
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
File: weInZRraO_vBh3GuyLYAJnI7YK0.mft (raw, json)
Hash identifier: cEoSndpi8kC0+COSunxBQDA0BmyYSvrsv3pUBgIy4wM=
Subject key identifier: F8:3D:8B:E5:AA:B3:90:4D:DB:68:D7:CB:47:0B:A2:40:F3:90:B0:F9
Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
Certificate issuer: /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Certificate serial: 29F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
Manifest number: 29B4
Signing time: Tue 28 Jul 2026 15:40:41 +0000
Manifest this update: Tue 28 Jul 2026 15:40:40 +0000
Manifest next update: Tue 04 Aug 2026 15:40:40 +0000
Files and hashes: 1: weInZRraO_vBh3GuyLYAJnI7YK0.crl (hash: QNDJByLnZWjzJJJhdG1DGLMiSZibFOn2M32phCCwEvA=)
2: C3876BD8589D11EC9CF19A41C4F9AE02.roa (hash: er4abjooP2pzYLbFn4zXYhItU6fj/FaQ5TH/f8stFqc=)
3: 3AB3F80E578611EA8CC3B124C4F9AE02.roa (hash: C5FmIwbgprkig61fqNmKWaJWuBinr8tfV+3G1uObZOs=)
4: 39932724578611EA8CC3B124C4F9AE02.roa (hash: 5xVxyBLTVv6TTJwr4d6CRZOAj/oOkKXh9D4XacOHsAU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:40:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10736 (0x29f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Validity
Not Before: Jul 28 15:40:40 2026 GMT
Not After : Aug 4 15:40:40 2026 GMT
Subject: CN=6a68cd78-8e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:aa:d9:49:54:fb:e9:9c:68:a5:2e:41:86:
90:4d:ee:2c:56:82:bc:98:35:f3:d8:18:c1:4a:f6:
48:1f:49:a3:2b:5c:1c:ac:6e:82:8d:9d:3f:c7:2d:
2f:04:82:65:52:bc:be:7f:c7:9e:ab:10:5f:04:89:
84:62:f5:4e:bb:00:3a:e5:41:3c:5c:49:9a:83:2b:
a1:ec:37:9a:8f:6a:3d:ea:f2:ef:9e:4e:a7:c4:ed:
b6:71:54:f9:76:9d:60:c0:49:42:a6:d8:33:fb:e1:
42:50:d4:33:ee:ef:b7:9c:a6:59:9a:7f:a2:4e:9d:
13:db:61:b4:35:68:b0:13:13:51:bb:11:8e:d7:24:
a0:6e:fc:62:3e:18:0c:69:c5:87:0a:12:49:d5:6e:
24:b6:fb:68:0e:e8:8c:07:73:c9:fb:c2:48:0a:db:
c2:05:ba:af:8c:7e:ef:8f:98:0e:60:99:ac:45:f8:
1a:eb:e4:bc:f7:99:b2:bc:f5:c5:6b:cb:03:d6:48:
f7:59:32:c8:af:aa:b4:22:87:38:f7:67:39:ca:4d:
1a:76:be:10:ab:4b:75:d2:15:bf:fa:75:41:bd:b4:
11:ff:7c:ef:1b:bb:56:10:be:20:49:99:e3:94:13:
63:29:97:82:de:be:31:d0:02:c1:b0:8f:ee:8b:0e:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3D:8B:E5:AA:B3:90:4D:DB:68:D7:CB:47:0B:A2:40:F3:90:B0:F9
X509v3 Authority Key Identifier:
keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:68:33:5a:ce:5e:77:a2:d8:c0:24:de:23:4b:38:a0:95:4f:
