
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
File: wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft (raw, json)
Hash identifier: wg4bTw5E0IfzNEzlEZN7murFaP/XXPoLbqN2vnGrZRg=
Subject key identifier: 2F:BB:CE:9A:F5:04:ED:40:71:78:C8:F1:83:E5:EA:52:A4:D6:AE:22
Authority key identifier: C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4
Certificate issuer: /CN=A9111D36/serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
Certificate serial: 0292
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
Manifest number: 0289
Signing time: Sat 13 Jun 2026 01:55:21 +0000
Manifest this update: Sat 13 Jun 2026 01:55:20 +0000
Manifest next update: Sat 20 Jun 2026 01:55:20 +0000
Files and hashes: 1: wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl (hash: xNIWVAAjGmTfAzAqhDoN+Kxf1diG1a86w3CPsKZqWP0=)
2: 949A543291B011EDA9CB747CC4F9AE02.roa (hash: PkOsF2hTQSh3buTiKCZldxs2u/9datFbcXQ9jZ+jT/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl
rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111D36, serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
Validity
Not Before: Jun 13 01:55:20 2026 GMT
Not After : Jun 20 01:55:20 2026 GMT
Subject: CN=6a2cb889-ed27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:08:01:2b:fa:81:6e:66:f0:31:ec:24:df:85:
5e:61:3f:22:7b:5d:2d:1e:a4:69:98:0c:c3:92:02:
bf:8c:3d:81:3c:52:0e:fa:6b:cc:6f:fa:8a:aa:0c:
0d:53:89:12:eb:5f:5a:a9:ab:ed:6b:a9:7a:6a:8d:
90:35:ab:9c:c6:44:ac:21:37:03:8b:25:b5:dc:ee:
10:94:3b:d8:3a:8a:44:78:41:55:66:b0:a8:ab:b8:
38:b9:d0:3c:8c:0c:3a:04:6c:ce:75:7a:f2:de:9d:
6b:8e:3b:87:70:6a:e6:3e:a5:33:ed:8f:d1:ae:b0:
ef:f5:2d:5a:f6:c1:97:53:82:46:72:a5:0f:d9:be:
1d:ad:23:52:36:94:7a:ca:62:a9:22:d0:d9:b0:59:
39:91:c2:fb:4e:ac:54:86:ba:bf:b6:b4:85:fa:89:
d9:45:be:0f:62:46:95:7a:85:f3:ea:0b:ce:17:2a:
36:37:e4:9a:37:7d:3e:55:27:8f:d3:71:d2:a9:6a:
00:02:a9:04:ab:4e:b6:f5:5d:cd:28:d0:6c:ee:a5:
80:40:ad:32:9e:10:95:16:05:1f:70:35:6c:e2:e0:
ab:7f:ae:fc:d7:21:f1:6c:96:e3:42:6f:ef:01:a0:
5a:86:d6:c4:d0:6c:3d:6e:cb:0b:12:0d:9b:fb:c8:
09:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BB:CE:9A:F5:04:ED:40:71:78:C8:F1:83:E5:EA:52:A4:D6:AE:22
X509v3 Authority Key Identifier:
keyid:C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:64:02:f3:c5:d5:85:c1:7e:0f:68:8e:10:a0:f2:ca:89:66:
42:fa:f8:11:16:1b:81:5f:4e:5a:0c:4a:85:4d:54:b1:6d:82:
b3:cb:e3:61:39:1d:2e:6c:61:2c:59:3e:42:84:4d:15:d6:a9:
d2:2d:c6:64:d0:17:e9:e0:a6:fd:e1:b1:3e:0b:44:4e:dd:64:
9c:19:e2:49:75:85:e4:bd:a8:e0:c9:15:fe:c1:00:c6:74:b0:
0a:bd:56:61:73:ad:3c:b6:11:87:10:42:76:fc:1e:bf:4e:f4:
b3:49:06:a1:c7:56:ef:e2:35:51:b9:be:e4:3d:eb:db:3b:ab:
12:5f:dc:95:e1:e7:01:ee:ee:50:64:e3:3f:e5:c8:fa:61:57:
02:de:fe:af:0a:cb:0f:11:64:5d:83:e0:2b:12:59:a2:1f:a5:
16:c9:86:fe:c2:75:2d:76:72:b0:1e:9d:ea:bb:69:14:1e:2f:
22:76:26:17:72:55:63:ed:0b:d6:1e:bc:dd:9c:54:38:52:74:
a5:27:76:03:e2:41:3f:aa:d7:56:a2:97:c7:41:b3:64:29:ef:
56:a7:e0:61:15:d8:ab:16:43:a5:05:7c:c9:8e:e1:da:7e:14:
8f:f7:aa:cd:88:77:ec:ce:a2:2d:cb:c8:6a:ab:7b:89:30:65:
cf:91:a5:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTFEMzYxMTAvBgNVBAUTKEMwQUVGNjI1QUY5RDUwNEFFODQ3RjY5MjNEQTg5MTA2
OUM5MDAzRjQwHhcNMjYwNjEzMDE1NTIwWhcNMjYwNjIwMDE1NTIwWjAYMRYwFAYD
VQQDEw02YTJjYjg4OS1lZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzggBK/qBbmbwMewk34VeYT8ie10tHqRpmAzDkgK/jD2BPFIO+mvMb/qKqgwN
U4kS619aqavta6l6ao2QNaucxkSsITcDiyW13O4QlDvYOopEeEFVZrCoq7g4udA8
jAw6BGzOdXry3p1rjjuHcGrmPqUz7Y/RrrDv9S1a9sGXU4JGcqUP2b4drSNSNpR6
ymKpItDZsFk5kcL7TqxUhrq/trSF+onZRb4PYkaVeoXz6gvOFyo2N+SaN30+VSeP
03HSqWoAAqkEq0629V3NKNBs7qWAQK0ynhCVFgUfcDVs4uCrf6781yHxbJbjQm/v
AaBahtbE0Gw9bssLEg2b+8gJiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC+7zpr1
BO1AcXjI8YPl6lKk1q4iMB8GA1UdIwQYMBaAFMCu9iWvnVBK6Ef2kj2okQackAP0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUQzNi9GQzEzQTNFNDkx
QUExMUVEODBDMTdBNUVDNEY5QUUwMi93SzcySmEtZFVFcm9SX2FTUGFpUkJweVFB
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dLNzJKYS1kVUVyb1JfYVNQYWlSQnB5UUFfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MUQzNi9GQzEzQTNFNDkxQUExMUVEODBDMTdBNUVDNEY5QUUwMi93SzcySmEtZFVF
cm9SX2FTUGFpUkJweVFBX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI2QC88XVhcF+D2iOEKDyyolmQvr4ERYbgV9OWgxKhU1UsW2Cs8vjYTkdLmxh
LFk+QoRNFdap0i3GZNAX6eCm/eGxPgtETt1knBniSXWF5L2o4MkV/sEAxnSwCr1W
YXOtPLYRhxBCdvwev070s0kGocdW7+I1Ubm+5D3r2zurEl/cleHnAe7uUGTjP+XI
+mFXAt7+rwrLDxFkXYPgKxJZoh+lFsmG/sJ1LXZysB6d6rtpFB4vInYmF3JVY+0L
1h683ZxUOFJ0pSd2A+JBP6rXVqKXx0GzZCnvVqfgYRXYqxZDpQV8yY7h2n4Uj/eq
zYh37M6iLcvIaqt7iTBlz5Gl5g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:17:44 2026 by rpki-client