
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json)
Hash identifier: DPiXTCOVH75yKYnxYMtW/VEidklJ89xQdGjUCaZSwic=
Subject key identifier: 9F:F5:8B:4D:EB:6B:BA:1F:38:61:E8:EB:09:5F:1C:42:D9:8A:A5:6E
Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Certificate serial: 065F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
Manifest number: 0613
Signing time: Fri 12 Jun 2026 23:06:30 +0000
Manifest this update: Fri 12 Jun 2026 23:06:29 +0000
Manifest next update: Fri 19 Jun 2026 23:06:29 +0000
Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: GHJVEak89PxbPebwtkYiHg7zn1OPCzB72xZMQckCnMs=)
2: DE6603CAEBD711F092381BAE6B6F56BC.roa (hash: 7MSjFuhWPk6nWpPHBFrMgveqrJSXQoiVW5E6LTrh718=)
3: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: hGESD+bTFhyy/XzxOz7JzM12GktK/1TWm0cZpyKC/pU=)
4: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: l7BnLnchZpy3V0jQTXDCx9KU7qJONYm3aNxaqwd5cQs=)
5: 85B13C3299CE11F087D1450FC4F9AE02.roa (hash: x1M/zagdNVIvwZQzDJ/coWbKF0sT48jPU3tB0Z3LiO8=)
6: 0E33CCCADB0911F0A26F2FDC81D3641D.roa (hash: wRUqj1U1lm/c7GaruMVl1h/KaQXgprhVdKwDeDAwvxY=)
7: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: 5mOXYDCuxkdq/XEQwoY69lXUcjkoAmJ8AwIjsdZITME=)
8: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: wqvssZr8KniDppUjZkMFtJ/Vcm4eodrzwIwq5W5awEw=)
9: 131FA4B092AD11F0AF4F4C85C4F9AE02.roa (hash: ipyTnc82ut8pZyRx4sDro4mSJHvZJZYQ7p6XZ0S5TUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1631 (0x65f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Validity
Not Before: Jun 12 23:06:29 2026 GMT
Not After : Jun 19 23:06:29 2026 GMT
Subject: CN=6a2c90f5-0ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:5c:a7:21:a7:96:63:c7:74:12:df:5d:29:
15:2a:58:57:56:b1:dd:05:9c:dd:7b:d0:ed:20:ca:
cc:5a:bb:75:22:2d:58:e3:c0:41:f3:13:b6:1e:c5:
cc:93:99:43:32:cb:b4:88:53:07:ce:e7:24:92:87:
50:0b:55:05:c4:4d:26:31:ee:5e:88:37:8e:7d:2d:
35:5f:6d:00:d0:9e:3a:f1:2c:f3:93:8e:15:85:4e:
b7:6d:78:ac:96:fe:83:b5:a1:77:75:82:1a:66:d1:
63:eb:33:01:85:d8:31:3e:48:fb:f4:23:a5:f9:c9:
82:ba:2a:75:c4:f2:33:81:e3:06:8d:27:45:09:84:
7c:84:50:3b:74:6a:fa:62:88:fb:80:ed:fb:f4:4f:
84:7f:fa:78:ac:2a:fe:59:6b:82:f3:74:f1:a9:98:
c5:b7:3f:0a:12:f6:c5:3d:f4:76:33:fb:c9:f2:08:
39:d3:df:22:1b:4b:b1:b1:57:4c:21:c2:3b:d4:b7:
da:01:5e:c5:fc:38:14:42:16:11:46:1c:3a:e1:a8:
c4:3d:ce:43:60:48:dd:e1:c0:f9:56:82:3c:ce:e8:
7c:7a:4b:fb:22:30:04:2c:e9:f7:1a:2e:52:1c:c5:
35:01:06:a5:23:9c:82:aa:90:30:a2:73:1a:f4:46:
28:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F5:8B:4D:EB:6B:BA:1F:38:61:E8:EB:09:5F:1C:42:D9:8A:A5:6E
X509v3 Authority Key Identifier:
keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e3:a5:cc:4c:d6:65:4b:e4:3a:c4:46:3a:d0:11:b8:43:39:
d8:bb:bd:d9:68:97:97:fa:72:fb:73:e7:cb:23:c5:24:3a:99:
f5:d1:c7:57:59:16:22:b4:1d:d5:b6:9b:f1:df:cb:e1:ad:7d:
a5:d4:e4:e6:d2:56:f2:3b:23:fd:79:44:24:8d:b5:af:3b:50:
f0:03:66:d8:04:1b:99:34:6c:13:f8:5d:22:c6:13:82:3c:cc:
98:c6:7f:92:4b:f2:77:5b:eb:c3:1a:65:60:45:0a:e6:86:48:
8d:44:7e:54:a8:02:cc:8d:0d:59:c7:40:05:ed:f0:cd:4f:33:
db:92:3d:64:60:c0:c0:41:43:31:e5:a8:7f:92:6c:15:93:2f:
2d:bd:63:26:45:f0:ea:9b:c4:ad:fc:28:1a:dc:94:75:b3:9b:
b6:00:31:1a:b6:c3:a2:f2:11:e9:66:05:d0:3b:b3:84:6a:d7:
30:22:97:cc:d5:2a:be:7e:80:32:b7:7b:08:2a:d2:c2:88:02:
44:d9:4a:9b:49:ff:bf:eb:6e:37:19:83:3b:b4:48:61:4d:e9:
5d:cb:35:3a:bc:fd:bc:0e:e7:2e:18:8e:2a:3b:57:78:bb:cf:
d9:7c:80:4e:25:cf:f6:0f:39:74:0d:31:d9:6b:02:98:00:66:
a9:d8:54:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:38:29 2026 by rpki-client