
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft
File: _WrtCj06ctaut_1HjqdiMTiBlKA.mft (raw, json)
Hash identifier: NciUtPmF6RNxSOjzyFkzdQECOwcG7EqGaj/bASL0NnU=
Subject key identifier: 8F:F1:37:52:19:1A:05:13:01:88:28:5E:41:49:53:02:86:44:21:E5
Authority key identifier: FD:6A:ED:0A:3D:3A:72:D6:AE:B7:FD:47:8E:A7:62:31:38:81:94:A0
Certificate issuer: /CN=A9189337/serialNumber=FD6AED0A3D3A72D6AEB7FD478EA76231388194A0
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_WrtCj06ctaut_1HjqdiMTiBlKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft
Manifest number: 56
Signing time: Wed 25 Mar 2026 07:20:32 +0000
Manifest this update: Wed 25 Mar 2026 07:20:31 +0000
Manifest next update: Wed 01 Apr 2026 07:20:31 +0000
Files and hashes: 1: _WrtCj06ctaut_1HjqdiMTiBlKA.crl (hash: 9OkBG7Aj6z9AnY94DZBcbfJQzE0deaO0ug4IPspQeF4=)
2: B4506158A8FB11F09EF52F87C4F9AE02.roa (hash: DdLLYx2lL6G3M6CO9K5PbK2Qo9NH6F9taSWfJMl1grE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.crl
rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_WrtCj06ctaut_1HjqdiMTiBlKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189337, serialNumber=FD6AED0A3D3A72D6AEB7FD478EA76231388194A0
Validity
Not Before: Mar 25 07:20:31 2026 GMT
Not After : Apr 1 07:20:31 2026 GMT
Subject: CN=69c38cbf-f576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1e:7c:0f:be:72:49:f2:de:ef:44:31:59:f3:
ee:3d:cd:df:ec:47:4f:d7:66:56:75:e1:9b:db:60:
2c:7b:3f:94:f2:d1:9b:1d:e0:ba:29:9c:05:8b:34:
1d:7b:02:2a:2e:7e:a8:8c:f6:fd:74:00:f3:0e:2a:
dd:2c:f5:89:19:41:7a:dd:04:7e:c7:41:cf:fd:1d:
70:8f:25:21:0c:93:d2:70:fb:81:33:03:55:72:25:
57:e1:96:15:cf:67:4c:7c:c2:ed:cc:d0:a5:ed:07:
53:a3:62:6d:61:ff:6f:01:21:28:d1:a8:59:2e:51:
fb:69:aa:fd:92:af:2b:60:40:d2:55:d3:c8:3d:b1:
49:fd:0b:c9:b8:d2:5c:e0:bd:d7:c0:73:71:13:dd:
0d:70:6d:24:35:6c:cc:9b:4b:7f:b1:69:0e:22:ec:
5b:bd:d6:b7:5a:2d:8b:c3:3e:1d:b5:2b:d8:38:e5:
e0:24:78:cb:88:12:d1:1d:8a:1c:70:a0:2c:1a:55:
0e:ed:bc:26:cd:31:71:0e:ed:cc:fd:0c:01:43:ec:
4e:de:49:66:9f:34:1c:0e:ef:47:ec:97:05:ab:3f:
2f:5b:39:eb:67:9b:ad:52:d7:99:45:f1:f7:6d:9b:
65:cd:ee:16:3a:22:f8:6d:61:ee:37:9e:d8:a5:0e:
84:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F1:37:52:19:1A:05:13:01:88:28:5E:41:49:53:02:86:44:21:E5
X509v3 Authority Key Identifier:
keyid:FD:6A:ED:0A:3D:3A:72:D6:AE:B7:FD:47:8E:A7:62:31:38:81:94:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_WrtCj06ctaut_1HjqdiMTiBlKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:a1:76:c3:5c:2d:39:01:6b:67:db:20:c6:f1:36:ef:a6:f8:
