
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json)
Hash identifier: aIMg9dOJkJ3u05vxR/pPcKMKjNRVtgE7IsF5b3Mizzo=
Subject key identifier: E4:57:06:60:6F:BB:D2:B4:DD:0F:1C:62:7C:DA:CA:42:91:A0:B6:E0
Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Certificate serial: 0699
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
Manifest number: 064A
Signing time: Sun 20 Sep 2026 22:46:29 +0000
Manifest this update: Sun 20 Sep 2026 22:46:28 +0000
Manifest next update: Sun 27 Sep 2026 22:46:28 +0000
Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: mw6bpYvae/qvXBjWd2fxGlJRgdYnB0m1JoXbUzD32j0=)
2: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: 5mOXYDCuxkdq/XEQwoY69lXUcjkoAmJ8AwIjsdZITME=)
3: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: ZABorRdOgk7wbU+CvLj5803xv1dV9HRIAI1lvnJcQOE=)
4: 0E33CCCADB0911F0A26F2FDC81D3641D.roa (hash: wRUqj1U1lm/c7GaruMVl1h/KaQXgprhVdKwDeDAwvxY=)
5: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: wqvssZr8KniDppUjZkMFtJ/Vcm4eodrzwIwq5W5awEw=)
6: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: 39V53YzmDceqUazb8d3OVe2vw3wPvdKD2B/YmH5KoRc=)
7: DE6603CAEBD711F092381BAE6B6F56BC.roa (hash: 7MSjFuhWPk6nWpPHBFrMgveqrJSXQoiVW5E6LTrh718=)
8: 85B13C3299CE11F087D1450FC4F9AE02.roa (hash: x1M/zagdNVIvwZQzDJ/coWbKF0sT48jPU3tB0Z3LiO8=)
9: 131FA4B092AD11F0AF4F4C85C4F9AE02.roa (hash: ipyTnc82ut8pZyRx4sDro4mSJHvZJZYQ7p6XZ0S5TUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1689 (0x699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Validity
Not Before: Sep 20 22:46:28 2026 GMT
Not After : Sep 27 22:46:28 2026 GMT
Subject: CN=6ab06245-c1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:8f:fc:89:79:90:ef:1a:bb:d7:ce:09:d1:
f5:8f:5b:6b:04:54:bf:c8:d3:85:ac:06:1a:43:f5:
5a:04:e6:f1:78:7d:9e:f9:f3:e5:9a:ee:53:99:a7:
f5:60:11:b7:58:bc:dc:6f:46:bd:e5:41:0b:50:3c:
f4:46:96:f0:c0:2b:7c:98:8e:53:5b:57:14:cc:c0:
e1:6f:63:3d:8c:e5:95:39:46:ef:15:ab:61:27:52:
c5:a2:c3:5b:33:56:01:31:29:2e:ed:03:aa:92:aa:
a9:77:04:86:47:95:ee:56:4d:ce:a4:c5:0b:40:0a:
b0:94:40:44:4a:b5:02:a4:fd:17:97:6b:ad:bf:89:
7d:39:fb:e9:f8:58:07:84:a9:f9:ef:4d:62:f8:cf:
b8:34:c8:db:21:70:96:4e:f7:c1:e9:3a:1a:80:8e:
21:d7:8e:56:74:00:e6:31:7f:c5:f3:5e:4e:72:ca:
60:ed:ee:3d:8b:35:99:c9:5d:88:dd:54:3a:5a:01:
21:77:22:b3:ef:f5:ad:66:df:8e:cf:ac:b5:04:ce:
6b:eb:62:d8:14:50:60:ee:58:25:60:4a:a9:3f:62:
