
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json)
Hash identifier: nuBRDyyik2ChTQVhOlsHEgCaNTTEpbNOHArQ2r3+5j0=
Subject key identifier: 95:B4:0D:AB:61:77:FD:69:DF:E3:73:25:B4:71:A7:F7:9A:C3:A2:C9
Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Certificate serial: 35A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
Manifest number: 3542
Signing time: Sat 28 Feb 2026 14:27:44 +0000
Manifest this update: Sat 28 Feb 2026 14:27:44 +0000
Manifest next update: Sat 07 Mar 2026 14:27:44 +0000
Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: 6k5luqz1jamJpvYy8Qip++lFO1wWYPJFIQlRXsLOknA=)
2: 967D3674CB7911F0B5816B84C4F9AE02.roa (hash: BQwwq/9YQwQ+4p/vesq8/lcXgVvZoMh+regCRgq6Ct4=)
3: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: OxEUrbCaeIQrz7Cmx3DZa1Mw78VTRBCEQgETIqtSd7M=)
4: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: sjr8e2VmDp9aY+0Un3uR3/RcH36QQjCSbP3K2E2tcGM=)
5: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: 9SFPliRLWVgMzAhsoFrZoD9hGbTlSx6F3ZY9j0noNeA=)
6: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: KFVo47tyxQ978JbhW6yXw6Gzt2rhljhzmAk+xm8+/Xc=)
7: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: LuDxiCImpxGx1ZWqZF2NHAPWbOW806MnleyjCvkT9qA=)
8: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: E1x69pSQBNCl6dSCsQvuhQ9GEQShDZPp50Mpb9L6sgs=)
9: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: RdiN3mL3aJTDy9OtX3TY1EXeJhBvhUO8Ov2IIbU6fyQ=)
10: 78F6DFE8CB6411F0A28C973CC4F9AE02.roa (hash: PqfLVn70GRunEWhxQEzeuqDLD73H9uNj6xRy98jkRoY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13736 (0x35a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Validity
Not Before: Feb 28 14:27:44 2026 GMT
Not After : Mar 7 14:27:44 2026 GMT
Subject: CN=69a2fb60-4966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:0e:61:8f:77:34:81:d2:a0:93:2a:8a:21:
c2:0d:e5:a5:25:bc:fd:b3:4c:71:4d:b6:1b:b6:08:
76:6a:4a:15:f4:b0:aa:b9:bb:91:9a:76:d4:e8:56:
84:be:15:d6:17:b6:19:64:d3:4c:53:c9:f0:00:4e:
77:e7:38:9f:e8:b4:be:ec:3b:35:fa:ad:08:e4:b4:
9c:91:b9:5b:3b:46:31:cf:b3:23:30:7f:56:9c:cb:
ad:2f:10:f9:2b:ea:f6:9e:35:dc:b4:99:b3:99:93:
83:2e:a7:95:0e:af:02:f9:ed:b7:16:95:35:ca:cc:
b6:6b:ae:ff:01:e7:83:67:fa:79:2b:47:47:0d:8a:
f3:37:6a:23:94:b8:7d:dd:45:38:09:b1:a9:13:c4:
21:e8:01:0f:f8:ef:bd:8d:bc:fd:85:6a:10:7e:2d:
f6:a1:c2:c7:f0:63:0f:8c:e5:eb:ad:6a:2f:25:3d:
a2:a8:ab:2c:7c:38:67:f9:bb:59:be:3e:7b:4d:12:
a4:6f:0b:d3:6a:a6:f4:83:3c:52:c1:7d:08:e4:71:
