
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json)
Hash identifier: wDm+iBM1mO8eksAghyaqiroJfoYANilowniNWSjc9VE=
Subject key identifier: E5:D7:4E:6E:5E:56:1A:43:7E:D4:90:F2:8A:17:95:66:30:67:01:19
Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Certificate serial: 35BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
Manifest number: 3544
Signing time: Mon 02 Mar 2026 02:36:49 +0000
Manifest this update: Mon 02 Mar 2026 02:36:48 +0000
Manifest next update: Mon 09 Mar 2026 02:36:48 +0000
Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: 0E9BhZLFYACVuZPs7mY6Nq90je+ntXYz4+bWc1LXjfc=)
2: 78F6DFE8CB6411F0A28C973CC4F9AE02.roa (hash: gvi8hWhSZEyhI/MZ6vtRb0JcAY+iSRYiYJZi1gBmvRI=)
3: 967D3674CB7911F0B5816B84C4F9AE02.roa (hash: 0KMQ/55D5rrZWDAZvQGMwOpEu4hRv1HBS+IR1ld3fas=)
4: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 5ZpkIo1n4Gv5uwa7NImU9M0kb+w/Ii5LkQHA44vK79I=)
5: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: jgvloA4p8jwDkndKROuj2KaJOu+0VnyQm1S7vb4/ARo=)
6: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: nh33iXL7qlto9SPY3eGtRzqM7MNK4E7ZZsv8bnTGP0E=)
7: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: hP7biJkDS354Ac1lKBliVsjrL4sBRs39Al7da/cRPrg=)
8: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: rPUnL7lHYdjtoOgbW/NTPA75gMTNRBPXaMY8wYcuEDk=)
9: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: Vd536Yo/UmC9YisTI800kHevdHaCEUXlwObFTopHde0=)
10: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: Ac7ar5e+1Wqv3lV5cwQxtXQSoDcys5+NNyVEldaHACw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13756 (0x35bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Validity
Not Before: Mar 2 02:36:48 2026 GMT
Not After : Mar 9 02:36:48 2026 GMT
Subject: CN=69a4f7c0-419c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:79:b5:f2:87:1f:c3:21:e5:30:cd:a6:43:
00:9f:89:b1:a5:62:ad:5a:47:45:17:cc:d5:4f:d4:
2a:71:7c:0a:b1:30:a2:ad:5f:4d:f8:8f:5c:43:97:
b1:9a:c1:80:d1:8c:0b:a6:ac:eb:59:c8:6a:3b:7d:
37:52:fb:1e:92:b2:36:4d:d7:87:be:f6:53:e1:81:
81:88:f5:78:71:9d:94:34:90:20:b9:09:26:fd:77:
b4:aa:7c:f9:ee:b1:fe:6a:15:ad:3c:22:c7:ab:5d:
b8:9a:21:a5:71:bc:b0:59:9f:22:b5:ec:bd:9f:a3:
6e:b5:94:bf:b6:78:37:55:6e:90:fe:7d:0d:9f:9f:
48:b2:3c:b3:46:f1:9a:07:4a:1f:e4:3f:4b:02:2e:
3b:f0:d9:8c:f6:eb:83:d7:19:c3:ca:fa:7d:67:9a:
73:48:c8:b2:31:6f:e9:9b:f8:ce:33:43:91:35:b8:
89:81:46:cf:c9:d2:d6:10:99:66:b6:fb:1f:ca:22:
59:45:f2:9d:ef:ed:93:7f:31:3f:99:ae:1b:f5:93:
bc:ef:d4:1b:a0:df:0e:24:95:10:3a:27:01:86:2e:
a7:e8:1c:2c:53:2f:d8:f0:d4:63:12:34:7b:24:2f:
48:fd:83:ae:0b:7e:99:d6:f0:f1:7a:24:99:af:9b:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D7:4E:6E:5E:56:1A:43:7E:D4:90:F2:8A:17:95:66:30:67:01:19
X509v3 Authority Key Identifier:
keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0a:75:f6:ae:2e:f3:4d:07:4b:0b:2e:69:e2:80:d3:6f:3b:
34:a6:ec:24:c3:d7:e7:38:1c:06:3c:45:59:8b:08:5e:a0:e9:
9c:10:eb:cb:d7:9a:dd:6e:c7:a3:04:03:95:05:c4:7c:bb:a0:
69:99:9c:6f:bb:90:f4:9a:c4:1f:ff:56:1f:76:71:d6:ba:03:
81:8d:9e:d8:8c:dd:7a:70:b2:a2:f6:63:41:19:3b:11:87:09:
59:c6:56:5d:2c:e0:ea:d5:29:bd:74:3b:a5:b2:96:3a:06:bd:
39:39:53:11:40:48:be:86:32:01:cf:2b:0d:f1:e6:a6:be:b0:
a2:b3:9a:3f:93:11:11:45:14:81:86:e0:ba:05:5c:50:cf:0f:
83:b2:c6:d7:f6:5a:8c:91:2d:7f:64:a3:b0:c7:7f:2f:4f:40:
75:d6:4e:7d:66:70:57:80:5d:81:5b:26:9e:8a:c8:ea:c8:66:
54:62:2c:bb:b5:5c:4b:29:f1:fd:9a:0b:a4:89:9b:dd:6c:86:
dd:ce:03:62:be:01:ea:32:14:4d:53:1b:38:ec:c6:a1:71:4f:
22:2e:0b:11:0a:1a:4a:13:76:09:ff:a4:ac:79:30:ce:9a:de:
b7:2d:94:78:22:95:0b:5d:c6:7f:88:41:14:ec:e5:6e:a4:f9:
f6:3b:0f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:51 2026 by rpki-client