40:b2:a9:59:86:d2:7e:f7:fa:8c:f3:96:0a:ff:c0:4b:d8:3f:
06:8c:f3:1c:8b:a6:bb:ca:76:68:6d:55:23:dd:88:f5:d2:c3:
f0:5e:2f:d2:a0:33:f9:f1:6d:e2:e9:0e:df:f1:43:e1:8f:51:
3c:32:b6:d8:d8:a3:e7:c8:40:82:ca:10:13:f9:5e:eb:67:c2:
2d:90:8b:03:2b:df:f5:d4:a1:fc:1a:d3:d3:35:85:cd:fa:66:
de:c3:9a:43:1a:bf:3f:10:12:3f:0a:b4:aa:75:d9:24:88:04:
e0:88:3c:0c:36:cb:b7:2a:53:6e:ab:80:43:9e:04:46:a5:a5:
3c:d3:0a:4e:89:28:2e:72:43:e6:7c:54:ea:92:67:5e:62:55:
65:60:b0:a6:9c:49:0a:b3:fd:a0:0c:c2:5f:d2:57:59:6e:c7:
6a:81:f4:c2:4a:65:df:68:77:68:60:a8:a8:ab:7e:61:97:37:
0f:1f:47:1c:73:d7:c4:cd:9d:2c:11:76:3a:d0:78:a5:b2:1a:
95:30:9e:4b:e9:5b:e6:91:63:69:25:25:75:56:99:6a:b9:07:
0e:c2:a0:ed:a7:d6:74:76:26:ad:c2:c3:81:95:cb:15:5c:92:
1b:50:04:d7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
OTMzNzExMC8GA1UEBRMoRkQ2QUVEMEEzRDNBNzJENkFFQjdGRDQ3OEVBNzYyMzEz
ODgxOTRBMDAeFw0yNjAzMjUwNzIwMzFaFw0yNjA0MDEwNzIwMzFaMBgxFjAUBgNV
BAMTDTY5YzM4Y2JmLWY1NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCQHnwPvnJJ8t7vRDFZ8+49zd/sR0/XZlZ14ZvbYCx7P5Ty0Zsd4LopnAWLNB17
AioufqiM9v10APMOKt0s9YkZQXrdBH7HQc/9HXCPJSEMk9Jw+4EzA1VyJVfhlhXP
Z0x8wu3M0KXtB1OjYm1h/28BISjRqFkuUftpqv2SrytgQNJV08g9sUn9C8m40lzg
vdfAc3ET3Q1wbSQ1bMybS3+xaQ4i7Fu91rdaLYvDPh21K9g45eAkeMuIEtEdihxw
oCwaVQ7tvCbNMXEO7cz9DAFD7E7eSWafNBwO70fslwWrPy9bOetnm61S15lF8fdt
m2XN7hY6IvhtYe43ntilDoTvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUj/E3Uhka
BRMBiCheQUlTAoZEIeUwHwYDVR0jBBgwFoAU/WrtCj06ctaut/1HjqdiMTiBlKAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5MzM3LzQ5OThCRTlBQTgx
NjExRjA4NDk4QUU3MEM0RjlBRTAyL19XcnRDajA2Y3RhdXRfMUhqcWRpTVRpQmxL
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvX1dydENqMDZjdGF1dF8xSGpxZGlNVGlCbEtBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5
MzM3LzQ5OThCRTlBQTgxNjExRjA4NDk4QUU3MEM0RjlBRTAyL19XcnRDajA2Y3Rh
dXRfMUhqcWRpTVRpQmxLQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA5oXbDXC05AWtn2yDG8TbvpvhAsqlZhtJ+9/qM85YK/8BL2D8GjPMci6a7ynZo
bVUj3Yj10sPwXi/SoDP58W3i6Q7f8UPhj1E8MrbY2KPnyECCyhAT+V7rZ8ItkIsD
K9/11KH8GtPTNYXN+mbew5pDGr8/EBI/CrSqddkkiATgiDwMNsu3KlNuq4BDngRG
paU80wpOiSguckPmfFTqkmdeYlVlYLCmnEkKs/2gDMJf0ldZbsdqgfTCSmXfaHdo
YKioq35hlzcPH0ccc9fEzZ0sEXY60HilshqVMJ5L6VvmkWNpJSV1VplquQcOwqDt
p9Z0diatwsOBlcsVXJIbUATX
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:23 2026 by rpki-client