5f:0d:84:70:d7:b1:ca:48:61:56:cf:76:eb:c3:fc:
89:7f:77:63:fd:18:cb:12:8b:fd:a0:ae:43:26:9c:
a4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:57:06:60:6F:BB:D2:B4:DD:0F:1C:62:7C:DA:CA:42:91:A0:B6:E0
X509v3 Authority Key Identifier:
keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:22:3c:cf:c3:5f:5d:b2:80:0e:d1:2b:fa:54:06:48:0f:ef:
5a:39:dd:18:93:49:83:6f:ab:e8:6d:4c:a1:b9:7b:cc:72:c5:
59:b2:17:42:04:25:23:58:32:93:ac:ab:3b:26:96:12:b0:8c:
96:fd:60:66:ce:43:54:e7:8e:b9:f3:1c:d8:28:54:44:7d:28:
b8:01:79:96:66:14:93:46:ef:0a:d8:84:ab:af:dc:b8:2b:08:
42:9d:71:58:de:9a:d8:16:18:89:67:4c:39:44:30:30:93:6a:
3c:d6:25:65:e9:5a:6f:25:0f:c6:7f:74:dd:b2:60:d1:86:48:
67:9a:08:dd:d2:2f:b3:92:67:5f:90:31:ca:08:35:4f:80:32:
3a:36:34:66:cd:6c:45:e2:36:7f:a9:e8:f2:66:2b:66:8a:29:
08:61:1b:61:82:0a:5a:2d:73:c4:fd:2e:60:cc:17:69:0e:28:
f2:c6:ed:af:06:cc:c7:b1:e8:2f:ef:da:22:82:e2:a0:77:0c:
b7:bf:37:cf:2f:48:84:9c:32:e5:21:26:44:56:3e:47:33:a9:
af:67:a4:87:1f:de:a0:ac:db:19:2c:58:a6:70:c1:e2:15:11:
3a:17:cb:bb:b7:62:ee:73:0f:78:9c:2e:0b:17:f6:1e:a9:c9:
da:78:df:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0
MjQ5NjI5MUQwHhcNMjYwOTIwMjI0NjI4WhcNMjYwOTI3MjI0NjI4WjAYMRYwFAYD
VQQDEw02YWIwNjI0NS1jMWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu3GP/Il5kO8au9fOCdH1j1trBFS/yNOFrAYaQ/VaBObxeH2e+fPlmu5Tmaf1
YBG3WLzcb0a95UELUDz0RpbwwCt8mI5TW1cUzMDhb2M9jOWVOUbvFathJ1LFosNb
M1YBMSku7QOqkqqpdwSGR5XuVk3OpMULQAqwlEBESrUCpP0Xl2utv4l9Ofvp+FgH
hKn5701i+M+4NMjbIXCWTvfB6ToagI4h145WdADmMX/F815Ocspg7e49izWZyV2I
3VQ6WgEhdyKz7/WtZt+Oz6y1BM5r62LYFFBg7lglYEqpP2JfDYRw17HKSGFWz3br
w/yJf3dj/RjLEov9oK5DJpykGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFORXBmBv
u9K03Q8cYnzaykKRoLbgMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC
RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUQyNS82N0YyQjBEODBCRDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9j
VC1hZlk2VEtwdHBDU1dLUjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASSI8z8NfXbKADtEr+lQGSA/vWjndGJNJg2+r6G1Mobl7zHLFWbIXQgQlI1gy
k6yrOyaWErCMlv1gZs5DVOeOufMc2ChURH0ouAF5lmYUk0bvCtiEq6/cuCsIQp1x
WN6a2BYYiWdMOUQwMJNqPNYlZelabyUPxn903bJg0YZIZ5oI3dIvs5JnX5Axygg1
T4AyOjY0Zs1sReI2f6no8mYrZoopCGEbYYIKWi1zxP0uYMwXaQ4o8sbtrwbMx7Ho
L+/aIoLioHcMt783zy9IhJwy5SEmRFY+RzOpr2ekhx/eoKzbGSxYpnDB4hUROhfL
u7di7nMPeJwuCxf2HqnJ2njfUw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:51:03 2026 by rpki-client