
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
File: Wr4zfmXAC-qEfODSWciH5P2zuSE.mft (raw, json)
Hash identifier: uiQy5qZ8Ev050Z2jbHGz9GCnOn/VrWTyNp5KCxMZ7ro=
Subject key identifier: D6:93:55:E3:3E:C5:FC:97:7C:E8:EC:93:AE:85:C7:CD:0C:80:C6:26
Authority key identifier: 5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21
Certificate issuer: /CN=A9173CDD/serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
Manifest number: 0123
Signing time: Wed 23 Sep 2026 05:37:35 +0000
Manifest this update: Wed 23 Sep 2026 05:37:34 +0000
Manifest next update: Wed 30 Sep 2026 05:37:34 +0000
Files and hashes: 1: Wr4zfmXAC-qEfODSWciH5P2zuSE.crl (hash: fMVJA4u4SjJmIi9UHN0TSoyDaTtav7zNABgW8zc4Lvg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl
rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CDD, serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921
Validity
Not Before: Sep 23 05:37:34 2026 GMT
Not After : Sep 30 05:37:34 2026 GMT
Subject: CN=6ab3659e-9b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:03:1e:50:74:86:63:3b:6b:07:66:53:c2:
01:88:04:3c:9f:7f:62:65:4b:22:82:0f:e6:55:9e:
de:7a:4f:97:0c:e6:7a:38:84:17:4c:58:2c:37:45:
96:a6:73:2f:45:d1:31:42:75:8e:85:2f:6c:3c:80:
3c:17:71:66:f0:7c:c3:cf:36:04:e8:bc:4a:43:bb:
fc:f3:c8:78:a2:89:56:94:ca:56:06:c0:c0:5c:af:
e3:9f:57:8a:21:3a:ec:8b:82:03:59:c6:9a:8a:6a:
7f:31:5c:52:41:36:a6:d4:4e:f4:b7:d0:03:72:74:
10:a5:e0:7b:3b:c8:fb:70:d7:01:bd:c2:69:f9:ae:
ee:d5:f9:88:0c:00:e1:fc:8c:9c:0e:db:9f:45:a1:
77:01:78:2c:43:c2:df:36:9d:9c:44:11:06:e2:6c:
33:66:9e:02:e4:12:66:4b:79:40:3c:d7:15:be:a4:
b3:4a:5f:26:77:13:b0:5d:32:32:e6:0d:41:e1:be:
27:70:59:8f:4e:95:85:ed:f3:4f:05:73:ae:9d:82:
a8:73:8b:74:12:98:02:a0:18:bc:d6:b0:f1:4a:bc:
f8:e6:54:0d:45:e4:25:15:7d:2c:cf:62:94:35:85:
2a:a5:c3:2c:1c:26:40:02:53:07:93:8d:52:7b:cd:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:93:55:E3:3E:C5:FC:97:7C:E8:EC:93:AE:85:C7:CD:0C:80:C6:26
X509v3 Authority Key Identifier:
keyid:5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:e3:db:4c:c3:d6:9c:4b:56:e0:b4:6d:02:9c:df:22:69:29:
d7:bb:2a:fb:2d:15:77:46:2c:26:b0:f9:e0:16:5a:49:e3:40:
bb:4b:d4:4a:b0:84:43:cd:55:d2:88:0a:5a:e8:98:e1:05:2c:
cf:79:ca:d7:0b:71:19:d2:d9:2c:df:80:86:09:9d:2a:59:7b:
cb:b1:e9:e3:4a:f6:72:4d:cf:1e:82:b8:29:e4:13:3e:ff:5e:
dc:56:76:b5:93:d1:cb:e4:49:19:85:19:58:50:91:44:eb:1d:
4a:cf:d8:5f:64:d7:a7:17:33:48:ac:16:ae:fd:0e:41:5f:56:
1d:20:f8:03:25:bd:c1:e9:73:a3:1c:3f:e1:61:d0:3b:39:48:
95:2d:65:f4:58:02:a7:a3:7c:e9:75:2a:2a:d9:7d:46:0d:e5:
75:fb:be:66:52:83:14:d3:b7:10:b7:bd:0b:34:3b:9d:6d:98:
dd:3b:2d:27:da:a3:f1:e3:05:03:d5:6a:cb:58:6c:fd:9f:05:
29:a1:6b:8a:34:da:ef:13:d1:dd:09:42:92:4d:df:29:11:80:
18:3b:c2:c6:2b:71:94:5b:bd:53:71:19:ce:44:52:e5:10:6f:
58:03:f9:d1:3a:42:ae:dd:f5:c6:86:bc:e2:0e:b7:e4:8d:35:
a2:0d:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:17:43 2026 by rpki-client