
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft
File: wA8Frg-ptoCpG1bw0yHFGIwecSw.mft (raw, json)
Hash identifier: +Y/1xhcdGWsSR++KIS/eQz4Ev6n8727+TFITKBSnAyw=
Subject key identifier: 00:29:03:7E:78:A6:1D:6E:8C:4F:B6:2F:F4:D2:90:46:DF:F9:06:2F
Authority key identifier: C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C
Certificate issuer: /CN=A914F937/serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C
Certificate serial: 022F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft
Manifest number: 022F
Signing time: Wed 23 Sep 2026 02:28:54 +0000
Manifest this update: Wed 23 Sep 2026 02:28:53 +0000
Manifest next update: Wed 30 Sep 2026 02:28:53 +0000
Files and hashes: 1: wA8Frg-ptoCpG1bw0yHFGIwecSw.crl (hash: zdAZ7clq+BdYCbJFLnY7DQ+SuSBTavQj5e8sflPNJas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl
rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F937, serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C
Validity
Not Before: Sep 23 02:28:53 2026 GMT
Not After : Sep 30 02:28:53 2026 GMT
Subject: CN=6ab33965-54c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:42:6f:c4:25:fa:87:89:9b:00:1c:73:21:80:
57:82:fe:f7:86:f3:6d:38:66:a1:da:e9:50:e3:96:
df:a5:30:e7:4f:05:d8:95:6e:af:85:a9:4d:bd:a5:
52:51:42:bf:fa:67:16:6e:b4:f4:50:ac:e1:9f:85:
1e:09:e6:0c:d6:61:11:29:fd:3f:99:8e:33:de:52:
09:33:f5:f7:ad:da:d9:85:e6:be:70:39:09:ca:d0:
05:b0:95:c9:97:cd:fc:12:4e:a3:52:73:19:57:d0:
23:56:e6:4e:e9:54:f5:2c:bd:a2:16:a3:5e:d8:a5:
c2:a9:1e:74:28:1b:67:8e:c1:69:24:d5:ef:a9:8b:
34:9a:08:cc:24:9b:07:1e:74:c5:b7:45:32:40:13:
41:ec:f3:ef:59:c9:d7:bd:9b:0c:c5:bf:65:89:4d:
72:d5:9a:4a:5e:b8:ed:c5:47:7d:46:5d:87:4e:87:
6b:57:8a:c4:aa:c9:08:e1:21:0d:4e:2a:4f:81:d0:
05:2b:45:5e:71:98:1b:c6:99:a5:92:43:a7:a6:5e:
cf:31:6c:18:57:9b:5f:1f:e7:73:a6:83:91:fd:ed:
11:9a:c9:36:4f:c4:52:7b:b9:69:17:fa:3c:db:33:
28:87:1f:74:9e:7b:ea:1a:63:1b:63:c5:7a:44:fa:
8a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:29:03:7E:78:A6:1D:6E:8C:4F:B6:2F:F4:D2:90:46:DF:F9:06:2F
X509v3 Authority Key Identifier:
keyid:C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:c2:d0:06:bf:68:f8:dc:e0:51:50:6f:5b:60:5c:fd:55:af:
a9:6c:5c:f7:ce:c7:b9:b0:5d:84:93:e9:72:1c:71:17:64:71:
07:d1:cc:e7:81:9a:8e:94:58:1e:2f:7a:94:29:a9:92:cd:c0:
f3:be:67:01:2d:5e:ea:e3:17:a6:f6:fc:d3:47:4a:33:61:9b:
20:ae:32:ba:47:5e:07:3d:18:bc:20:f2:8c:19:47:fe:9d:3f:
34:66:d5:b2:a0:bb:a6:6b:5f:a6:d5:30:c9:b1:f6:ee:1d:aa:
8b:ba:c7:30:8d:a0:66:dc:3c:19:e3:9a:41:fa:64:55:76:ac:
8b:35:7d:76:e6:8d:0c:66:e8:14:1a:61:5e:77:c1:55:92:15:
e6:4d:4a:2e:83:c6:6d:79:b4:c5:41:0d:d3:83:fa:ff:3c:85:
fd:d6:ce:db:38:cd:9c:4b:22:c8:b0:b6:18:d9:ed:58:aa:79:
af:d7:da:ba:80:55:85:8b:19:ac:7b:4f:5b:07:6e:6a:06:68:
b1:b8:b4:f5:22:49:63:71:74:ba:24:26:f7:b3:48:8a:43:a5:
c0:f4:28:6b:b2:e0:02:cb:c1:9d:4f:55:12:fb:36:ff:ea:f3:
b0:41:35:e8:2e:44:f8:b0:ca:ec:7d:81:8b:cf:5d:c4:fd:ed:
7d:36:a5:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY5MzcxMTAvBgNVBAUTKEMwMEYwNUFFMEZBOUI2ODBBOTFCNTZGMEQzMjFDNTE4
OEMxRTcxMkMwHhcNMjYwOTIzMDIyODUzWhcNMjYwOTMwMDIyODUzWjAYMRYwFAYD
VQQDEw02YWIzMzk2NS01NGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0EJvxCX6h4mbABxzIYBXgv73hvNtOGah2ulQ45bfpTDnTwXYlW6vhalNvaVS
UUK/+mcWbrT0UKzhn4UeCeYM1mERKf0/mY4z3lIJM/X3rdrZhea+cDkJytAFsJXJ
l838Ek6jUnMZV9AjVuZO6VT1LL2iFqNe2KXCqR50KBtnjsFpJNXvqYs0mgjMJJsH
HnTFt0UyQBNB7PPvWcnXvZsMxb9liU1y1ZpKXrjtxUd9Rl2HTodrV4rEqskI4SEN
TipPgdAFK0VecZgbxpmlkkOnpl7PMWwYV5tfH+dzpoOR/e0Rmsk2T8RSe7lpF/o8
2zMohx90nnvqGmMbY8V6RPqKFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAApA354
ph1ujE+2L/TSkEbf+QYvMB8GA1UdIwQYMBaAFMAPBa4PqbaAqRtW8NMhxRiMHnEs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yRjJCM0YyMDVC
MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi93QThGcmctcHRvQ3BHMWJ3MHlIRkdJd2Vj
U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dBOEZyZy1wdG9DcEcxYncweUhGR0l3ZWNTdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjkzNy8yRjJCM0YyMDVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi93QThGcmctcHRv
Q3BHMWJ3MHlIRkdJd2VjU3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhMLQBr9o+NzgUVBvW2Bc/VWvqWxc987HubBdhJPpchxxF2RxB9HM54GajpRY
Hi96lCmpks3A875nAS1e6uMXpvb800dKM2GbIK4yukdeBz0YvCDyjBlH/p0/NGbV
sqC7pmtfptUwybH27h2qi7rHMI2gZtw8GeOaQfpkVXasizV9duaNDGboFBphXnfB
VZIV5k1KLoPGbXm0xUEN04P6/zyF/dbO2zjNnEsiyLC2GNntWKp5r9fauoBVhYsZ
rHtPWwduagZosbi09SJJY3F0uiQm97NIikOlwPQoa7LgAsvBnU9VEvs2/+rzsEE1
6C5E+LDK7H2Bi89dxP3tfTal4A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:15:26 2026 by rpki-client