
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft
File: Wl89PDwn7yXPbEA1MxiBYClqEGg.mft (raw, json)
Hash identifier: 37ZadzAtoJ1BZeq0JQ9E7LnJktfVLvnGMMmsddyPFkI=
Subject key identifier: 69:2C:90:8C:F7:81:F2:36:EF:7E:74:5D:B7:5A:40:B6:EF:79:46:BB
Authority key identifier: 5A:5F:3D:3C:3C:27:EF:25:CF:6C:40:35:33:18:81:60:29:6A:10:68
Certificate issuer: /CN=A9164215/serialNumber=5A5F3D3C3C27EF25CF6C403533188160296A1068
Certificate serial: 0696
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft
Manifest number: 0695
Signing time: Tue 24 Mar 2026 22:08:37 +0000
Manifest this update: Tue 24 Mar 2026 22:08:36 +0000
Manifest next update: Tue 31 Mar 2026 22:08:36 +0000
Files and hashes: 1: Wl89PDwn7yXPbEA1MxiBYClqEGg.crl (hash: 0ztrVXEWdeSofYWlF48ZO+UFyJLKD96Hoct/U3O6yHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.crl
rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:08:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1686 (0x696)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164215, serialNumber=5A5F3D3C3C27EF25CF6C403533188160296A1068
Validity
Not Before: Mar 24 22:08:36 2026 GMT
Not After : Mar 31 22:08:36 2026 GMT
Subject: CN=69c30b65-5d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:f4:6f:80:bf:84:33:f9:cd:e1:82:f6:c5:
49:6d:bd:9a:3e:84:2a:f1:86:bf:a3:48:97:34:a3:
e2:30:9c:e5:15:89:75:99:86:a8:61:70:65:3e:f0:
e5:a7:67:c9:b4:87:94:c8:34:32:6c:1b:3b:00:4e:
f5:e7:b3:79:86:bb:60:aa:01:d4:1b:dd:d7:f2:a3:
31:4e:e8:89:ef:c0:e8:95:ec:24:e7:d2:e3:57:b3:
4a:14:b3:7c:cb:76:a0:83:41:c1:8b:c2:9c:b5:c3:
06:e5:24:33:e4:b5:7c:2d:73:17:a2:16:9f:b4:58:
55:20:c9:28:45:f4:6f:ed:88:09:d0:3d:eb:18:df:
8e:d8:5a:15:16:b3:55:f6:6f:23:44:34:e1:c0:e0:
37:2b:69:20:f7:5a:81:0d:83:9a:21:7d:62:a5:53:
b7:f8:13:25:03:ab:4a:a6:7c:53:89:d1:6a:27:73:
85:30:38:ea:f4:e6:60:6d:e0:cd:82:74:86:82:e6:
b7:bd:06:75:0a:e4:f3:c9:e4:c6:38:2a:d3:86:f2:
a2:f7:ab:6d:d9:4a:2a:48:e5:b9:ea:49:34:da:dc:
57:43:07:eb:b1:5f:11:21:19:9d:16:1f:6e:a2:e4:
bb:ce:43:85:ec:42:94:20:9e:c8:c5:da:44:43:0d:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2C:90:8C:F7:81:F2:36:EF:7E:74:5D:B7:5A:40:B6:EF:79:46:BB
X509v3 Authority Key Identifier:
keyid:5A:5F:3D:3C:3C:27:EF:25:CF:6C:40:35:33:18:81:60:29:6A:10:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:3d:c5:78:fb:36:17:8b:e2:a0:6d:4f:1e:03:f2:82:4f:c2:
12:d7:5a:0b:8a:b3:a3:9a:a6:8c:6e:cf:d9:19:a8:6e:e3:b0:
cc:6a:cd:5c:47:e8:06:91:f9:5f:30:df:65:92:f6:70:df:1e:
2e:15:2a:a6:58:b4:0b:53:08:c0:e3:f5:33:73:ae:69:aa:0d:
c1:cf:0c:30:ee:cf:93:b0:4d:f5:8d:4b:de:00:d4:55:e8:a5:
f0:b2:3f:2f:85:1b:11:04:93:a5:92:29:3c:9e:01:98:2d:d8:
12:31:c3:a0:17:4a:67:62:72:d2:94:d9:f1:9f:73:4b:61:fd:
e1:39:d6:5a:2f:53:99:8a:c5:2d:7f:5f:42:55:25:7e:3b:b7:
db:e3:1d:35:ee:63:63:89:64:0c:81:2b:2f:52:a2:27:c2:0d:
23:82:66:f2:cc:fc:dd:42:4f:6c:c1:65:25:2d:9b:b2:92:55:
f5:c9:ba:76:7f:a7:c3:99:d3:46:fa:23:19:46:8a:42:0b:85:
3f:b0:48:9e:ee:8f:79:d5:f5:3f:d8:8b:4b:74:36:3b:9a:3b:
92:36:20:e7:1b:e4:23:98:c9:01:df:b7:42:c7:b2:76:35:b1:
09:a7:ea:5f:c3:64:fb:69:f2:4d:c2:1f:eb:20:96:97:4b:0b:
39:1c:9c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:26:47 2026 by rpki-client