
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
File: WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft (raw, json)
Hash identifier: kDSRk1qzS0qz/ZWgXDHi+FwNwEDafEKRI4iKo9bsuec=
Subject key identifier: 1C:63:A4:CB:73:62:05:34:F6:84:DA:11:CA:4A:73:07:D1:6F:59:3A
Authority key identifier: 58:7C:4E:F8:85:BD:41:6A:99:D1:0F:55:B6:E8:16:8C:02:D0:20:1C
Certificate issuer: /CN=A919D1FE/serialNumber=587C4EF885BD416A99D10F55B6E8168C02D0201C
Certificate serial: 41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
Manifest number: 3E
Signing time: Wed 25 Mar 2026 07:41:44 +0000
Manifest this update: Wed 25 Mar 2026 07:41:44 +0000
Manifest next update: Wed 01 Apr 2026 07:41:44 +0000
Files and hashes: 1: WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl (hash: d1uQRP8XGuA7xQ9veUH9ex8NiI/69jy1x/VhnmDfmUo=)
2: 84797D8ACF8D11F09FB4175EC4F9AE02.roa (hash: t8gtrbMwzQlauD3gHG5WSBOc5P6tKFnudYJCa+/BPeg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl
rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D1FE, serialNumber=587C4EF885BD416A99D10F55B6E8168C02D0201C
Validity
Not Before: Mar 25 07:41:44 2026 GMT
Not After : Apr 1 07:41:44 2026 GMT
Subject: CN=69c391b8-0f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:1a:09:da:54:e2:ae:dd:fd:8d:35:17:26:
61:20:27:21:5b:ef:d6:15:19:6b:e5:eb:a3:8e:38:
89:03:22:31:f5:00:36:2b:84:fb:fa:19:c1:1a:ee:
a9:65:15:bc:11:ca:90:40:cb:1a:30:8d:d2:08:bd:
6b:7b:e0:67:1e:db:a9:7f:e9:32:04:d9:f3:d9:a5:
57:ca:f6:46:ff:36:8b:6f:ab:88:c1:b5:46:5e:89:
8e:a0:b6:8b:10:8c:e8:1f:90:19:24:fe:6b:a6:a0:
d5:b5:94:53:55:55:9c:90:f6:52:38:40:23:ea:ac:
f9:5a:fc:74:55:e1:3e:fd:e5:97:45:3b:6d:df:99:
17:ee:2d:8c:80:20:f4:ab:be:51:6a:bd:b3:c4:0c:
35:9c:b3:06:28:cf:a3:9b:f5:e9:9c:13:c0:75:42:
6a:9e:01:58:4a:dd:42:20:95:77:53:86:4f:ea:5e:
b0:27:fb:0f:7a:88:f2:13:20:e7:15:71:3f:81:5a:
f4:04:d3:fe:10:87:56:22:9e:6b:63:20:62:b8:6e:
80:22:53:a7:3e:7e:5b:0e:17:45:d4:5d:06:d6:dd:
e6:6a:e1:9e:2c:07:63:59:3d:2e:e9:62:22:b6:f4:
e8:9c:1f:45:ff:3b:a5:38:20:9d:81:ba:3f:0a:46:
8d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:63:A4:CB:73:62:05:34:F6:84:DA:11:CA:4A:73:07:D1:6F:59:3A
X509v3 Authority Key Identifier:
keyid:58:7C:4E:F8:85:BD:41:6A:99:D1:0F:55:B6:E8:16:8C:02:D0:20:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:d9:0b:46:3a:91:08:d2:d0:8e:c4:fc:f4:ac:d7:3f:36:58:
3a:d9:a5:58:7f:e6:10:86:41:95:3a:e7:b0:03:8c:95:ca:3e:
e3:c9:7d:b6:ed:c1:d7:24:9d:d8:3f:ab:2c:a0:d9:49:9b:dc:
a3:19:a1:d3:55:4c:2a:e1:a4:ee:71:53:7b:64:48:f1:da:7c:
d9:fa:d1:61:86:dd:cc:cb:6c:32:17:a1:ee:f9:38:f5:fc:f4:
ed:fe:f4:b3:62:90:8c:02:e0:27:5d:a9:d8:15:8c:48:0f:a6:
fc:df:6b:80:9a:ad:76:4f:1c:9f:6a:fe:af:2d:99:7f:d4:82:
c3:8b:e4:d1:34:bd:80:22:4d:c1:aa:56:8a:b3:36:9a:63:fc:
e4:4a:c3:2b:84:13:23:80:96:a5:d7:4b:ee:5f:47:4c:4c:8d:
34:8e:5a:1e:2c:07:ae:b5:6f:5e:66:15:5c:4d:e2:aa:14:f4:
b3:2c:6e:61:7f:9e:72:47:ee:e1:20:f9:ad:a4:44:09:f1:bb:
13:4f:c2:29:10:ae:67:da:61:9b:b7:01:46:6f:a0:27:ba:94:
a5:68:67:8f:40:10:9c:81:1f:a4:d1:b6:4c:da:0e:53:c4:15:
dc:e9:80:0e:73:f7:67:5a:ef:a6:ea:67:4c:f6:c1:5f:1b:3e:
18:8c:06:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:30 2026 by rpki-client