
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
File: wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft (raw, json)
Hash identifier: LGMKc4mYsKtHrpUSARnMpJpX1TiBJeTK9WNuWao4y3M=
Subject key identifier: E4:E9:A8:4C:67:50:78:06:05:8F:3F:33:A6:14:3A:45:8C:41:9A:EC
Authority key identifier: C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4
Certificate issuer: /CN=A9111D36/serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
Certificate serial: 02A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
Manifest number: 029F
Signing time: Mon 27 Jul 2026 03:03:32 +0000
Manifest this update: Mon 27 Jul 2026 03:03:32 +0000
Manifest next update: Mon 03 Aug 2026 03:03:32 +0000
Files and hashes: 1: wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl (hash: rljszBOj5IkQjFYxW5fTnylPa0G5OWMRdiMnzI5lncQ=)
2: 949A543291B011EDA9CB747CC4F9AE02.roa (hash: PkOsF2hTQSh3buTiKCZldxs2u/9datFbcXQ9jZ+jT/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl
rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680 (0x2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111D36, serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
Validity
Not Before: Jul 27 03:03:32 2026 GMT
Not After : Aug 3 03:03:32 2026 GMT
Subject: CN=6a66ca84-0631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:15:c8:9e:17:d9:23:5e:ea:97:b1:52:c8:
97:84:24:1e:5c:80:ca:2b:44:8a:4d:57:58:bf:5f:
c6:5a:83:56:15:87:44:5d:63:5c:bf:d1:36:dc:31:
17:32:56:be:ad:84:02:a3:51:fa:a0:3c:96:15:41:
4e:40:3f:c5:01:52:a0:7a:5b:3d:30:c5:4f:0a:32:
1d:fd:86:ca:84:ad:14:44:f2:24:0c:95:cb:f5:e2:
51:bc:00:f7:20:74:c6:1e:b6:45:ac:1a:b8:31:b8:
e6:14:90:d2:88:80:e4:cc:a2:94:68:a2:a6:86:3e:
f7:79:3e:03:43:ed:0f:d4:ef:87:63:5e:7a:3a:60:
e3:54:4e:1b:d0:3c:74:cb:9f:f3:54:28:9a:7f:5e:
9d:7e:54:e7:c8:67:6c:22:4a:09:e4:29:01:af:8d:
8e:68:49:8d:af:b9:90:c0:24:b4:c9:7d:60:71:23:
4f:dd:fc:d8:ae:cd:c3:a2:61:7e:e3:a0:73:df:b8:
4f:6a:2d:47:e3:94:b4:23:18:25:27:c9:09:b6:78:
a2:3e:2e:3b:47:52:dd:8a:3f:55:ca:8a:ce:f4:57:
45:55:19:55:2f:66:ac:2a:cd:e2:2d:c5:96:b6:df:
51:e6:70:90:9e:7d:ad:d9:72:17:91:95:26:28:17:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E9:A8:4C:67:50:78:06:05:8F:3F:33:A6:14:3A:45:8C:41:9A:EC
X509v3 Authority Key Identifier:
keyid:C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:95:4a:ce:09:5f:4b:5d:ad:47:92:22:97:f8:bf:9f:b1:b0:
fa:42:9d:f4:14:23:b3:73:ce:5d:c0:22:ea:28:6c:83:ff:8a:
e2:64:95:90:31:1b:58:e7:9a:65:76:1d:37:ec:19:c5:d7:6b:
15:df:de:ed:2d:df:82:2d:0e:12:94:36:ab:a7:ff:1f:69:01:
55:91:a5:80:dc:b1:77:c6:26:c3:4f:d7:68:23:8f:c2:56:df:
90:b2:fe:90:9f:fd:15:db:8e:cf:8a:ff:57:96:d5:2f:66:b2:
1b:70:d0:a8:be:a6:e4:e3:d5:d4:2b:e1:2b:ff:a2:3a:54:c2:
f5:04:3d:e7:50:39:ad:d4:3a:78:a5:d2:2f:f7:68:3b:77:fc:
b6:e9:0f:e4:7b:6b:bf:2a:a6:df:a5:7b:b9:6c:23:35:92:48:
46:32:cf:0a:c2:dc:2b:06:fd:cd:e6:7e:6d:41:73:5e:cc:86:
0c:64:61:0d:2b:7b:6e:f2:7c:1c:63:06:41:f8:93:04:97:99:
78:41:a9:07:28:53:26:74:8c:d2:92:57:bf:bb:a0:07:29:7f:
04:e5:e6:ac:b8:26:05:50:27:27:25:0b:eb:f8:b8:00:63:1e:
03:9f:68:45:fe:22:ae:f2:85:a2:bc:d9:89:07:79:56:ba:84:
fa:8e:b1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:35:47 2026 by rpki-client