
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
File: WR4siXPGPwtQ7voTRGvLFexS5R8.mft (raw, json)
Hash identifier: IPlZ8TI0mQ7+qxur3RYXCkICjWJSvqmjf94jIzQAkIY=
Subject key identifier: 4F:48:74:81:A7:D6:27:A1:37:FD:19:71:C3:C1:84:C9:E5:E2:D0:5E
Authority key identifier: 59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F
Certificate issuer: /CN=A9159E90/serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F
Certificate serial: 0215
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
Manifest number: 020C
Signing time: Wed 25 Mar 2026 02:29:16 +0000
Manifest this update: Wed 25 Mar 2026 02:29:15 +0000
Manifest next update: Wed 01 Apr 2026 02:29:15 +0000
Files and hashes: 1: WR4siXPGPwtQ7voTRGvLFexS5R8.crl (hash: rxrFlbhsL6bBtHoxznf2UyDF2UUTDzyGzKQxORdl+SY=)
2: 7893F3DC0B8511F086B2C121C4F9AE02.roa (hash: 6s8dW9eLTERLyjzRmVjBJQp0yaZ34l8yCtxJv23gVCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl
rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159E90, serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F
Validity
Not Before: Mar 25 02:29:15 2026 GMT
Not After : Apr 1 02:29:15 2026 GMT
Subject: CN=69c3487c-1104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:20:dc:9f:e0:25:2f:fd:33:8b:ef:3b:f9:f1:
47:22:16:15:ff:bc:4f:a8:bb:25:9c:1e:9f:84:04:
f0:00:e2:81:1d:18:04:5c:18:dc:18:ab:f6:e8:24:
a5:fb:46:0c:6f:d8:97:53:15:d0:50:75:75:c5:b1:
71:06:15:fa:5e:eb:8e:4d:ed:f2:1a:e2:6e:65:1b:
48:97:8b:41:7b:13:46:64:95:e0:9c:15:73:9d:30:
a3:cd:4d:d8:cb:08:15:c8:f6:50:32:67:44:55:d4:
f6:38:0c:d1:4b:13:72:23:7d:e2:16:1c:20:42:15:
a9:a1:6c:e9:d9:aa:51:ef:36:0b:89:36:f8:e2:87:
1d:17:f8:95:4d:07:17:08:4a:11:50:6e:cd:46:e0:
af:75:50:f8:30:5f:99:48:04:a9:78:b5:16:59:df:
38:d3:63:8c:11:69:67:53:8d:4c:22:7d:89:18:a5:
7e:b3:a2:7d:d4:fd:0f:0f:d8:19:05:69:91:c0:7f:
7e:d1:e5:07:26:95:fa:d7:dc:31:47:5c:6f:fb:c7:
be:e3:75:25:40:81:fe:5b:6e:b0:e6:e2:76:e2:54:
32:c7:33:75:60:aa:dc:7d:6b:13:87:a4:ef:88:d9:
d0:0d:d8:7d:b7:35:2c:1d:30:df:34:77:d5:a2:8d:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:48:74:81:A7:D6:27:A1:37:FD:19:71:C3:C1:84:C9:E5:E2:D0:5E
X509v3 Authority Key Identifier:
keyid:59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:77:cf:58:f5:27:0f:fc:34:c3:e3:68:6d:66:af:e7:24:fc:
9e:84:9b:4c:85:2f:91:59:17:68:41:2c:13:5d:53:4f:bd:fc:
96:97:bd:94:10:dd:af:3c:d1:6a:fb:91:d8:60:0a:2c:20:89:
a5:5b:12:af:79:d1:5c:cf:9e:b4:04:c0:7b:52:f5:5b:26:f2:
a2:2b:38:ec:7a:a7:ff:f1:99:50:c2:5a:d7:f1:b7:ff:18:74:
d8:84:32:e6:62:84:03:6a:8f:b6:1e:d0:56:64:f4:37:e1:b5:
61:f2:d5:ab:7c:76:0a:32:0d:fb:40:77:eb:a6:86:fa:0d:e6:
10:a6:9b:9c:f5:3c:4d:a9:f7:91:2f:c0:91:d7:de:3f:21:19:
ce:cd:1b:87:4a:8c:20:82:da:df:d1:eb:18:ff:85:cf:ed:54:
21:aa:d1:68:f6:2e:84:78:ca:af:8e:fa:08:5d:bc:bb:ac:28:
00:38:77:3c:a9:d8:4a:f2:12:be:19:8c:56:c8:f1:45:f8:5a:
1e:3a:ad:83:3e:02:3b:58:78:42:18:1a:ce:39:46:fa:31:4f:
f3:39:89:c2:bf:cc:ed:98:9c:4a:45:87:74:6c:9c:ed:7d:d7:
83:d2:b7:48:8f:12:42:df:03:7b:e7:a0:3d:69:fc:9d:c0:f2:
30:bc:20:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:34 2026 by rpki-client