
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json)
Hash identifier: 5gJ5QxXs3UTYvogEM9PAAsTOFFh6j61wxE8pvSoFYno=
Subject key identifier: E8:D0:B0:B4:62:A4:EE:9E:46:A3:AB:23:02:7F:F1:02:F9:B7:BE:77
Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Certificate serial: 0693
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
Manifest number: 0644
Signing time: Tue 08 Sep 2026 22:58:12 +0000
Manifest this update: Tue 08 Sep 2026 22:58:11 +0000
Manifest next update: Tue 15 Sep 2026 22:58:11 +0000
Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: M+ag8Cvj/QuvHF9aiX75ZqpShIUYyDY7fuqTTfSs2G4=)
2: DE6603CAEBD711F092381BAE6B6F56BC.roa (hash: 7MSjFuhWPk6nWpPHBFrMgveqrJSXQoiVW5E6LTrh718=)
3: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: 39V53YzmDceqUazb8d3OVe2vw3wPvdKD2B/YmH5KoRc=)
4: 131FA4B092AD11F0AF4F4C85C4F9AE02.roa (hash: ipyTnc82ut8pZyRx4sDro4mSJHvZJZYQ7p6XZ0S5TUo=)
5: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: ZABorRdOgk7wbU+CvLj5803xv1dV9HRIAI1lvnJcQOE=)
6: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: 5mOXYDCuxkdq/XEQwoY69lXUcjkoAmJ8AwIjsdZITME=)
7: 0E33CCCADB0911F0A26F2FDC81D3641D.roa (hash: wRUqj1U1lm/c7GaruMVl1h/KaQXgprhVdKwDeDAwvxY=)
8: 85B13C3299CE11F087D1450FC4F9AE02.roa (hash: x1M/zagdNVIvwZQzDJ/coWbKF0sT48jPU3tB0Z3LiO8=)
9: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: wqvssZr8KniDppUjZkMFtJ/Vcm4eodrzwIwq5W5awEw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 22:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1683 (0x693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Validity
Not Before: Sep 8 22:58:11 2026 GMT
Not After : Sep 15 22:58:11 2026 GMT
Subject: CN=6aa09304-00d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c9:5a:49:3f:2c:eb:9b:36:99:f4:76:ce:42:
aa:cc:d8:30:71:8f:5a:11:59:b2:d6:3b:0f:bb:7a:
5c:c5:22:00:6b:59:62:d2:87:42:98:7c:ec:54:d1:
c8:73:53:be:9a:67:c0:d9:36:28:4e:6b:2b:5f:7d:
ba:b4:49:58:a4:2b:2f:b4:5c:be:b1:89:ba:f3:0a:
5e:b1:eb:af:4c:24:3c:7c:0f:57:27:e9:e8:a7:08:
a3:e5:67:68:7f:25:ce:68:32:02:12:03:9a:ce:de:
b8:da:b4:66:a0:5b:4b:d3:58:7b:98:8b:ac:d8:dd:
11:bd:25:4e:6d:42:03:2b:3b:d5:01:e4:b4:5d:74:
08:4f:21:48:33:ba:25:78:a1:64:2c:a4:53:0a:7e:
db:37:89:6f:b5:f7:66:2d:be:5e:5f:19:c2:83:f0:
30:5b:b0:d1:ca:8c:e7:3c:34:97:c5:59:55:d8:f3:
58:ce:64:88:0e:84:ab:30:de:23:58:36:90:68:6d:
0d:55:be:47:f4:da:90:6d:c5:cc:df:4d:8b:33:97:
ba:f0:2a:34:cc:1d:8a:cf:da:07:99:96:75:50:ae:
78:d0:2a:9a:18:81:be:46:47:d3:c9:39:7d:fd:b6:
3b:ba:63:c8:57:ad:31:7b:71:74:8c:9b:8f:a2:df:
3d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D0:B0:B4:62:A4:EE:9E:46:A3:AB:23:02:7F:F1:02:F9:B7:BE:77
X509v3 Authority Key Identifier:
keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:75:87:a8:28:7e:d8:74:7f:ff:ec:6b:1a:ce:6d:f3:8e:65:
ca:5d:bb:e1:5a:1b:f2:70:16:17:27:fa:69:3a:68:51:91:85:
11:0b:66:63:82:b1:87:09:74:e6:a9:89:28:85:15:fc:27:74:
fe:65:5e:1e:63:a1:b0:7c:a2:b9:1e:57:4d:a9:d1:44:43:bf:
65:4d:74:fc:1d:b9:ab:93:9f:2a:c1:57:8f:df:06:4f:ed:a3:
a2:8d:6c:c0:0e:a1:dc:51:d0:1a:7f:2a:03:17:bf:18:e8:7e:
24:a4:3f:4b:c5:23:d8:32:57:fc:2e:72:d4:09:54:da:0d:9c:
ff:f8:b1:11:11:db:e9:7c:94:c9:fe:83:4e:07:9a:01:b3:6e:
74:5a:e2:b1:bc:eb:63:f8:20:e2:dc:49:cd:5c:23:44:22:bb:
b6:33:bd:8a:0d:97:d6:83:b1:33:cd:1a:ae:a2:b9:96:73:ae:
f5:a8:68:a9:fb:6a:dd:81:97:0b:7b:ea:35:98:3e:56:31:56:
c5:6b:88:7d:7c:6d:73:14:9b:46:cb:e8:fd:77:64:6a:8d:65:
3b:d2:12:6f:3c:72:12:1a:00:06:50:37:cd:21:67:e4:8c:d0:
99:34:c4:d2:75:b5:8b:a3:ca:84:b5:34:be:a4:4c:8c:66:5d:
47:c1:d6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:14:27 2026 by rpki-client