db:0e:17:16:35:40:58:d9:ba:ce:73:24:c9:60:a5:fd:ca:74:
57:86:af:b6:6b:b4:9a:07:4f:2d:ba:44:2d:b2:63:f8:9d:f5:
d3:06:46:1f:27:b7:b6:8b:f2:c8:5f:01:a4:36:18:14:f3:84:
31:57:b1:26:bf:fc:cd:78:6d:45:f0:bd:b6:78:8c:ef:1d:66:
dc:4e:96:33:2d:e9:e5:2e:e5:cb:4c:1a:9a:dd:ad:a0:41:31:
a6:c9:76:de:67:04:18:a1:10:60:39:92:e5:34:60:18:6c:2e:
84:43:25:cf:5a:08:55:ac:81:38:70:36:c0:cf:06:1d:1e:2a:
d0:4f:50:41:04:00:b0:c5:b3:f3:f0:be:e4:89:84:f2:c7:4f:
c5:49:a8:9d:25:9b:3b:63:49:c3:f3:da:80:19:15:41:4f:bd:
95:be:2c:a5:33:48:1e:07:b2:99:8d:e7:47:48:37:cd:a8:c4:
77:90:5c:b9:62:b8:ea:e5:8b:53:84:62:90:56:a8:4c:54:45:
23:62:9c:f9:52:e7:d6:c3:c2:de:0c:57:22:c2:19:7e:03:6d:
4a:a7:3e:be:24:9f:7b:4a:f9:8b:61:b5:33:2a:e3:47:6c:69:
25:fa:4d:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI3MDcxMTAvBgNVBAUTKEMxRTIyNzY1MUFEQTNCRkJDMTg3NzFBRUM4QjYwMDI2
NzIzQjYwQUQwHhcNMjYwNzI4MTU0MDQwWhcNMjYwODA0MTU0MDQwWjAYMRYwFAYD
VQQDEw02YTY4Y2Q3OC04ZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmsKq2UlU++mcaKUuQYaQTe4sVoK8mDXz2BjBSvZIH0mjK1wcrG6CjZ0/xy0v
BIJlUry+f8eeqxBfBImEYvVOuwA65UE8XEmagyuh7Deaj2o96vLvnk6nxO22cVT5
dp1gwElCptgz++FCUNQz7u+3nKZZmn+iTp0T22G0NWiwExNRuxGO1ySgbvxiPhgM
acWHChJJ1W4ktvtoDuiMB3PJ+8JICtvCBbqvjH7vj5gOYJmsRfga6+S895myvPXF
a8sD1kj3WTLIr6q0Ioc492c5yk0adr4Qq0t10hW/+nVBvbQR/3zvG7tWEL4gSZnj
lBNjKZeC3r4x0ALBsI/uiw6o7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPg9i+Wq
s5BN22jXy0cLokDzkLD5MB8GA1UdIwQYMBaAFMHiJ2Ua2jv7wYdxrsi2ACZyO2Ct
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjcwNy9CNEFDRTE2NDcw
QjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9fdkJoM0d1eUxZQUpuSTdZ
SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dlSW5aUnJhT192QmgzR3V5TFlBSm5JN1lLMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjcwNy9CNEFDRTE2NDcwQjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9f
dkJoM0d1eUxZQUpuSTdZSzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA02gzWs5ed6LYwCTeI0s4oJVP2w4XFjVAWNm6znMkyWCl/cp0V4avtmu0mgdP
LbpELbJj+J310wZGHye3tovyyF8BpDYYFPOEMVexJr/8zXhtRfC9tniM7x1m3E6W
My3p5S7ly0wamt2toEExpsl23mcEGKEQYDmS5TRgGGwuhEMlz1oIVayBOHA2wM8G
HR4q0E9QQQQAsMWz8/C+5ImE8sdPxUmonSWbO2NJw/PagBkVQU+9lb4spTNIHgey
mY3nR0g3zajEd5BcuWK46uWLU4RikFaoTFRFI2Kc+VLn1sPC3gxXIsIZfgNtSqc+
viSfe0r5i2G1MyrjR2xpJfpN2A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:44:08 2026 by rpki-client