
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json)
Hash identifier: +PA14Vi/Dg3DnnjkkEKEIDx8l7fW1VskdPNq0uGwuhQ=
Subject key identifier: 6B:52:1A:B5:ED:72:66:0D:AF:EC:00:18:04:C1:96:A0:96:68:2B:95
Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Certificate serial: 061D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
Manifest number: 05DB
Signing time: Sat 28 Feb 2026 23:48:04 +0000
Manifest this update: Sat 28 Feb 2026 23:48:03 +0000
Manifest next update: Sat 07 Mar 2026 23:48:03 +0000
Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: bGXdxPogs7hwbX9TWk+EvFZr1itmgPIBHJ++sqbqLqA=)
2: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: P6wLHpQqCHGL554TbsS5XznXqZdAAm0+usW172StxkE=)
3: 131FA4B092AD11F0AF4F4C85C4F9AE02.roa (hash: 2I5Ge7KBh0e5lEpfrh8ZbOfF9fHkRChHLpkEq2RW7oE=)
4: 85B13C3299CE11F087D1450FC4F9AE02.roa (hash: WGM85d42jF0RvgbFfnNoubVrh59/d23ICHptXHKbWpI=)
5: 0E33CCCADB0911F0A26F2FDC81D3641D.roa (hash: rPe4vhXZonbANC80nWrcqICh0JnSf/sZ+SChznXkca8=)
6: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: dOUSaI9g5O3UPIzWXNerGSVK+VaXaotoBCvxam9K91E=)
7: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: GP/xk9klfhzGUqC9zVSgLsFcoj/SNA7QNKZizL06GJY=)
8: DE6603CAEBD711F092381BAE6B6F56BC.roa (hash: gxvlMyGwQL7lw0xk2eyh8DpmMAWrA6M1mpFv6N2AMeI=)
9: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: Jx8gJbXn9OtsYSW59bLdCCTB+IjRw64vOzcz4bDoiq4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1565 (0x61d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Validity
Not Before: Feb 28 23:48:03 2026 GMT
Not After : Mar 7 23:48:03 2026 GMT
Subject: CN=69a37eb4-685f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1e:5f:a9:ac:67:ed:96:03:14:71:3d:37:25:
73:eb:c0:2e:e0:be:93:d9:d4:03:e1:29:d9:d4:5c:
56:40:6e:5b:4d:c8:35:bf:8a:7a:6b:da:92:6e:10:
b1:a3:dc:a8:6e:37:fa:a1:14:79:fa:c4:96:01:b9:
5f:ba:f9:fd:78:2c:6c:a9:aa:87:9c:fe:f5:13:8e:
e2:3e:b4:33:91:90:bb:0c:eb:f4:c9:21:5b:81:15:
c8:fa:b5:79:f1:68:90:05:60:37:57:85:53:fe:07:
b2:11:bb:fb:73:04:9e:3c:f9:59:43:90:3d:3c:ea:
f6:cd:d9:c3:fa:c9:16:79:05:40:6e:6d:10:c7:35:
ac:6d:3e:a2:6a:8d:72:7e:40:e7:70:2e:af:f9:d1:
dd:e5:11:e6:09:fc:7b:1c:09:4e:46:b9:42:e3:32:
14:f8:32:ee:e9:91:56:90:e7:df:bd:ed:31:37:80:
70:ae:59:cb:90:40:21:ef:89:e7:a1:5d:b2:30:20:
01:06:e5:af:7b:e2:e1:58:c7:6d:c0:ee:04:ba:1c:
d5:7b:e9:cb:94:14:a6:5d:8b:b8:49:3b:4f:cf:57:
8b:84:c9:1c:c2:10:63:ef:31:16:69:3d:57:7e:1c:
99:1d:0d:7a:af:c3:a2:da:1b:3e:f7:30:9b:81:3c:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:52:1A:B5:ED:72:66:0D:AF:EC:00:18:04:C1:96:A0:96:68:2B:95
X509v3 Authority Key Identifier:
keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f2:87:36:67:1e:58:06:f8:e3:38:33:34:77:71:49:78:d5:
ce:31:37:08:98:a3:7e:86:5d:67:0b:26:49:28:64:e6:d9:af:
53:58:57:1d:b8:88:c2:64:7d:bc:b3:7e:5d:18:84:22:75:75:
db:e6:5b:bd:c9:36:00:8d:e2:50:08:32:41:a5:de:ad:53:6d:
a0:22:5b:f1:d6:2e:b7:3a:d0:bc:2d:8d:0c:8e:d7:c2:a3:f5:
7e:4f:e5:4b:2e:4b:f7:09:f1:08:07:9d:69:53:0f:b4:2d:0a:
fa:0b:4f:62:2f:36:c7:ac:62:ed:d9:0e:0f:46:c7:8b:2b:3e:
99:6e:99:7b:9d:12:77:3f:e8:23:96:10:e8:f2:66:bf:a9:82:
d0:7f:b7:38:1f:19:21:1b:89:89:4f:bd:4c:1b:13:28:34:18:
77:e1:ee:9b:f2:17:e3:77:89:b4:c2:0d:76:94:51:5b:fe:9a:
38:fe:b3:2a:9a:bb:c2:3f:3e:54:0e:e3:38:f8:35:2a:43:e2:
45:42:55:7a:b4:cd:2c:ae:37:8c:66:51:a8:91:c4:a2:43:a4:
18:f9:36:49:f7:35:af:24:92:95:93:1e:02:25:de:fe:1a:53:
4b:cb:83:38:5e:4f:db:58:6a:db:cf:28:33:75:16:ca:e4:f6:
4e:cf:fd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:22:57 2026 by rpki-client