
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json)
Hash identifier: Y0wkyt7KyWW2uc0zBDd70U8Mzyesk5+015fKV5VwetI=
Subject key identifier: C3:AC:C0:45:DA:79:9E:12:42:E3:46:3B:EB:86:57:61:0D:62:CD:64
Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Certificate serial: 35D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
Manifest number: 355C
Signing time: Thu 16 Apr 2026 14:26:41 +0000
Manifest this update: Thu 16 Apr 2026 14:26:40 +0000
Manifest next update: Thu 23 Apr 2026 14:26:40 +0000
Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: 0nIc/6KDSC660GluLofsC1XGQTTgjzowvrNWOMUmai8=)
2: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: jgvloA4p8jwDkndKROuj2KaJOu+0VnyQm1S7vb4/ARo=)
3: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: nh33iXL7qlto9SPY3eGtRzqM7MNK4E7ZZsv8bnTGP0E=)
4: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: hP7biJkDS354Ac1lKBliVsjrL4sBRs39Al7da/cRPrg=)
5: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: rPUnL7lHYdjtoOgbW/NTPA75gMTNRBPXaMY8wYcuEDk=)
6: 967D3674CB7911F0B5816B84C4F9AE02.roa (hash: 0KMQ/55D5rrZWDAZvQGMwOpEu4hRv1HBS+IR1ld3fas=)
7: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: Vd536Yo/UmC9YisTI800kHevdHaCEUXlwObFTopHde0=)
8: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 5ZpkIo1n4Gv5uwa7NImU9M0kb+w/Ii5LkQHA44vK79I=)
9: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: Ac7ar5e+1Wqv3lV5cwQxtXQSoDcys5+NNyVEldaHACw=)
10: 78F6DFE8CB6411F0A28C973CC4F9AE02.roa (hash: gvi8hWhSZEyhI/MZ6vtRb0JcAY+iSRYiYJZi1gBmvRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13780 (0x35d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Validity
Not Before: Apr 16 14:26:40 2026 GMT
Not After : Apr 23 14:26:40 2026 GMT
Subject: CN=69e0f1a1-f460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:98:5e:de:1d:e2:02:55:c5:17:31:6f:08:
36:af:82:b5:20:03:19:95:fc:5a:36:9f:fe:ca:a6:
0d:7f:70:17:53:b7:d5:4f:10:6d:69:f5:cc:92:12:
93:e8:11:23:5d:f7:19:7b:c9:de:55:0c:26:b0:30:
1f:31:33:b1:17:95:10:3a:07:3f:48:75:97:b9:da:
12:17:ee:4b:ae:8a:7d:c8:b4:92:f7:41:59:f4:b8:
7f:91:64:da:1e:a5:fa:e1:00:40:6e:76:53:9c:d2:
98:8c:d2:73:af:7b:1c:14:6c:b0:72:6f:70:11:b9:
6b:74:07:69:f0:ac:35:e3:1e:52:e4:68:75:ae:1c:
ee:2e:85:0c:02:c9:cd:69:f2:fd:8c:9e:32:6d:95:
79:d1:ac:05:71:66:23:8d:9f:05:38:ba:46:a6:93:
01:39:16:80:d5:7f:27:27:f8:14:4a:75:08:70:7f:
89:12:96:51:ef:94:66:a4:0e:20:82:f2:9a:7a:30:
d7:d7:9a:d7:a2:75:09:29:ae:57:64:d8:99:ff:bc:
18:5a:23:12:74:37:2d:81:73:bf:82:08:8d:be:3d:
32:47:c1:d3:c3:ce:18:5f:bc:1b:20:8d:68:91:8a:
bd:0b:f0:46:d3:69:ab:7a:23:18:a6:86:04:25:a3:
59:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AC:C0:45:DA:79:9E:12:42:E3:46:3B:EB:86:57:61:0D:62:CD:64
X509v3 Authority Key Identifier:
keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:bf:f6:df:0e:0a:72:ad:c7:2b:fc:56:ad:ec:34:6c:70:ca:
76:df:03:4a:c5:c7:b2:bf:71:2a:9e:6b:1f:f4:94:ce:a3:d9:
4d:56:e3:bf:0f:5f:0d:aa:1d:5b:e5:31:b1:4f:60:df:7e:08:
02:5a:d6:09:8a:6c:2e:00:bd:0d:27:43:59:be:d7:0c:7d:27:
36:da:93:7e:5c:6a:98:d1:98:51:6f:a5:4a:de:6f:2a:78:fd:
da:5c:44:ea:e4:07:b8:a4:ba:52:48:48:24:f6:aa:52:6b:94:
a8:2d:e4:04:5c:dd:d4:df:14:04:7e:58:1a:d8:2a:1f:fd:b6:
3c:ff:0b:14:67:8c:c2:4d:21:43:b6:67:0a:f1:f9:3d:12:7a:
7c:d9:5e:fe:dc:ff:a3:11:dc:42:94:61:15:70:29:dd:b0:87:
ec:67:99:f6:c8:23:cf:32:6d:62:5d:3f:40:e0:c2:a0:f7:af:
0f:8a:55:7e:70:ee:bc:fa:8e:1f:0a:53:79:15:20:44:a3:0a:
de:04:47:86:d6:02:8f:d0:e7:2a:b7:b5:ad:1e:a8:71:70:1f:
58:c9:b3:e8:78:55:d0:53:57:04:8e:15:61:27:57:d5:58:d2:
99:cb:f1:2f:a7:d4:7a:0c:a4:31:fe:4c:f2:46:ff:22:e7:d6:
f4:ec:6a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:00 2026 by rpki-client