
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
File: wTdkoKY6d2fzpHXXqBro3xiv4I0.mft (raw, json)
Hash identifier: 0iu9wq3cS41M7beTFH322WmuH87nUan+9U5e5fKxj9g=
Subject key identifier: 3D:24:91:0F:43:A5:58:3E:51:C0:27:86:E5:03:94:8D:87:E5:31:2F
Authority key identifier: C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D
Certificate issuer: /CN=A919941E/serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D
Certificate serial: 02C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
Manifest number: 02BA
Signing time: Wed 23 Sep 2026 01:19:27 +0000
Manifest this update: Wed 23 Sep 2026 01:19:26 +0000
Manifest next update: Wed 30 Sep 2026 01:19:26 +0000
Files and hashes: 1: wTdkoKY6d2fzpHXXqBro3xiv4I0.crl (hash: uaxDerEEF1kfGhByN1XMI2IbB+WcvBcF8YEmQHc2a5Y=)
2: 8A7D7EA2426B11F0B0160739C4F9AE02.roa (hash: y6sr7tbJEN2rlUZBa3aIr3fhInWoQ8HE4shLL1FfQsw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl
rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:19:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710 (0x2c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919941E, serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D
Validity
Not Before: Sep 23 01:19:26 2026 GMT
Not After : Sep 30 01:19:26 2026 GMT
Subject: CN=6ab3291f-3eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:ce:93:83:77:1b:2b:e5:31:ef:4b:f4:05:
5a:3d:e6:69:c4:e4:21:a9:68:11:da:c8:ff:70:eb:
a6:2d:10:5f:01:20:a1:b0:2f:09:59:5c:2e:f1:c9:
96:e3:4b:dc:41:9f:cc:8c:69:4e:c0:fc:04:80:66:
1a:b9:ef:96:04:81:17:61:ea:99:a4:dc:01:bc:2c:
37:a6:74:4c:f3:9b:93:ae:09:a6:f2:0d:1a:af:86:
2e:df:cd:3a:d5:32:ce:1d:03:55:fa:58:b4:a1:8f:
5d:1a:6b:96:8f:46:6f:45:64:a0:33:3e:c0:b8:ff:
fa:79:2b:ff:00:4c:93:e3:47:27:2e:a1:b1:3d:d0:
bf:38:fa:a0:a7:bd:d5:75:18:f2:d5:3b:93:d9:b4:
12:e6:20:be:ab:9b:90:c9:1a:b2:d4:c9:80:05:ab:
f5:11:2c:38:61:9f:47:44:e0:65:f0:b6:55:84:8c:
9b:44:c2:d5:a9:80:a3:d5:0d:4b:10:af:5f:d2:a7:
d9:5d:fb:b4:f2:a4:6d:72:7a:99:c9:87:94:5c:08:
8c:db:95:e2:ba:b3:5c:5c:6c:c0:2f:dd:5f:ba:cc:
d8:60:38:0e:c7:f4:f5:11:66:83:ec:fa:22:23:7c:
cb:04:ed:f7:a3:9f:64:c2:69:8b:26:8d:05:9d:68:
d9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:24:91:0F:43:A5:58:3E:51:C0:27:86:E5:03:94:8D:87:E5:31:2F
X509v3 Authority Key Identifier:
keyid:C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:43:54:80:eb:c2:78:8c:16:aa:07:fa:f5:92:57:72:89:6f:
88:b7:a9:04:37:d1:e3:b1:72:de:94:a2:a8:be:96:a2:a7:00:
6b:ba:4a:d8:3b:bb:eb:c3:7d:8c:7d:9a:5e:9d:65:72:6a:d3:
7f:52:d3:2b:c1:c8:a0:ac:20:5d:09:d1:1c:60:b9:48:03:7d:
9d:64:a3:4c:c7:a7:f9:3f:fa:50:29:30:6e:eb:f8:55:d4:a9:
33:24:4e:0e:c7:75:0f:cc:cc:d8:ed:3d:73:5a:49:48:2d:74:
85:48:98:9a:28:a7:ae:08:c0:85:5d:17:31:ac:3f:2b:cf:70:
40:a0:2c:a2:49:51:49:64:71:7b:ef:8f:f8:8b:d1:fb:f2:d1:
ea:75:f6:14:c7:63:69:f0:f8:43:50:db:7c:57:26:61:42:f2:
55:cc:78:1f:9b:52:78:e8:62:85:70:5d:81:93:e3:19:67:ad:
f4:83:28:c1:52:f9:88:3d:95:5d:e2:9b:69:b7:0a:bc:03:19:
6b:33:42:a4:70:45:57:6b:4d:c3:3e:3b:a8:42:52:aa:f3:b2:
72:23:44:9c:f1:e5:73:22:e5:25:d4:7a:52:ff:f5:3b:69:be:
88:53:c0:1c:00:a0:1b:1c:41:d3:69:54:62:37:84:87:04:69:
91:91:05:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:03:14 2026 by rpki-client