
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json)
Hash identifier: FKA5AsDFarvbDRvYOzNhZ5IRTbgklRWPqqD3iTCwz9M=
Subject key identifier: 62:34:20:08:92:22:28:22:E2:38:D1:DA:B9:30:6C:6D:E1:C6:E4:01
Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Certificate serial: 0673
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
Manifest number: 0627
Signing time: Wed 22 Jul 2026 23:45:26 +0000
Manifest this update: Wed 22 Jul 2026 23:45:25 +0000
Manifest next update: Wed 29 Jul 2026 23:45:25 +0000
Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: d4qJB0FPvG3tTtBKdaW67A0CbQvEqhL3IzC850qPmI0=)
2: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: wqvssZr8KniDppUjZkMFtJ/Vcm4eodrzwIwq5W5awEw=)
3: 85B13C3299CE11F087D1450FC4F9AE02.roa (hash: x1M/zagdNVIvwZQzDJ/coWbKF0sT48jPU3tB0Z3LiO8=)
4: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: hGESD+bTFhyy/XzxOz7JzM12GktK/1TWm0cZpyKC/pU=)
5: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: l7BnLnchZpy3V0jQTXDCx9KU7qJONYm3aNxaqwd5cQs=)
6: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: 5mOXYDCuxkdq/XEQwoY69lXUcjkoAmJ8AwIjsdZITME=)
7: 131FA4B092AD11F0AF4F4C85C4F9AE02.roa (hash: ipyTnc82ut8pZyRx4sDro4mSJHvZJZYQ7p6XZ0S5TUo=)
8: 0E33CCCADB0911F0A26F2FDC81D3641D.roa (hash: wRUqj1U1lm/c7GaruMVl1h/KaQXgprhVdKwDeDAwvxY=)
9: DE6603CAEBD711F092381BAE6B6F56BC.roa (hash: 7MSjFuhWPk6nWpPHBFrMgveqrJSXQoiVW5E6LTrh718=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1651 (0x673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Validity
Not Before: Jul 22 23:45:25 2026 GMT
Not After : Jul 29 23:45:25 2026 GMT
Subject: CN=6a615616-c6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:99:93:78:f1:fc:2a:bc:2a:4b:42:fc:51:10:
f1:2a:dc:e6:7f:e3:d0:42:22:ff:c4:8b:2e:af:df:
93:81:56:66:bb:be:26:57:a0:76:ee:4a:3f:48:59:
ea:c2:93:94:bf:17:db:43:4b:eb:f9:3f:d3:c9:18:
f0:30:24:6c:b5:8d:d8:59:f5:3c:5c:0c:ba:f6:80:
64:a0:87:a9:81:81:57:13:05:88:6e:85:1b:cc:f1:
be:09:3c:fe:d7:84:6d:af:8f:23:ac:f5:49:e8:9c:
2d:30:38:6e:66:53:5b:84:9a:db:02:4a:f4:db:e7:
2b:c6:9b:60:74:8a:92:73:c3:64:e5:1c:8e:8c:e3:
09:bf:93:41:8a:45:0e:05:29:8e:bf:32:ad:b9:2d:
0d:01:b0:e3:14:b3:01:9d:cf:b1:2c:4b:62:a8:ae:
f8:1e:04:ee:a3:22:1b:48:5b:05:72:48:0c:6f:fc:
0d:56:7d:be:85:7c:7e:5e:9c:8a:58:dd:96:e2:1c:
e0:59:0b:62:11:0b:47:84:9b:82:d0:f0:f5:da:eb:
e3:ef:59:4b:42:e6:34:3f:e9:75:5a:0b:49:cf:66:
