
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json)
Hash identifier: mCHWHXznyMbylqYHowjCsD+qpiCTEvAFpA+fQkNGsI0=
Subject key identifier: 2A:BE:2F:82:37:F9:1D:5B:1D:47:E5:40:41:BC:33:D3:CB:D5:FD:51
Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Certificate serial: 0642
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
Manifest number: 05F6
Signing time: Thu 16 Apr 2026 23:03:56 +0000
Manifest this update: Thu 16 Apr 2026 23:03:56 +0000
Manifest next update: Thu 23 Apr 2026 23:03:56 +0000
Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: yCisNDTpZ2vh5Tbfp5Zwck9H8o9FVOAzc3OyTGIc/Sk=)
2: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: wqvssZr8KniDppUjZkMFtJ/Vcm4eodrzwIwq5W5awEw=)
3: DE6603CAEBD711F092381BAE6B6F56BC.roa (hash: 7MSjFuhWPk6nWpPHBFrMgveqrJSXQoiVW5E6LTrh718=)
4: 85B13C3299CE11F087D1450FC4F9AE02.roa (hash: x1M/zagdNVIvwZQzDJ/coWbKF0sT48jPU3tB0Z3LiO8=)
5: 131FA4B092AD11F0AF4F4C85C4F9AE02.roa (hash: ipyTnc82ut8pZyRx4sDro4mSJHvZJZYQ7p6XZ0S5TUo=)
6: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: 5mOXYDCuxkdq/XEQwoY69lXUcjkoAmJ8AwIjsdZITME=)
7: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: l7BnLnchZpy3V0jQTXDCx9KU7qJONYm3aNxaqwd5cQs=)
8: 0E33CCCADB0911F0A26F2FDC81D3641D.roa (hash: wRUqj1U1lm/c7GaruMVl1h/KaQXgprhVdKwDeDAwvxY=)
9: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: hGESD+bTFhyy/XzxOz7JzM12GktK/1TWm0cZpyKC/pU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1602 (0x642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Validity
Not Before: Apr 16 23:03:56 2026 GMT
Not After : Apr 23 23:03:56 2026 GMT
Subject: CN=69e16adc-30c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:71:40:f4:1b:78:69:ad:4d:3b:ce:7d:3d:
11:5e:75:62:cf:1a:b8:cd:47:7a:c2:97:48:48:1e:
3b:ee:7a:ec:12:4c:6b:47:7b:ec:91:65:5f:1c:c3:
aa:f2:f1:ac:b6:66:7b:73:18:84:8e:67:1b:59:8f:
00:b5:ab:24:e9:b8:51:7a:5f:c4:b4:b9:1b:ae:a4:
7d:d3:32:ca:e1:06:c0:3d:c0:b1:a3:2d:ae:1b:46:
b9:f6:31:1a:48:79:42:d2:69:44:76:e8:50:bd:36:
e2:e7:d7:46:cb:f5:05:04:00:09:f0:d6:2b:0f:1e:
47:b2:51:97:ac:83:94:17:8f:be:41:d6:a0:aa:30:
62:8c:41:47:a9:79:e8:0a:5b:de:87:c1:d0:dd:11:
98:92:6b:13:27:2d:37:45:a4:b4:49:5b:7d:14:80:
9e:f5:28:bb:40:1f:8f:66:50:a2:73:35:e2:c4:03:
4a:a2:66:95:60:bf:1d:2f:8e:88:3e:0b:77:66:6e:
c9:29:44:32:c7:3f:e3:de:20:f0:51:ec:24:bc:2d:
7f:18:f5:4e:05:c6:c5:0f:5e:35:36:53:77:92:4d:
fe:2f:51:f0:17:23:c6:cc:46:82:95:bc:71:00:91:
56:af:49:2e:ef:75:55:94:79:a4:e8:4c:dd:b1:be:
f8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BE:2F:82:37:F9:1D:5B:1D:47:E5:40:41:BC:33:D3:CB:D5:FD:51
X509v3 Authority Key Identifier:
keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:a1:3b:64:de:0d:87:ab:10:bc:ac:5c:86:5f:6b:8e:e7:69:
3b:4f:06:df:ab:2d:6b:a8:f4:e4:2c:61:8a:aa:f7:79:f6:f9:
62:f1:6d:b4:83:82:d3:d9:21:63:b0:e3:87:26:7a:22:ee:d9:
5e:6e:ca:3e:6a:2b:09:bb:d1:51:e9:26:5f:30:1b:1f:13:fd:
a7:33:91:da:d7:8d:03:f3:13:16:b5:70:b2:79:d2:91:69:d6:
42:d2:a7:63:e6:52:5b:2f:68:5c:45:ab:2e:f3:b7:7a:5a:19:
78:50:9d:f3:0c:83:bc:25:a9:54:51:10:4e:42:6c:96:ee:9c:
ab:76:e5:86:82:78:e3:0d:08:29:12:28:8e:1d:91:67:46:07:
92:50:ae:5c:06:74:ee:45:2a:2c:c4:a7:4f:1a:93:0f:70:0e:
9c:29:05:c2:03:14:9d:97:88:c3:a5:50:d9:7f:63:6e:5b:c8:
15:6e:a6:bb:6f:ef:f0:2f:59:e6:db:3e:34:03:28:f9:8a:ef:
a5:f4:1c:85:df:03:03:03:32:fe:d6:01:6d:02:56:5f:22:1c:
27:a4:58:0c:71:2d:4b:d8:b7:a4:81:df:dd:ef:b0:a5:2c:0e:
76:7f:1e:87:87:1c:0d:2a:21:59:1b:1e:8f:d5:5d:8c:7d:75:
f6:b2:e1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:53 2026 by rpki-client