
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
File: _wsVRthMDZNVkFtsopPiW0QJSMU.mft (raw, json)
Hash identifier: tlviDthn1uFUyrC6bNjc2lTe/xfabL8PdTL84s7+rFI=
Subject key identifier: 42:30:5D:5C:56:0D:12:10:5B:34:94:EA:98:11:30:B4:E9:0E:53:B7
Authority key identifier: FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5
Certificate issuer: /CN=A9198F53/serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
Certificate serial: 0BBB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
Manifest number: 0BAD
Signing time: Tue 24 Mar 2026 18:48:43 +0000
Manifest this update: Tue 24 Mar 2026 18:48:43 +0000
Manifest next update: Tue 31 Mar 2026 18:48:43 +0000
Files and hashes: 1: _wsVRthMDZNVkFtsopPiW0QJSMU.crl (hash: zAKcbIfH3+bwq+iBPUtQX6BtBhppoalmgZYao5siooY=)
2: 0B1FBD4A40F611EAACD44866C4F9AE02.roa (hash: DFdvRHgXchuBm4qDLuYljzDy6YW5jSvcOAQEQdXRUns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl
rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3003 (0xbbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198F53, serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5
Validity
Not Before: Mar 24 18:48:43 2026 GMT
Not After : Mar 31 18:48:43 2026 GMT
Subject: CN=69c2dc8b-8304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:60:60:84:c8:4d:39:84:03:9b:7b:ad:86:
17:7f:00:66:a7:ea:84:6a:a3:c3:f0:45:f0:96:6e:
e5:79:31:d8:35:29:cc:99:05:27:e7:72:42:d2:f8:
9a:ce:7e:2c:7a:97:5a:c5:c9:4f:9b:11:6f:2c:81:
74:71:9c:f5:05:16:0b:3b:45:04:b2:13:b4:79:fc:
51:04:1e:27:93:c5:7f:ea:57:52:62:94:b7:12:32:
cc:1e:eb:23:7f:d0:9f:10:cf:7a:55:11:3d:03:17:
a3:1b:be:70:b2:fa:06:0a:f2:b6:13:ab:3c:01:2a:
be:06:65:2b:a5:3d:43:1c:0c:af:7c:06:04:df:8b:
4f:6b:ca:e3:c1:b2:d7:83:72:32:2a:f8:fb:4f:d1:
7e:45:21:52:7f:73:24:5c:87:a1:aa:57:d2:8c:c2:
cf:b8:71:0d:1b:71:07:2c:c3:08:4f:3d:ea:37:55:
e0:f5:a2:43:9c:54:27:d8:d9:05:a1:e4:2b:06:93:
5f:d0:84:a3:0c:69:cf:2f:ba:f0:71:cb:e6:3f:a4:
71:a8:35:15:bc:0e:32:ef:81:ec:b2:56:f5:ff:07:
c4:42:ee:7d:93:ce:11:0b:58:cc:c8:ae:fd:bf:71:
e9:26:42:c7:1b:44:99:dd:6b:b3:5d:b6:a8:3a:69:
56:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:30:5D:5C:56:0D:12:10:5B:34:94:EA:98:11:30:B4:E9:0E:53:B7
X509v3 Authority Key Identifier:
keyid:FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:4c:ac:e4:7d:42:a4:c1:cc:7b:fd:c6:ae:62:9d:46:ff:36:
ff:87:ad:76:24:c8:2b:54:1a:63:12:b2:8d:f3:b5:10:3a:a8:
66:5b:2b:6e:a4:80:6f:d3:53:90:52:35:26:0f:5f:90:38:8c:
ba:d9:f6:6f:11:9f:89:9d:4d:f9:6f:42:a9:be:f4:dc:4f:97:
a7:75:51:de:e0:c0:9c:78:69:0c:76:40:22:98:42:3e:65:cc:
13:13:09:a4:f8:73:9e:31:0c:61:6d:e4:95:13:35:ec:e2:77:
1a:82:70:87:63:40:87:e1:ad:ed:1f:8c:9b:83:07:9f:d5:12:
ea:3b:d8:92:fa:37:b4:e3:51:c0:34:dc:9a:1d:02:e3:2a:cc:
75:8c:89:14:78:e3:3f:21:8a:db:43:20:f0:3d:b7:d4:a2:c5:
30:20:3b:8a:9a:40:54:95:ab:fb:47:ea:c6:c5:42:54:82:f7:
52:d7:09:f5:d9:14:4e:17:0f:93:f4:d3:78:f8:ef:15:2a:ff:
46:41:9a:39:93:dc:68:68:08:f6:ec:09:fe:52:48:26:82:f4:
6c:71:b1:06:72:2e:b8:20:cf:28:d9:b8:a2:13:78:8c:7b:45:
66:df:80:c9:24:6b:3c:66:20:a3:dd:c1:19:79:31:ab:1b:d1:
1e:77:ac:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:16:54 2026 by rpki-client