e9:88:80:13:de:98:b5:0b:ff:1c:62:eb:f4:59:a9:
bc:f3:54:89:c1:59:b4:9d:e1:51:39:ce:c4:6d:08:
0b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:34:20:08:92:22:28:22:E2:38:D1:DA:B9:30:6C:6D:E1:C6:E4:01
X509v3 Authority Key Identifier:
keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:48:4b:5d:5c:88:74:75:35:00:9e:a2:d9:4f:32:4f:50:04:
40:21:c7:4f:8e:11:f4:1b:02:6e:01:ae:c4:8d:90:0a:ee:ff:
b6:e3:d5:a7:25:4f:76:2f:d2:de:98:11:88:f1:e9:fc:2a:b5:
17:db:d7:9e:e1:6b:0c:c6:aa:3e:21:3b:18:91:54:ef:8a:9d:
77:f4:e1:06:e4:b0:12:8c:4c:2b:26:3a:c2:ca:76:24:21:0b:
22:9e:29:d6:ef:6b:7f:89:d1:bf:19:03:6c:32:e3:52:73:88:
a1:ae:c1:a4:71:a2:19:ad:91:66:e7:2f:ef:8d:ff:5c:73:24:
f8:92:99:0a:6c:6c:00:55:eb:38:0c:f4:59:23:50:3a:dd:47:
8e:12:25:9b:e1:4e:3f:66:14:4a:0b:31:5b:42:b1:ab:7c:1a:
68:ea:fa:a7:bc:88:83:cc:5b:72:fa:d1:c2:c6:1b:2d:15:ef:
e3:54:45:49:01:67:5c:72:8e:c3:e2:6c:b8:ac:d8:21:33:eb:
1b:dd:91:b3:6d:d1:09:7e:2f:ed:c7:4a:d0:c1:bf:d7:a7:37:
9d:7d:da:3f:bc:07:db:23:0f:75:48:7b:2f:6d:f4:95:24:b9:
2f:da:ea:ea:83:b1:c9:a1:ed:84:05:fb:9f:de:a1:ed:ec:d6:
ef:80:b9:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0
MjQ5NjI5MUQwHhcNMjYwNzIyMjM0NTI1WhcNMjYwNzI5MjM0NTI1WjAYMRYwFAYD
VQQDEw02YTYxNTYxNi1jNmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA65mTePH8KrwqS0L8URDxKtzmf+PQQiL/xIsur9+TgVZmu74mV6B27ko/SFnq
wpOUvxfbQ0vr+T/TyRjwMCRstY3YWfU8XAy69oBkoIepgYFXEwWIboUbzPG+CTz+
14Rtr48jrPVJ6JwtMDhuZlNbhJrbAkr02+crxptgdIqSc8Nk5RyOjOMJv5NBikUO
BSmOvzKtuS0NAbDjFLMBnc+xLEtiqK74HgTuoyIbSFsFckgMb/wNVn2+hXx+XpyK
WN2W4hzgWQtiEQtHhJuC0PD12uvj71lLQuY0P+l1WgtJz2bpiIAT3pi1C/8cYuv0
Wam881SJwVm0neFROc7EbQgLZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGI0IAiS
Iigi4jjR2rkwbG3hxuQBMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC
RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUQyNS82N0YyQjBEODBCRDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9j
VC1hZlk2VEtwdHBDU1dLUjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApkhLXVyIdHU1AJ6i2U8yT1AEQCHHT44R9BsCbgGuxI2QCu7/tuPVpyVPdi/S
3pgRiPHp/Cq1F9vXnuFrDMaqPiE7GJFU74qdd/ThBuSwEoxMKyY6wsp2JCELIp4p
1u9rf4nRvxkDbDLjUnOIoa7BpHGiGa2RZucv743/XHMk+JKZCmxsAFXrOAz0WSNQ
Ot1HjhIlm+FOP2YUSgsxW0Kxq3waaOr6p7yIg8xbcvrRwsYbLRXv41RFSQFnXHKO
w+JsuKzYITPrG92Rs23RCX4v7cdK0MG/16c3nX3aP7wH2yMPdUh7L230lSS5L9rq
6oOxyaHthAX7n96h7ezW74C5Sw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:52 2026 by rpki-client