e5:fd:0b:ba:b9:46:d1:1d:1e:9d:c1:33:7a:89:42:
1d:5f:ba:d7:d5:75:cb:bd:07:0c:51:5b:95:73:4f:
db:c1:9d:f1:d3:8e:c7:2a:62:ef:62:8b:16:c0:43:
fa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B4:0D:AB:61:77:FD:69:DF:E3:73:25:B4:71:A7:F7:9A:C3:A2:C9
X509v3 Authority Key Identifier:
keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fa:96:2c:16:59:c3:5b:b9:45:57:72:fd:01:87:78:20:7b:
e3:11:4e:c0:4e:8e:fb:7c:00:93:c6:55:a0:7e:9f:22:e7:15:
58:d1:0c:9f:1b:11:4e:dd:12:c5:7a:ae:6b:a3:b2:ac:5c:eb:
2b:f6:18:de:e8:8c:79:ab:4e:46:93:ea:eb:3e:d2:83:3b:0e:
b9:bb:45:81:17:ac:fa:4c:7c:20:54:2b:f1:bf:6a:8a:20:0e:
8b:d7:63:88:1b:4e:7a:c0:ce:99:e1:2d:66:94:19:ca:67:22:
17:ad:af:31:8c:e5:18:db:9d:78:61:13:6f:da:5c:e9:82:25:
1e:68:df:7f:e8:8f:af:52:7b:88:0c:62:63:ee:77:f0:ea:50:
35:56:7a:8a:a3:d9:e0:ee:fd:52:d2:d0:f0:c7:ff:ad:61:c3:
e6:65:a5:b7:53:69:ef:de:3c:68:59:c7:80:30:1d:ba:71:db:
12:64:25:ed:90:d9:93:46:c6:e3:ce:b5:89:29:4f:1f:c2:67:
70:1e:0b:2d:f4:3e:cf:14:b8:0d:16:63:17:1f:eb:69:64:12:
41:70:22:ed:eb:df:23:d5:51:86:fb:77:50:7e:5c:d1:f9:0b:
ce:13:87:22:8f:3b:d0:ac:09:ba:3a:24:02:19:33:7d:2a:54:
be:21:19:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw
NERBMTJGOUQwHhcNMjYwMjI4MTQyNzQ0WhcNMjYwMzA3MTQyNzQ0WjAYMRYwFAYD
VQQDDA02OWEyZmI2MC00OTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqrUOYY93NIHSoJMqiiHCDeWlJbz9s0xxTbYbtgh2akoV9LCqubuRmnbU6FaE
vhXWF7YZZNNMU8nwAE535zif6LS+7Ds1+q0I5LSckblbO0Yxz7MjMH9WnMutLxD5
K+r2njXctJmzmZODLqeVDq8C+e23FpU1ysy2a67/AeeDZ/p5K0dHDYrzN2ojlLh9
3UU4CbGpE8Qh6AEP+O+9jbz9hWoQfi32ocLH8GMPjOXrrWovJT2iqKssfDhn+btZ
vj57TRKkbwvTaqb0gzxSwX0I5HHl/Qu6uUbRHR6dwTN6iUIdX7rX1XXLvQcMUVuV
c0/bwZ3x047HKmLvYosWwEP6SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJW0Dath
d/1p3+NzJbRxp/eaw6LJMB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE
ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OUUzQS8xOTdFQzBCNjFEODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpK
VFpJNTFTcnpXc0VFMmhMNTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfvqWLBZZw1u5RVdy/QGHeCB74xFOwE6O+3wAk8ZVoH6fIucVWNEMnxsRTt0S
xXqua6OyrFzrK/YY3uiMeatORpPq6z7SgzsOubtFgRes+kx8IFQr8b9qiiAOi9dj
iBtOesDOmeEtZpQZymciF62vMYzlGNudeGETb9pc6YIlHmjff+iPr1J7iAxiY+53
8OpQNVZ6iqPZ4O79UtLQ8Mf/rWHD5mWlt1Np7948aFnHgDAdunHbEmQl7ZDZk0bG
4861iSlPH8JncB4LLfQ+zxS4DRZjFx/raWQSQXAi7evfI9VRhvt3UH5c0fkLzhOH
Io870KwJujokAhkzfSpUviEZwA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:58 2026 by rpki-client