
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json)
Hash identifier: IDwCyRetd6hRpntpYzVXEL9+z+q0OE70uansdox5qpc=
Subject key identifier: AC:26:73:14:92:34:1B:80:DD:24:E1:5E:DB:1A:5E:FF:5F:9D:A1:EC
Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Certificate serial: 06B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
Manifest number: 065E
Signing time: Mon 26 Oct 2026 22:45:24 +0000
Manifest this update: Mon 26 Oct 2026 22:45:24 +0000
Manifest next update: Mon 02 Nov 2026 22:45:24 +0000
Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: cm99KG3qKbyL/YXPOKOpyx65yWOVJkngfOmm1qJffVk=)
2: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: xTxj7kWAr8L1hQC8yOWBnMz+vLF5/tfrwvJ1h0JsS+k=)
3: 85B13C3299CE11F087D1450FC4F9AE02.roa (hash: 2SFW3f/qBcO3ABUl0skEtTQdx61C6QraqE2FsiGx+BA=)
4: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: ea2iBmDkz/yRAtN6cJW2O25Irp0qPff20AjY6xfl2jM=)
5: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: emokKDAX1pWI9mPL3wEnfsuiicZ8ph57Boah9/Rm6CM=)
6: DE6603CAEBD711F092381BAE6B6F56BC.roa (hash: OlHN3Z95xBcSg+xyNVo2Ng88UP/U5/OysPmUalPIArA=)
7: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: 6Tme4jvNjSwDigiT0PZHAchdMZssdI5xAg00Z6bLKOQ=)
8: 0E33CCCADB0911F0A26F2FDC81D3641D.roa (hash: bNoLQTOO3sC7F7WpneIpcIS+MzYB7O3zl99uVU5o2Zk=)
9: 131FA4B092AD11F0AF4F4C85C4F9AE02.roa (hash: tc6sy7do6MVm2lHYRrTIJ6odjR90umTVjkw2J45WL8o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 22:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1717 (0x6b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Validity
Not Before: Oct 26 22:45:24 2026 GMT
Not After : Nov 2 22:45:24 2026 GMT
Subject: CN=6adfd804-b553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:5f:66:88:32:6e:82:76:48:e7:ca:05:fd:
2d:ac:01:25:37:06:0f:89:a5:24:c9:43:92:24:ef:
55:17:6d:70:de:e3:61:92:66:72:38:ed:91:1b:a1:
c1:b0:0a:36:35:40:f0:84:1a:be:ab:d2:e4:23:9e:
95:29:90:bc:77:cd:a8:5b:a0:33:31:ad:27:ed:41:
4c:c3:6e:35:29:49:70:79:8e:92:1c:1c:fa:6e:a6:
75:1e:7b:58:cb:83:34:1a:98:bf:19:f3:51:38:9f:
a4:62:78:93:b1:98:b8:c0:60:40:c3:9b:80:03:03:
d4:fd:6c:33:07:e6:d3:76:41:5d:da:f8:df:25:68:
a2:98:c7:a2:19:e9:84:66:5d:9c:59:f2:38:2b:2a:
24:45:57:70:7f:c2:ca:78:97:47:5c:56:c9:de:5b:
2b:d3:2c:5a:12:fd:41:a6:96:de:be:40:db:11:8b:
e0:a7:df:82:14:13:13:9e:06:b1:a5:e8:9f:fe:0f:
b1:93:47:4d:cf:9a:64:80:32:f5:8c:01:c0:a4:d1:
22:db:0e:d9:f3:e6:19:f3:61:cb:77:f9:e1:74:c8:
11:7f:1d:b1:d4:d3:cd:c7:2a:d1:fe:d6:dc:99:15:
d8:a4:7d:53:d0:b9:46:0a:9a:ec:86:5f:69:4c:58:
74:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:26:73:14:92:34:1B:80:DD:24:E1:5E:DB:1A:5E:FF:5F:9D:A1:EC
X509v3 Authority Key Identifier:
keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:27:54:a6:14:44:c5:af:c2:c1:d4:13:c4:16:14:43:a7:7a:
1a:23:df:d1:20:e0:d5:3b:12:cb:a5:b4:a0:4c:3f:8d:21:6f:
d2:59:3d:6c:95:ea:88:d1:9a:24:ad:e1:80:5b:2a:04:ef:96:
ae:2e:51:64:0d:37:6c:f3:35:6f:78:c1:38:df:59:ad:dc:09:
63:c0:fc:c4:f1:fd:8d:bf:56:1d:a8:57:a5:c8:60:e3:10:b2:
ad:d4:90:ba:5f:16:7a:cd:df:44:6b:37:92:8e:4d:1c:f7:f2:
45:95:dc:55:54:68:ca:61:ae:1c:a8:c2:24:42:c9:c2:5d:90:
8c:ee:bd:ad:6a:42:f0:58:08:d8:8e:c8:95:fd:ac:8d:53:3f:
16:52:bd:62:6c:b2:02:f5:0a:7e:1c:71:19:8e:50:ec:fd:a7:
50:99:2b:a0:e3:5d:d6:17:65:5a:74:24:e6:2a:61:1f:a6:20:
0e:92:d4:5b:df:2f:3f:ca:04:79:c5:30:d1:0b:fd:48:23:9c:
72:b8:cd:18:d4:08:6d:93:f9:66:76:bc:34:9b:57:cc:21:87:
16:cf:f3:7c:42:f0:dd:8e:72:2e:41:76:35:b1:d9:e3:0b:70:
3d:00:ee:6a:2f:03:53:a9:5c:9a:8d:76:cf:7a:9c:8d:22:a2:
ed:f2:b6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:31 2026 by rpki-client