
$ rpki-client -vvf rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.mft
File: w5eLa2eb-tci9fh5zBRsC636yzc.mft (raw, json)
Hash identifier: j3Gv+yQIHm4iqY8ShvJlOdc9C7YzTigARY5YGm0hs3E=
Subject key identifier: 8E:37:A1:79:CE:BE:F1:8A:E8:4C:8D:AE:7E:9E:14:8A:AB:BA:A1:B1
Authority key identifier: C3:97:8B:6B:67:9B:FA:D7:22:F5:F8:79:CC:14:6C:0B:AD:FA:CB:37
Certificate issuer: /CN=A917877E/serialNumber=C3978B6B679BFAD722F5F879CC146C0BADFACB37
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5eLa2eb-tci9fh5zBRsC636yzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.mft
Manifest number: A1
Signing time: Wed 13 May 2026 07:26:18 +0000
Manifest this update: Wed 13 May 2026 07:26:18 +0000
Manifest next update: Wed 20 May 2026 07:26:18 +0000
Files and hashes: 1: w5eLa2eb-tci9fh5zBRsC636yzc.crl (hash: K+f1US1aKva7Uikb1zeyOlOS41R8NEMmAdUdG7i8xHg=)
2: E70F43AC210A11F193291E4B223D8C67.roa (hash: vr+JPX0UbJ2zqOkFh2Kw5N7O16gJbbIuMOaMrF1nIsE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.crl
rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5eLa2eb-tci9fh5zBRsC636yzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 07:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917877E, serialNumber=C3978B6B679BFAD722F5F879CC146C0BADFACB37
Validity
Not Before: May 13 07:26:18 2026 GMT
Not After : May 20 07:26:18 2026 GMT
Subject: CN=6a04279a-52a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:d2:8c:08:50:5e:a1:84:17:73:68:1c:2e:
ee:75:32:f3:94:9a:4c:cd:fc:f1:06:6a:46:0a:90:
1e:e6:2e:b3:e4:0d:30:c8:ed:0a:51:fd:13:80:b2:
d1:3d:57:63:b3:93:03:ee:b5:ba:8e:48:3e:f5:0b:
88:4a:64:6d:1c:99:bb:e3:15:41:f9:49:7c:f5:83:
ef:38:8f:99:b9:35:cb:e4:5e:63:de:f8:e4:38:7d:
ac:e7:ea:24:eb:43:99:4a:b6:8e:61:d6:79:43:5b:
a0:a3:6c:ce:3f:0c:3e:71:0a:12:7c:d4:d0:80:1c:
f7:22:b7:60:a9:ca:39:5f:89:16:da:ce:73:85:a5:
93:35:1a:1c:aa:74:f9:7e:e6:3e:7b:50:a9:0f:45:
c9:85:f8:ad:33:27:14:d2:92:cc:08:cf:7b:18:69:
81:f2:9e:b4:7e:ed:0d:35:df:7b:e3:a0:84:d7:ee:
95:5f:e8:e5:b3:63:83:09:d6:65:80:ef:40:9f:fd:
c7:70:e0:59:3b:79:04:fc:e5:6e:29:a4:ab:f2:40:
1b:35:a4:7c:3e:91:62:30:97:14:cb:9b:28:77:3e:
ed:48:46:76:21:87:ac:10:ce:17:df:41:29:77:0d:
68:87:16:90:dc:4c:36:1f:b5:6c:d3:52:07:86:04:
2a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:37:A1:79:CE:BE:F1:8A:E8:4C:8D:AE:7E:9E:14:8A:AB:BA:A1:B1
X509v3 Authority Key Identifier:
keyid:C3:97:8B:6B:67:9B:FA:D7:22:F5:F8:79:CC:14:6C:0B:AD:FA:CB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5eLa2eb-tci9fh5zBRsC636yzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:ef:ed:81:b1:4f:f5:61:e7:20:a8:49:91:e6:3f:ef:30:5e:
b1:48:6a:ba:3d:51:8e:6d:ab:58:58:50:1f:7c:34:98:20:7d:
f0:59:e9:17:b4:49:1c:20:d9:62:90:5b:23:84:30:d8:16:e4:
ca:31:c2:0a:eb:f4:f9:18:cd:b1:63:87:c8:94:2a:b6:1e:12:
a5:a0:a8:76:6d:33:da:e9:0c:98:d4:a2:31:10:b1:c1:d8:05:
90:52:8c:c7:d7:1e:ad:a4:81:51:95:2a:a6:16:9d:a6:46:65:
bf:23:a0:66:0f:04:14:16:43:65:62:1f:01:40:b4:6b:7b:97:
63:66:f3:17:70:6a:92:2b:e2:88:b6:ab:8b:1f:aa:d7:15:07:
6a:f9:ea:69:f2:3f:46:20:2d:05:5c:1a:2c:84:27:61:ba:bf:
1b:f6:36:89:6a:1b:10:c5:b3:81:0d:e2:8b:98:fc:dc:fa:be:
3b:53:df:cf:12:15:cc:91:c7:ed:3c:b2:06:e1:17:ac:c8:68:
09:7b:c8:49:91:5c:bc:5c:88:f2:19:a3:f0:60:3e:a5:ed:6a:
82:82:7f:37:ee:6d:a3:45:d9:66:0c:35:76:58:7a:71:40:b5:
a7:80:dc:c4:bb:1e:0d:f5:c8:42:fb:00:71:fe:01:5a:34:05:
94:7d:7b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:22:39 2026 by rpki-client