm1UPkLQTQghfw=
Subject key identifier: BC:6F:0F:A0:EA:CD:79:46:91:E1:9F:68:48:DB:DB:58:C0:9F:13:2B
Authority key identifier: 58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A
Certificate issuer: /CN=A914EBB2/serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
Manifest number: 2E
Signing time: Wed 25 Mar 2026 04:25:09 +0000
Manifest this update: Wed 25 Mar 2026 04:25:08 +0000
Manifest next update: Wed 01 Apr 2026 04:25:08 +0000
Files and hashes: 1: WKqOb2Cb9VgUA20moSpeKyUViTo.crl (hash: SUJyn8CEtdAN0Wj+nJHhs4LRRzu+HK824QE7/RyeJbg=)
2: D23FC546011111F1B3598E67446F56BC.roa (hash: DBJqsyZNFzi5BS6eS1AkXchHuBzM7iwXaGnFUNFTZZ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl
rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:25:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBB2, serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A
Validity
Not Before: Mar 25 04:25:08 2026 GMT
Not After : Apr 1 04:25:08 2026 GMT
Subject: CN=69c363a5-9c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:74:90:e6:7e:7c:d2:12:3a:5d:dc:64:75:d6:
90:c6:c0:2f:44:c0:39:a1:72:f9:56:89:6e:84:20:
e9:9b:a1:22:ed:4d:f5:f7:09:1d:ad:4d:c1:b2:33:
ad:5c:6d:b3:b9:50:ac:5b:88:4c:42:3a:37:ba:51:
f9:40:2b:ca:e6:43:97:5c:c1:2c:16:eb:e6:1d:ab:
04:65:86:e0:72:d0:94:ca:dc:b5:ba:7d:c6:3a:e9:
14:3e:fa:39:2d:dd:08:8a:d4:87:fb:0f:fa:39:ba:
87:78:0b:c0:9b:9d:73:f5:1c:a0:1f:b8:4a:a0:4d:
a4:01:28:6d:d6:f6:9b:b7:13:00:d1:e8:dc:94:53:
fd:b3:a7:6e:89:ee:b1:df:45:1c:50:b4:f0:a4:7a:
c0:ca:cc:bb:4b:34:65:12:48:4d:9e:0f:0a:de:75:
70:77:11:5b:c1:bc:3d:49:15:5d:44:1e:78:51:37:
96:c3:4d:e5:b7:97:f3:44:9d:ef:29:d5:60:a5:df:
7c:b5:80:8b:2d:b9:fe:74:a6:99:c9:d8:37:4b:e0:
7f:c5:81:09:d7:85:e4:b5:fa:0f:9a:1f:16:1d:52:
61:f3:29:90:15:08:78:43:87:27:99:a6:c0:3d:9c:
6e:48:00:29:32:4a:c1:4f:30:f4:5d:df:c7:c8:2c:
d9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6F:0F:A0:EA:CD:79:46:91:E1:9F:68:48:DB:DB:58:C0:9F:13:2B
X509v3 Authority Key Identifier:
keyid:58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:bf:bd:0a:e1:2b:e4:96:87:db:32:55:1c:55:6b:bb:b2:de:
fe:86:af:12:09:fc:1e:34:66:21:56:09:55:76:11:d6:38:cf:
23:3d:38:78:9a:40:91:bf:a8:7f:48:e7:be:3d:2a:1e:6d:3d:
86:9e:15:c4:a5:2f:f2:1b:86:27:81:12:ae:a9:2c:18:3f:7f:
a2:1a:53:44:ae:31:d9:67:98:51:17:90:db:57:1a:10:5a:f1:
11:40:fa:bd:3e:af:cb:68:4d:0d:db:30:c8:57:75:36:2f:b6:
2b:94:d3:06:0d:df:99:1b:e6:69:e9:cb:4a:cb:e9:33:bb:78:
05:96:8f:4e:33:61:c0:cb:d7:3a:80:ff:22:0c:51:eb:34:65:
b2:bd:f1:ac:1b:f8:5c:13:e9:44:1d:2d:f3:59:09:eb:c2:3f:
41:58:a2:ef:96:15:12:9f:5f:c2:b0:40:1f:93:1e:15:2d:a2:
2a:1f:24:20:6f:0e:73:7b:25:a6:73:e4:a9:ff:60:e8:b7:c4:
6a:b6:8d:12:bb:63:83:53:45:9d:33:eb:19:67:d0:a5:21:92:
3f:5e:20:ae:9f:d6:46:fd:8a:0f:11:19:fd:51:b9:32:da:ea:
e4:b6:ea:72:51:db:f4:84:94:e5:f4:24:5d:49:be:1a:12:bf:
37:c8:4c:f9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RUJCMjExMC8GA1UEBRMoNThBQThFNkY2MDlCRjU1ODE0MDM2RDI2QTEyQTVFMkIy
NTE1ODkzQTAeFw0yNjAzMjUwNDI1MDhaFw0yNjA0MDEwNDI1MDhaMBgxFjAUBgNV
BAMTDTY5YzM2M2E1LTljOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD5dJDmfnzSEjpd3GR11pDGwC9EwDmhcvlWiW6EIOmboSLtTfX3CR2tTcGyM61c
bbO5UKxbiExCOje6UflAK8rmQ5dcwSwW6+YdqwRlhuBy0JTK3LW6fcY66RQ++jkt
3QiK1If7D/o5uod4C8CbnXP1HKAfuEqgTaQBKG3W9pu3EwDR6NyUU/2zp26J7rHf
RRxQtPCkesDKzLtLNGUSSE2eDwredXB3EVvBvD1JFV1EHnhRN5bDTeW3l/NEne8p
1WCl33y1gIstuf50ppnJ2DdL4H/FgQnXheS1+g+aHxYdUmHzKZAVCHhDhyeZpsA9
nG5IACkySsFPMPRd38fILNnRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvG8PoOrN
eUaR4Z9oSNvbWMCfEyswHwYDVR0jBBgwFoAUWKqOb2Cb9VgUA20moSpeKyUViTow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFQkIyL0YwOTFGMDcwRUQw
RjExRjBBODEwMzQwNEExRUU1MjhFL1dLcU9iMkNiOVZnVUEyMG1vU3BlS3lVVmlU
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvV0txT2IyQ2I5VmdVQTIwbW9TcGVLeVVWaVRvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF
QkIyL0YwOTFGMDcwRUQwRjExRjBBODEwMzQwNEExRUU1MjhFL1dLcU9iMkNiOVZn
VUEyMG1vU3BlS3lVVmlUby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCSv70K4SvklofbMlUcVWu7st7+hq8SCfweNGYhVglVdhHWOM8jPTh4mkCRv6h/
SOe+PSoebT2GnhXEpS/yG4YngRKuqSwYP3+iGlNErjHZZ5hRF5DbVxoQWvERQPq9
Pq/LaE0N2zDIV3U2L7YrlNMGDd+ZG+Zp6ctKy+kzu3gFlo9OM2HAy9c6gP8iDFHr
NGWyvfGsG/hcE+lEHS3zWQnrwj9BWKLvlhUSn1/CsEAfkx4VLaIqHyQgbw5zeyWm
c+Sp/2Dot8Rqto0Su2ODU0WdM+sZZ9ClIZI/XiCun9ZG/YoPERn9Ubky2urktupy
Udv0hJTl9CRdSb4aEr83yEz5
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:32:27 2026 by rpki-client