
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json)
Hash identifier: 4h3l/JkNA3EhF/4gjBJdA+hq34Cg00URbL3ilDtsl/I=
Subject key identifier: 56:C0:D6:10:C2:B1:21:AA:23:D8:CB:90:F7:E5:47:5D:EC:DB:2E:37
Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Certificate serial: 0659
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
Manifest number: 060D
Signing time: Sun 31 May 2026 23:45:06 +0000
Manifest this update: Sun 31 May 2026 23:45:06 +0000
Manifest next update: Sun 07 Jun 2026 23:45:06 +0000
Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: c5iyun+6Eo/J2mbXgWcb+xc35Psk8h3WR+jCbflMAqM=)
2: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: wqvssZr8KniDppUjZkMFtJ/Vcm4eodrzwIwq5W5awEw=)
3: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: 5mOXYDCuxkdq/XEQwoY69lXUcjkoAmJ8AwIjsdZITME=)
4: 131FA4B092AD11F0AF4F4C85C4F9AE02.roa (hash: ipyTnc82ut8pZyRx4sDro4mSJHvZJZYQ7p6XZ0S5TUo=)
5: 85B13C3299CE11F087D1450FC4F9AE02.roa (hash: x1M/zagdNVIvwZQzDJ/coWbKF0sT48jPU3tB0Z3LiO8=)
6: 0E33CCCADB0911F0A26F2FDC81D3641D.roa (hash: wRUqj1U1lm/c7GaruMVl1h/KaQXgprhVdKwDeDAwvxY=)
7: DE6603CAEBD711F092381BAE6B6F56BC.roa (hash: 7MSjFuhWPk6nWpPHBFrMgveqrJSXQoiVW5E6LTrh718=)
8: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: hGESD+bTFhyy/XzxOz7JzM12GktK/1TWm0cZpyKC/pU=)
9: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: l7BnLnchZpy3V0jQTXDCx9KU7qJONYm3aNxaqwd5cQs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 23:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1625 (0x659)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Validity
Not Before: May 31 23:45:06 2026 GMT
Not After : Jun 7 23:45:06 2026 GMT
Subject: CN=6a1cc802-d477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:0f:87:2b:9f:b9:d6:c8:87:83:3a:64:03:
e2:55:2a:19:e7:93:f2:e2:ec:97:3d:be:d8:a1:9a:
ba:5a:f4:01:53:31:73:dd:bc:7f:2c:e4:f8:4c:1e:
e9:6a:43:82:4a:f2:a9:32:29:75:ae:58:eb:30:a7:
c9:35:6c:70:1b:20:47:46:2c:b6:75:8e:3a:0b:08:
56:ae:49:d5:3b:ce:fd:ad:d6:6b:ae:c3:66:ce:d0:
05:ca:d2:1e:00:61:75:a4:bf:67:98:9e:75:77:a8:
4b:b4:a1:26:5f:88:d4:a0:aa:ab:fd:45:88:cb:63:
9f:d7:71:c8:e7:f4:1a:b6:dc:9f:af:79:73:3e:40:
4e:67:fd:da:a9:b0:1c:42:90:2b:b2:07:d2:db:db:
99:ae:ed:a0:a3:2c:a6:37:ac:54:ef:12:65:08:e3:
af:f3:21:d5:32:0b:11:37:cb:89:f0:5d:cc:5b:d1:
d8:15:21:da:83:4b:59:41:90:99:62:2d:66:c0:7b:
5c:23:22:fe:b7:d2:13:18:e0:0a:44:29:7d:21:04:
f4:4b:4a:4b:d6:3d:fb:2f:72:dc:e8:ca:78:39:92:
cc:1d:41:e4:d5:e2:75:70:9f:b1:97:10:da:7e:c2:
c9:20:e5:ea:39:f5:61:ec:37:9a:cd:d8:34:a4:4d:
6e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C0:D6:10:C2:B1:21:AA:23:D8:CB:90:F7:E5:47:5D:EC:DB:2E:37
X509v3 Authority Key Identifier:
keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:d3:31:68:ad:37:08:9b:55:90:27:e0:4a:58:47:a8:3e:06:
2b:89:44:34:ff:c7:db:a3:7d:84:29:63:58:dd:b7:95:8e:60:
25:03:0c:66:03:ae:26:95:6a:0a:01:40:c1:73:24:d8:a1:40:
98:53:60:4a:17:9b:c4:1f:8a:ed:7d:71:cc:21:5c:90:2c:37:
8c:a2:fe:8c:1b:a6:d0:2a:73:81:0d:98:34:cd:c2:22:86:c5:
78:4e:b0:c2:69:83:2a:12:47:96:73:0a:9c:e7:86:3c:17:aa:
9b:c5:ce:3b:3c:b1:7f:d7:85:a4:ed:70:4b:b8:f3:bf:aa:03:
2e:c8:3f:2a:a8:50:5a:57:da:ff:74:57:12:70:0a:5d:e7:19:
33:3a:0f:43:42:33:cd:57:ed:bc:40:b9:19:df:5f:a5:16:7a:
79:de:47:a8:df:4f:84:32:c7:5d:e0:66:48:f7:aa:45:6d:a7:
80:e6:9d:6f:03:88:99:d4:6f:1a:fd:af:bb:07:de:f1:f1:ae:
06:32:59:51:17:ef:73:1a:45:ee:22:b1:2b:6e:a9:2d:96:7d:
ca:c2:ed:b5:a0:5c:c0:54:0c:49:b9:39:e6:95:65:02:9f:51:
34:f8:52:56:e4:dd:af:66:dc:8f:49:c8:04:5c:e4:47:0d:70:
88:31:e5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:14:24 2026 by rpki-client