
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json)
Hash identifier: 1STsmXVJXujIlRwAAnJ9TmDVr1rTNPGG3+PyeEnGMwY=
Subject key identifier: 9E:8B:44:59:B9:BE:E1:21:16:C4:6F:09:29:F4:AC:B5:83:A0:92:01
Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Certificate serial: 35F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
Manifest number: 3579
Signing time: Fri 12 Jun 2026 14:26:50 +0000
Manifest this update: Fri 12 Jun 2026 14:26:50 +0000
Manifest next update: Fri 19 Jun 2026 14:26:50 +0000
Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: vX+7C7shISPLPtF3XtTtkc2oobZow+m9B4cqxhL/k/Q=)
2: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: rPUnL7lHYdjtoOgbW/NTPA75gMTNRBPXaMY8wYcuEDk=)
3: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 5ZpkIo1n4Gv5uwa7NImU9M0kb+w/Ii5LkQHA44vK79I=)
4: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: Ac7ar5e+1Wqv3lV5cwQxtXQSoDcys5+NNyVEldaHACw=)
5: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: jgvloA4p8jwDkndKROuj2KaJOu+0VnyQm1S7vb4/ARo=)
6: 967D3674CB7911F0B5816B84C4F9AE02.roa (hash: 0KMQ/55D5rrZWDAZvQGMwOpEu4hRv1HBS+IR1ld3fas=)
7: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: Vd536Yo/UmC9YisTI800kHevdHaCEUXlwObFTopHde0=)
8: 78F6DFE8CB6411F0A28C973CC4F9AE02.roa (hash: gvi8hWhSZEyhI/MZ6vtRb0JcAY+iSRYiYJZi1gBmvRI=)
9: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: nh33iXL7qlto9SPY3eGtRzqM7MNK4E7ZZsv8bnTGP0E=)
10: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: hP7biJkDS354Ac1lKBliVsjrL4sBRs39Al7da/cRPrg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13809 (0x35f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Validity
Not Before: Jun 12 14:26:50 2026 GMT
Not After : Jun 19 14:26:50 2026 GMT
Subject: CN=6a2c172a-5ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:14:89:76:05:48:97:ed:26:49:8f:b4:82:d0:
13:a2:f8:5d:a3:01:b1:a5:c9:db:a6:dd:f3:61:1f:
7a:11:65:44:2c:9b:b5:bd:57:24:71:e2:57:50:03:
ec:76:5a:78:7f:03:b0:01:d0:3f:15:06:49:c2:8c:
f3:cd:8e:f5:33:d5:e5:1d:b2:ff:4a:86:c4:72:e7:
ba:f6:cb:d7:2a:de:11:7a:6f:d4:2d:69:40:6f:89:
b9:ca:a8:e5:13:6d:4f:20:87:bb:b6:6e:9e:1f:20:
85:c2:6a:8d:89:a9:f6:ba:42:66:2a:40:0c:d5:ef:
d5:50:c9:b6:7d:37:15:30:ff:75:99:7c:8c:f2:c6:
a9:c4:29:41:39:0d:f9:d9:57:d8:b6:52:2b:e0:9a:
e9:10:fd:c5:e3:3c:7d:58:ba:91:09:7d:08:b9:03:
88:c6:87:12:63:f4:46:7c:10:1f:7b:c2:36:48:7c:
bb:fb:91:36:16:98:a6:70:35:a4:7c:40:dd:8c:16:
37:90:05:8e:7e:17:8a:34:5a:54:66:0f:8d:99:21:
bc:b4:8b:66:e3:48:f2:ee:42:a6:5d:1c:c3:6f:f8:
9a:43:50:2a:17:eb:c1:46:5b:e0:ac:c9:cb:ea:ec:
5c:1b:47:3a:73:b4:d3:36:06:2a:38:7a:c1:e2:4b:
78:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8B:44:59:B9:BE:E1:21:16:C4:6F:09:29:F4:AC:B5:83:A0:92:01
X509v3 Authority Key Identifier:
keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:77:ba:e6:68:0e:0b:05:bf:4b:8e:41:05:b7:93:a1:5a:7a:
bf:57:51:86:4e:d5:4c:ea:0b:b8:25:d7:6f:e6:af:c8:60:9f:
fc:2f:aa:a7:1b:21:34:5e:03:97:68:b1:7a:60:3f:f7:48:fd:
e7:43:cc:66:df:ec:89:38:6d:92:47:da:2c:b7:97:60:52:4e:
6a:2a:1a:8c:1f:95:fb:e2:62:f0:67:55:18:ed:99:51:22:c4:
3e:4f:fd:45:cb:fd:3f:ca:5b:b3:c6:93:4b:c9:b0:8f:16:1d:
d2:51:1a:f2:3d:9d:c3:41:9a:31:aa:10:42:76:1e:d8:55:0c:
50:09:67:ba:bf:88:e3:a7:b5:99:5f:68:05:e3:a8:9d:9a:89:
5b:56:87:bf:e4:59:99:cb:82:5a:66:4b:4f:72:76:df:d3:fa:
52:21:01:ed:53:d6:b1:4b:2b:47:1e:11:67:0a:a7:7d:6d:ba:
d0:4b:67:18:d6:3c:dd:1a:1a:83:b4:88:27:00:d0:6f:6b:93:
fc:52:49:81:98:6f:de:fa:9e:7d:8d:9f:55:df:33:1c:4f:f2:
93:ea:9b:d7:b3:05:83:62:58:57:7b:0f:3a:f5:87:2c:bc:20:
ce:cf:d6:80:42:c6:22:86:95:a8:c6:c4:41:b9:79:dd:29:72:
71:cd:47:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:23:26 2026 by rpki-client