
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
File: wK73B39SYiVnF5rOVq1e6M1kYE4.mft (raw, json)
Hash identifier: G/3h8F1VOfUXA1nvffa8UacNHQsEqGUn/YGG4IiV7rA=
Subject key identifier: E2:35:B4:EB:CA:22:83:D6:BB:95:49:E4:24:D8:7F:9E:31:23:C5:87
Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
Certificate issuer: /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Certificate serial: 024E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
Manifest number: 0241
Signing time: Sun 15 Nov 2026 02:46:55 +0000
Manifest this update: Sun 15 Nov 2026 02:46:54 +0000
Manifest next update: Sun 22 Nov 2026 02:46:54 +0000
Files and hashes: 1: wK73B39SYiVnF5rOVq1e6M1kYE4.crl (hash: 1c2x2ZpZKS4ar5PlUh0VbxW8+5XrH5FFeKJSp6JLl70=)
2: 6307B34A7CAD11EE9E7B9434C4F9AE02.roa (hash: YZqWi1U9utqk5ggFE8PV/hY64JnDm5CAhjyQ9TiQblI=)
3: 3BE03ECC7D4D11EE93D62E30C4F9AE02.roa (hash: XDu+IeKyxj5n2r5Q1uVJ/WbOchHWT5+N2NY6KVXQfNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl
rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 02:46:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Validity
Not Before: Nov 15 02:46:54 2026 GMT
Not After : Nov 22 02:46:54 2026 GMT
Subject: CN=6af91d1e-ff22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:62:38:08:7e:98:9b:c5:56:04:0f:50:61:
c7:68:45:f5:67:68:dc:06:07:59:dd:e8:0f:48:38:
dd:b2:77:86:76:e3:77:ac:3d:d4:64:f4:73:32:7b:
22:c6:6e:26:cf:fb:ca:4c:13:14:b2:80:a2:cc:dd:
d3:05:f7:5b:05:02:65:92:10:41:b0:e8:68:f3:65:
d3:01:62:03:d0:7c:39:b7:90:e2:75:3a:3a:b1:f3:
51:e6:97:44:57:2a:e6:24:1f:01:05:ab:ab:2d:7e:
9f:2f:ef:bc:a8:30:c6:62:f8:1b:61:7d:7f:e4:38:
28:24:1a:61:cb:6f:d8:85:9a:f4:a0:d0:ce:a9:9c:
22:ff:2d:0a:b9:53:96:b0:46:cb:ef:ca:b2:ca:39:
d6:66:6b:4a:4c:20:5a:d7:25:0b:23:11:63:8e:83:
b0:94:24:0d:9c:10:93:3e:2c:56:c5:d8:9c:3e:40:
5b:f5:31:74:97:03:04:04:ed:71:1f:e3:c1:df:4d:
4c:7f:eb:e6:d8:77:a1:c5:d7:c8:48:00:95:ec:11:
6d:2e:63:aa:a4:c1:7a:ef:7c:26:26:7e:ba:09:5c:
af:f7:19:04:33:c3:62:7a:30:8e:e4:d5:71:d0:53:
a7:95:44:b4:51:c1:ac:15:3e:be:93:08:58:5c:ac:
47:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:35:B4:EB:CA:22:83:D6:BB:95:49:E4:24:D8:7F:9E:31:23:C5:87
X509v3 Authority Key Identifier:
keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:64:11:29:9a:b5:17:5a:5e:a9:a2:5b:a3:77:fb:34:97:e9:
fd:ea:e8:a5:7d:f8:ac:ad:c3:e6:a1:e0:f7:96:b6:c8:ab:47:
fd:01:cd:25:63:7e:16:fc:06:fb:7d:ee:ce:aa:39:78:e2:0b:
9d:f4:6b:30:2a:51:b1:b1:ff:16:a1:62:b0:e1:19:2e:07:6b:
7e:3b:66:ee:c8:e8:1b:4e:51:ca:2c:7b:5a:a4:b1:64:4b:05:
8b:2b:31:8f:16:76:ca:83:bd:37:6c:dc:e7:e4:f5:2b:a8:bb:
c1:a2:1c:be:16:9a:bb:f0:8c:1e:5c:48:dd:59:d8:ae:6c:04:
45:8d:84:c9:4a:41:69:68:00:25:8b:8f:cd:bd:68:24:d4:56:
63:41:be:d4:9d:3b:2d:e6:5a:cb:22:30:af:2c:32:53:c4:ff:
42:bd:ee:f2:9a:5f:6f:cd:19:a1:c5:88:54:d2:91:6b:93:9f:
02:5e:3c:97:9c:67:0c:43:22:8a:0c:73:fd:c4:e7:3b:76:e3:
13:ba:a4:1e:75:f4:98:88:77:3c:e2:e1:1d:07:97:77:6a:65:
a9:c1:20:74:5e:2a:70:02:f3:4d:ee:6a:0b:08:22:3f:3f:c2:
f9:42:2b:14:3a:11:52:c6:50:75:d5:4a:1a:8a:68:f0:0c:3d:
61:37:75:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:47:00 2026 by rpki-client