
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
File: wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft (raw, json)
Hash identifier: 00lseVlRXj8B99VbuRBqVtRVqo8fcIhGwIlDEW0mFT0=
Subject key identifier: 90:B2:98:37:58:30:D3:A5:AA:7A:DA:66:D8:07:B1:75:BE:74:32:AB
Authority key identifier: C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4
Certificate issuer: /CN=A9111D36/serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
Certificate serial: 02A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
Manifest number: 029D
Signing time: Thu 23 Jul 2026 02:49:54 +0000
Manifest this update: Thu 23 Jul 2026 02:49:54 +0000
Manifest next update: Thu 30 Jul 2026 02:49:54 +0000
Files and hashes: 1: wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl (hash: kN72dPFXC3bd1a03bpGuXhzQamKwB67CpK6NX0u/+5E=)
2: 949A543291B011EDA9CB747CC4F9AE02.roa (hash: PkOsF2hTQSh3buTiKCZldxs2u/9datFbcXQ9jZ+jT/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl
rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 678 (0x2a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111D36, serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
Validity
Not Before: Jul 23 02:49:54 2026 GMT
Not After : Jul 30 02:49:54 2026 GMT
Subject: CN=6a618152-3680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:1a:0a:27:72:80:56:5f:63:19:77:0f:d8:
98:c5:d6:aa:35:67:2b:49:26:c4:97:de:c9:ca:96:
23:8f:54:26:e7:43:61:23:32:3e:12:e5:11:9b:75:
59:2e:3e:99:ac:3b:4b:f4:06:de:e9:fd:2f:17:0b:
6d:a7:49:28:e7:99:f5:f7:23:2e:fd:25:87:ed:4d:
4d:46:54:40:97:b0:e3:0d:92:40:bd:48:4f:9b:46:
85:68:74:5a:0e:e6:66:3e:31:60:6d:3e:62:be:24:
d3:0a:ae:c5:97:98:4c:6b:67:02:3b:43:0d:3c:f5:
7c:70:4b:f2:82:b3:26:3d:5d:d6:1a:c1:0f:c7:c2:
c9:b5:56:8f:25:44:8f:40:4b:09:7f:e8:3b:fa:e6:
f3:ef:f4:e5:72:7e:af:a8:7a:b7:7b:b5:24:3f:1e:
1f:c2:bf:01:33:9b:cb:85:27:a1:8a:06:30:9e:af:
12:05:3d:c6:ec:63:ee:43:76:8f:bc:9d:a3:22:58:
71:6e:d4:6b:83:23:b1:0e:ef:e4:36:eb:85:92:3e:
d5:68:9c:4b:60:de:da:a6:92:b1:93:77:a1:d0:ff:
82:5c:15:c8:e7:f2:21:bf:5d:06:55:04:cc:36:13:
b0:30:1c:d5:5d:f3:cf:fb:56:2b:0f:cf:03:49:45:
b5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B2:98:37:58:30:D3:A5:AA:7A:DA:66:D8:07:B1:75:BE:74:32:AB
X509v3 Authority Key Identifier:
keyid:C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:85:66:79:ab:33:43:8d:d4:5f:dc:4b:5e:cf:c1:29:2a:5a:
2f:01:02:3f:72:e0:90:1f:e8:fc:01:9f:a6:12:3d:c1:79:4d:
dd:17:cc:67:4c:b7:1f:77:7c:de:50:4c:74:c5:7a:56:9e:2c:
8c:94:94:6f:fd:0c:12:bd:08:9f:3b:3c:28:12:1a:e6:97:c6:
dd:0c:b6:21:b5:a2:0e:f9:73:f2:57:7c:c9:c4:04:d2:38:18:
cd:df:b7:3f:eb:02:af:93:12:8e:bd:80:7a:5e:49:03:f1:5b:
93:4d:b9:b3:1a:e0:3c:87:83:25:55:8b:d9:da:ee:99:ac:5e:
26:9b:30:90:3e:2a:19:e3:f5:4f:26:93:ef:ba:f6:52:01:2c:
65:a4:49:a0:21:1e:bc:8d:35:62:32:85:ed:38:f1:fd:47:83:
ed:9c:ea:78:05:72:70:ec:17:01:da:20:15:22:13:dd:de:f0:
75:20:d5:b8:0b:0a:42:b6:11:d4:91:b8:17:e4:71:5c:7a:ef:
57:e7:48:67:fa:99:bd:fc:d5:fa:66:55:8f:7b:f3:47:65:0b:
70:5c:9b:ef:7c:38:9b:eb:a3:6d:27:a4:4a:78:90:f3:d9:0f:
e1:cb:21:a0:5b:1f:df:fb:4c:e8:79:f2:c1:6f:2a:2f:6f:65:
e8:77:93:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:56 2026 by rpki-client