
$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
File: w9iTsikbOh4b9fTwQdEFLizLslo.mft (raw, json)
Hash identifier: +QniCHvEh9x3dLi3CUFCIv7GU4dyYoswS7akfhRG1ug=
Subject key identifier: 88:71:F8:3A:F3:67:DA:B0:B5:79:98:A2:11:36:3F:E0:5E:BB:7E:8D
Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
Certificate issuer: /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Certificate serial: 01E8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
Manifest number: 01CC
Signing time: Wed 25 Mar 2026 03:26:29 +0000
Manifest this update: Wed 25 Mar 2026 03:26:29 +0000
Manifest next update: Wed 01 Apr 2026 03:26:29 +0000
Files and hashes: 1: w9iTsikbOh4b9fTwQdEFLizLslo.crl (hash: ihhcHgMH9cnTh1XWr+4tBGp7oQXySVG5zwrX2/0k3Nk=)
2: ACFC76964A0E11EF91642A7AC4F9AE02.roa (hash: fy25uYGOBqAopUBfqaQ8eRizW0jfQRIrb63fi4fchGM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl
rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:26:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488 (0x1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ADC4, serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Validity
Not Before: Mar 25 03:26:29 2026 GMT
Not After : Apr 1 03:26:29 2026 GMT
Subject: CN=69c355e5-2d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:bf:22:6e:de:85:e5:65:c2:63:fa:9a:bb:
20:5b:6f:a8:b2:3b:d0:47:0d:1c:bc:a2:74:4c:ab:
fb:2a:66:b3:ac:b6:85:c4:18:21:b2:82:4c:a6:8a:
92:50:91:85:6f:2d:70:0a:ed:3b:38:a8:5d:07:5f:
c6:5e:68:66:03:57:df:e5:9a:b7:82:ca:95:69:e3:
ae:a0:32:4d:29:96:7d:77:6e:f7:7c:40:c3:e6:8c:
01:70:c3:65:c0:b3:fa:06:44:26:2b:dc:9d:79:db:
2c:4a:82:c4:a4:b7:8b:63:b9:61:41:33:37:c7:d8:
54:fa:81:2d:c4:ff:bf:7f:a2:09:f3:2f:22:ec:48:
15:ad:26:a8:a9:d3:36:d6:5e:6f:6e:55:0f:2d:3f:
99:81:23:81:b4:79:7a:00:44:f7:fa:09:d4:be:89:
24:ea:1a:43:95:92:8e:c5:99:e5:50:51:9b:69:ac:
e9:fc:49:e8:ad:52:08:c6:7c:2d:9a:7c:11:c5:ad:
60:a9:ed:2b:be:8c:d3:50:16:1c:4a:b4:b2:62:a7:
d4:69:9f:c8:25:36:b6:da:d0:12:ea:c3:10:1d:06:
58:d6:39:73:47:c4:10:71:a7:ee:8a:f7:0b:58:d3:
8a:0c:d6:d0:10:7a:fd:20:61:b6:09:6a:fa:72:c1:
82:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:71:F8:3A:F3:67:DA:B0:B5:79:98:A2:11:36:3F:E0:5E:BB:7E:8D
X509v3 Authority Key Identifier:
keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:97:65:46:3e:63:b5:94:34:17:6d:8e:e4:ab:ab:85:c4:6b:
c4:e0:a4:cd:5c:48:1c:94:1d:f0:cf:73:a4:6d:6c:aa:44:d8:
db:98:b4:ff:56:c3:a1:87:a7:93:c0:93:87:37:50:7a:39:9b:
75:55:df:22:89:f1:f1:c3:e1:85:a3:d4:56:db:3f:9e:99:95:
52:d0:67:af:7d:ce:e5:08:56:70:77:16:fa:21:5a:34:be:56:
fa:c5:95:84:d3:84:88:63:1e:63:ac:a4:b5:11:ac:91:db:c5:
00:9e:9e:81:c9:73:6f:c0:92:00:ba:c7:cd:9f:ba:de:6a:30:
dd:8f:4a:18:7b:35:8c:89:d5:8a:dd:cc:07:2f:f6:d8:46:8f:
3e:ac:4f:6f:dc:54:27:33:6e:11:ac:fa:a2:96:9f:5d:c0:dc:
37:44:32:c0:3b:e8:f6:33:84:92:42:f1:6d:28:83:aa:c9:6c:
84:d6:bf:69:b9:74:c6:44:6f:39:3d:72:6e:30:68:0a:7d:31:
e1:d0:4e:80:67:ca:53:38:6a:93:f5:87:c9:49:07:b5:56:3c:
51:50:1e:fa:d2:21:1d:8f:d2:63:aa:30:08:70:a1:95:24:40:
4b:d0:fe:5c:13:77:3a:11:36:aa:57:e5:6e:cb:a7:3c:74:5d:
6f:67:7e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:25:38 2026 by rpki-client