
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json)
Hash identifier: RmLfy1RPPoDgVSqhE9tP/Qse/7n9o9kABCo3tW5P9E4=
Subject key identifier: A4:3A:B6:F4:B7:83:4A:AD:E2:D4:34:E1:37:23:A3:5E:E4:26:9B:67
Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Certificate serial: 06BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
Manifest number: 0668
Signing time: Sat 14 Nov 2026 22:38:39 +0000
Manifest this update: Sat 14 Nov 2026 22:38:39 +0000
Manifest next update: Sat 21 Nov 2026 22:38:39 +0000
Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: u+JSFq/cPaAzXxf7iwAUKVBv+/DsQjK0Xes1IhSU+QY=)
2: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: xTxj7kWAr8L1hQC8yOWBnMz+vLF5/tfrwvJ1h0JsS+k=)
3: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: 6Tme4jvNjSwDigiT0PZHAchdMZssdI5xAg00Z6bLKOQ=)
4: 85B13C3299CE11F087D1450FC4F9AE02.roa (hash: 2SFW3f/qBcO3ABUl0skEtTQdx61C6QraqE2FsiGx+BA=)
5: 0E33CCCADB0911F0A26F2FDC81D3641D.roa (hash: bNoLQTOO3sC7F7WpneIpcIS+MzYB7O3zl99uVU5o2Zk=)
6: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: ea2iBmDkz/yRAtN6cJW2O25Irp0qPff20AjY6xfl2jM=)
7: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: emokKDAX1pWI9mPL3wEnfsuiicZ8ph57Boah9/Rm6CM=)
8: DE6603CAEBD711F092381BAE6B6F56BC.roa (hash: OlHN3Z95xBcSg+xyNVo2Ng88UP/U5/OysPmUalPIArA=)
9: 131FA4B092AD11F0AF4F4C85C4F9AE02.roa (hash: tc6sy7do6MVm2lHYRrTIJ6odjR90umTVjkw2J45WL8o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 22:38:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1727 (0x6bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Validity
Not Before: Nov 14 22:38:39 2026 GMT
Not After : Nov 21 22:38:39 2026 GMT
Subject: CN=6af8e2ef-5158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2e:cb:27:93:1b:6a:53:69:bb:ab:90:c3:bb:
35:d7:e8:18:14:c1:33:5a:3c:b2:99:40:8f:99:25:
8b:2e:71:e6:5b:80:53:5c:50:1e:8e:47:3e:ef:96:
af:85:23:c5:dd:76:79:a7:6b:bc:c8:7e:4a:65:ed:
00:c6:c3:90:0f:0f:ef:0e:c7:00:fe:f2:52:ae:79:
b7:da:07:d1:4e:c1:ca:db:f6:8b:e3:8c:db:41:74:
11:36:1f:50:71:4b:00:00:2b:50:7b:2b:2a:f3:39:
aa:12:32:ec:6e:19:30:04:34:eb:e0:06:3f:da:aa:
2b:2f:35:ae:a1:a7:72:d7:54:7d:6e:98:7d:a2:64:
dd:84:30:77:6e:f2:15:ed:a2:fc:53:84:0f:72:ae:
fb:95:84:2e:8a:8d:e3:7b:dc:67:ad:bb:9b:8e:1a:
a2:df:d8:b8:30:50:ea:13:cd:0e:1d:d6:53:e2:18:
66:ea:4e:97:b1:69:a3:2c:3a:d4:9f:bc:b5:d3:7c:
35:ec:73:84:7b:ff:ee:4b:de:52:c6:68:a9:bd:80:
bd:70:80:2a:01:16:58:13:31:12:34:e9:51:26:f3:
f3:60:cc:71:10:30:bf:c6:99:41:50:a2:66:b1:4d:
c6:61:78:fa:25:14:5a:40:9c:f4:66:84:27:7b:88:
68:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3A:B6:F4:B7:83:4A:AD:E2:D4:34:E1:37:23:A3:5E:E4:26:9B:67
X509v3 Authority Key Identifier:
keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:80:a9:7b:e5:1e:2f:cd:37:5d:33:88:cc:2b:80:bf:81:b4:
3d:dd:31:34:f9:8b:0d:44:1c:fa:9a:d7:cf:92:e5:8b:9d:1d:
42:61:95:ca:ea:17:ea:22:03:94:ea:8c:51:e3:8f:92:74:61:
56:c2:df:ef:ad:6d:1a:5e:cb:9b:a4:59:dc:b5:16:8d:97:0d:
d1:09:4e:0e:bb:eb:3e:0b:8a:0c:a0:d6:aa:f8:50:5b:f9:83:
76:67:29:2d:6d:d6:f4:ea:4e:b7:8d:99:9c:0a:ce:3d:3b:74:
56:8a:67:f1:8f:87:f2:4e:88:d1:62:34:be:d7:e6:bd:6e:b8:
38:43:6f:a2:e4:77:5b:1a:a1:08:c2:ed:f3:d5:ce:a8:ea:ed:
14:1e:63:52:9f:32:0f:a8:1e:5c:5a:14:5e:33:1a:c9:6d:87:
ae:c9:61:91:af:81:5d:a2:06:18:be:b4:97:a0:3c:1a:e4:79:
15:89:2e:41:58:e4:5e:f8:97:34:f7:d0:56:03:d2:31:07:e5:
9e:d0:77:c8:6b:01:05:30:9d:6e:4a:45:d4:00:0a:63:ec:d0:
d1:5d:d5:61:50:c0:b5:87:cd:ca:c7:15:33:37:c7:2c:d4:f3:
32:31:2e:0f:66:16:0e:8c:75:20:ec:4e:b1:dc:4a:cb:d2:cc:
58:9e:54:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:37:10 2026 by rpki-client