
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json)
Hash identifier: XrvcCxj4mAETx+Syz7yXLeiQP6vcaTaaftyH5/qCpR0=
Subject key identifier: 27:0A:2E:4F:82:7E:CC:F8:78:56:1B:0C:14:4E:49:96:7F:CB:83:B9
Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Certificate serial: 3608
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
Manifest number: 3590
Signing time: Tue 28 Jul 2026 14:27:29 +0000
Manifest this update: Tue 28 Jul 2026 14:27:29 +0000
Manifest next update: Tue 04 Aug 2026 14:27:29 +0000
Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: BtOFOKefgdjG4OsfM6HqiS8upvQAhfJRBNDP4rEuFus=)
2: 967D3674CB7911F0B5816B84C4F9AE02.roa (hash: 0KMQ/55D5rrZWDAZvQGMwOpEu4hRv1HBS+IR1ld3fas=)
3: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: hP7biJkDS354Ac1lKBliVsjrL4sBRs39Al7da/cRPrg=)
4: 78F6DFE8CB6411F0A28C973CC4F9AE02.roa (hash: gvi8hWhSZEyhI/MZ6vtRb0JcAY+iSRYiYJZi1gBmvRI=)
5: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: nh33iXL7qlto9SPY3eGtRzqM7MNK4E7ZZsv8bnTGP0E=)
6: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 5ZpkIo1n4Gv5uwa7NImU9M0kb+w/Ii5LkQHA44vK79I=)
7: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: rPUnL7lHYdjtoOgbW/NTPA75gMTNRBPXaMY8wYcuEDk=)
8: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: jgvloA4p8jwDkndKROuj2KaJOu+0VnyQm1S7vb4/ARo=)
9: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: Vd536Yo/UmC9YisTI800kHevdHaCEUXlwObFTopHde0=)
10: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: Ac7ar5e+1Wqv3lV5cwQxtXQSoDcys5+NNyVEldaHACw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13832 (0x3608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Validity
Not Before: Jul 28 14:27:29 2026 GMT
Not After : Aug 4 14:27:29 2026 GMT
Subject: CN=6a68bc51-16f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:3a:4c:bb:64:6d:a9:c2:9c:66:ba:cc:ff:
57:93:2a:6e:53:c3:6f:48:52:8e:0c:be:27:22:1c:
2c:1d:67:7e:b4:3b:3a:04:05:ce:b2:ec:3a:cc:d8:
f9:39:e5:17:b9:92:b6:29:1c:47:cf:7c:eb:af:07:
b3:e6:d0:76:69:c9:aa:3f:a1:4e:e8:59:8f:b3:a7:
27:e7:4c:60:34:6d:46:a0:0f:2a:37:f9:1b:b7:7d:
aa:c8:a0:8e:92:60:1b:83:b2:e8:48:df:9c:8f:c1:
38:9e:ce:51:27:eb:af:0d:0a:95:5d:8e:59:ed:e5:
7e:44:e6:ab:6b:6a:0c:15:1d:3f:d9:d1:cc:2f:ab:
fd:04:07:85:d3:9a:91:97:6f:bf:fe:63:d2:12:b5:
63:c3:3a:68:53:c4:70:cf:e3:55:48:06:55:ec:39:
4f:fa:ea:62:dc:24:7b:52:51:82:71:a8:37:ad:b8:
11:30:50:ed:d2:16:d8:b1:64:67:e9:be:c9:26:8e:
7d:58:30:05:5e:27:47:95:f8:1f:d7:1d:e9:9b:58:
6e:d3:7b:d7:ce:03:d2:28:92:1e:77:b1:43:be:3a:
c4:26:8b:d9:1d:86:2e:58:ee:ed:8e:59:d0:b0:44:
98:ec:77:c1:37:1f:a1:20:f7:d1:de:8f:92:e8:e6:
fc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0A:2E:4F:82:7E:CC:F8:78:56:1B:0C:14:4E:49:96:7F:CB:83:B9
X509v3 Authority Key Identifier:
keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:92:68:55:78:75:e9:3f:5e:77:ee:3c:fe:84:c1:3b:f3:f1:
7f:10:56:56:81:03:43:e2:c4:c2:a0:c8:32:9b:f0:11:84:05:
22:a2:fb:9a:9e:4a:48:78:88:26:39:f4:82:6f:e4:8b:50:77:
93:80:a8:9d:d9:20:97:0a:07:80:72:64:e0:63:82:2e:09:6a:
5e:5d:4d:e8:10:78:c3:f4:b4:de:f0:57:bd:3c:0b:3a:f2:b3:
dd:5c:21:0f:68:69:67:09:dc:9c:80:45:b2:01:7e:05:48:81:
9c:f9:a0:b0:60:95:aa:1f:66:d9:4a:cf:fa:20:cf:f0:d4:5a:
82:de:94:46:a2:48:d3:41:de:d8:b6:04:f4:d2:fd:ed:ce:2a:
3c:95:2b:d0:42:6a:4d:f4:71:e0:a8:e0:2f:1c:15:97:a5:e8:
11:47:35:cb:d4:45:32:29:ff:d1:aa:ce:73:b2:f8:50:0a:2b:
57:80:4b:32:77:30:03:09:6b:18:e2:4b:02:94:ab:c7:37:91:
48:c3:4a:f1:c9:89:65:9e:d5:11:89:0e:52:c9:6f:01:71:d4:
15:b1:78:cf:6c:f4:7b:4b:1f:be:69:d1:a0:fd:30:c7:05:bc:
17:a6:7e:dd:3b:3b:ab:3e:bf:db:6d:20:ad:c9:01:cf:e9:1a:
8e:0b:38:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:17 2026 by rpki-client