
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
File: w5O8331Fpxlv881tMNYjDfT9xX0.mft (raw, json)
Hash identifier: CB/pJN2p3HWKdsS7W0hZgGJQXehYfNX/TMVuwfP8eN0=
Subject key identifier: 24:4F:07:D0:27:BD:1C:22:24:D4:F8:C4:9D:FF:BA:04:01:9B:B8:CD
Authority key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D
Certificate issuer: /CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
Manifest number: 013F
Signing time: Wed 25 Mar 2026 04:35:27 +0000
Manifest this update: Wed 25 Mar 2026 04:35:27 +0000
Manifest next update: Wed 01 Apr 2026 04:35:27 +0000
Files and hashes: 1: w5O8331Fpxlv881tMNYjDfT9xX0.crl (hash: OAIpw19TkjIvcYvztPRvNwuEiuisTN0ksJMNA27qY1k=)
2: 2B4804B845B211EF9B812019C4F9AE02.roa (hash: PHCMK3dhaeAZ+9EYgZ17CzNOe8icAJdFBqm+KQxnS0I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl
rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:35:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED2B, serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
Validity
Not Before: Mar 25 04:35:27 2026 GMT
Not After : Apr 1 04:35:27 2026 GMT
Subject: CN=69c3660f-7929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3d:02:d7:47:80:22:53:63:9e:cf:3a:18:0e:
4e:73:b3:2e:d4:12:ea:ab:e6:fc:a7:39:af:9c:99:
33:4e:4a:fc:71:1f:a0:8d:8b:5a:f6:cb:e7:d1:69:
27:4a:9b:6f:17:ad:91:9d:f8:75:11:eb:bb:a7:c1:
b9:be:57:db:f3:29:c2:fa:c2:fd:39:dd:aa:83:bb:
c6:f7:d8:58:04:63:e5:27:c8:96:fb:2b:b4:f9:8d:
50:65:cd:34:48:9e:82:b2:09:3b:7d:9f:9e:cc:61:
b7:ab:87:ec:e3:cb:b1:29:e7:c3:9e:fb:a0:af:b4:
32:7f:c9:da:a4:26:a9:c7:c9:dd:ec:90:51:3b:b3:
3b:48:0b:03:9d:17:ca:96:e1:c3:4c:b9:cf:b2:69:
4d:53:41:57:9e:39:5e:db:55:b6:2e:76:f8:f3:a3:
7d:29:81:a6:6f:a8:98:4d:f6:91:f8:c0:f2:a8:47:
15:fd:32:b4:df:0f:c5:40:02:8a:bb:59:b5:09:e5:
c8:4f:f7:74:9a:5d:9a:b0:6b:17:38:0b:42:2e:d1:
be:10:08:9b:c3:25:1d:d1:63:4f:5d:64:6e:68:d5:
7e:a0:ae:4a:25:60:c1:0b:23:df:8e:b3:27:e2:e5:
dc:4a:65:19:de:4d:2c:15:29:d7:c4:95:d1:32:1e:
28:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4F:07:D0:27:BD:1C:22:24:D4:F8:C4:9D:FF:BA:04:01:9B:B8:CD
X509v3 Authority Key Identifier:
keyid:C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c0:b6:60:91:8c:cc:76:40:0f:7b:1b:29:8f:42:1f:3f:fb:
71:b8:36:5b:83:b9:fc:34:e9:1d:1a:e6:bc:8f:80:5a:51:63:
9c:e1:ac:1f:3b:cb:bd:7a:c9:96:dc:cf:08:5a:02:2b:b5:64:
95:00:ed:03:5b:75:49:bb:f6:66:b0:c6:61:8a:d1:d5:81:36:
23:84:88:80:ed:e3:20:ce:c4:06:89:85:3d:91:2c:dc:a7:ba:
17:91:9a:5c:a6:78:22:58:9f:16:28:37:59:d2:03:54:3d:88:
36:1d:68:56:f0:c9:24:59:9f:4b:3d:e0:9e:25:c8:e6:16:3b:
74:d9:49:c3:d8:58:e2:82:68:24:d3:67:95:5a:06:af:1b:95:
6a:d4:17:10:30:bc:40:71:ad:f6:9d:55:09:93:0b:23:1f:33:
fe:0a:fe:28:b0:b4:5e:f2:50:92:72:54:54:97:3d:30:37:f4:
df:7e:cf:a5:2a:0f:36:f4:76:22:87:d6:e6:e9:78:cd:58:82:
ae:f0:32:b5:d8:3d:09:6c:1f:f3:19:a5:ed:75:75:2f:47:09:
dd:09:fa:26:39:86:a0:ed:e1:d3:1e:da:e8:59:ec:23:d0:51:
7c:27:2c:24:af:c7:86:99:8c:16:48:7c:43:b2:bf:0d:8e:b5:
7c:c5:e1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:54:40 2026 by rpki-client