
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json)
Hash identifier: hxs0jFVHvzi3bH2ynmYBQv0zwu6i4EZ7hv5Drgf5YH8=
Subject key identifier: 8C:1C:96:38:00:70:1E:0B:00:F9:95:AE:BE:25:2E:C1:E6:63:A0:D9
Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Certificate serial: 3624
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
Manifest number: 35AC
Signing time: Sun 20 Sep 2026 14:26:25 +0000
Manifest this update: Sun 20 Sep 2026 14:26:25 +0000
Manifest next update: Sun 27 Sep 2026 14:26:25 +0000
Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: wxc6QEwNRvEaYQbfLSmcY7Fxik8H4Zb9Co+oWYFBkXQ=)
2: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: rPUnL7lHYdjtoOgbW/NTPA75gMTNRBPXaMY8wYcuEDk=)
3: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: nh33iXL7qlto9SPY3eGtRzqM7MNK4E7ZZsv8bnTGP0E=)
4: 78F6DFE8CB6411F0A28C973CC4F9AE02.roa (hash: gvi8hWhSZEyhI/MZ6vtRb0JcAY+iSRYiYJZi1gBmvRI=)
5: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: Vd536Yo/UmC9YisTI800kHevdHaCEUXlwObFTopHde0=)
6: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 5ZpkIo1n4Gv5uwa7NImU9M0kb+w/Ii5LkQHA44vK79I=)
7: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: hP7biJkDS354Ac1lKBliVsjrL4sBRs39Al7da/cRPrg=)
8: 967D3674CB7911F0B5816B84C4F9AE02.roa (hash: 0KMQ/55D5rrZWDAZvQGMwOpEu4hRv1HBS+IR1ld3fas=)
9: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: jgvloA4p8jwDkndKROuj2KaJOu+0VnyQm1S7vb4/ARo=)
10: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: Ac7ar5e+1Wqv3lV5cwQxtXQSoDcys5+NNyVEldaHACw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 14:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13860 (0x3624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Validity
Not Before: Sep 20 14:26:25 2026 GMT
Not After : Sep 27 14:26:25 2026 GMT
Subject: CN=6aafed11-3ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:fd:5d:07:4a:7b:3c:7a:24:c6:4b:2d:ab:
0b:5f:a8:4f:b5:fd:37:7d:77:70:64:00:33:a2:a3:
43:e9:55:77:cb:06:82:40:74:61:1b:fd:0c:be:e8:
10:87:7f:3b:cd:53:ba:f5:37:ba:cf:fc:05:61:d7:
42:a6:1b:87:b1:2e:cc:06:7a:ee:48:e8:b7:06:40:
67:7c:02:d7:2c:4d:77:b9:cc:17:7d:6c:b5:34:19:
a9:b5:68:d0:99:87:57:0b:4d:06:3b:b7:ee:db:7b:
1d:1b:0b:d5:4a:37:c2:6b:a6:17:5a:72:9c:6d:7f:
77:9b:a4:2c:bc:85:00:7d:92:c9:a7:6c:96:60:ae:
72:dc:2b:ad:ef:cf:dd:8e:45:aa:87:ab:7b:9f:fb:
69:89:dd:94:36:69:f7:0d:a8:fd:d2:38:15:94:8c:
ea:af:24:ab:3e:0c:42:53:21:0b:47:7a:e6:d5:f1:
fb:14:e0:16:4a:c1:1d:f2:eb:a7:94:04:ba:e7:57:
a8:b3:d1:70:5d:de:91:62:88:58:72:0a:49:e2:fc:
6d:c3:a0:8b:40:69:5f:f0:eb:24:58:97:92:8b:10:
b7:7d:11:6f:85:92:14:5a:81:d5:7b:6d:02:09:72:
c5:34:18:dd:d4:e1:83:11:79:53:a1:04:7a:f1:ec:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1C:96:38:00:70:1E:0B:00:F9:95:AE:BE:25:2E:C1:E6:63:A0:D9
X509v3 Authority Key Identifier:
keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:6d:d4:8a:cf:b3:82:cf:80:29:23:0b:a9:d2:c9:72:78:9e:
b6:a6:24:93:e5:d0:8d:e6:23:67:89:eb:e2:65:66:be:27:50:
ec:1b:ad:1d:2c:64:85:26:72:55:da:6f:4e:0c:79:15:22:15:
c8:e5:53:42:ff:de:c5:c4:01:0a:11:05:f5:69:09:0f:c7:3e:
5a:37:16:e0:5d:35:62:7a:74:76:87:3b:30:84:89:5b:71:5c:
02:27:1d:b1:1d:8d:17:93:86:07:81:7f:39:38:c1:9d:06:f8:
c7:c2:e0:a4:4c:34:22:dd:30:ff:b9:1d:21:34:f9:61:33:7b:
41:3f:00:65:39:2c:e8:d5:d3:c6:22:d5:ea:42:3c:ae:ae:c4:
3e:d6:f9:f8:79:ae:92:f6:c4:6f:0c:09:11:a7:d2:a6:ff:86:
32:6b:f3:b1:02:96:bc:51:d1:d5:32:da:45:a8:09:6d:a0:ec:
5d:2d:1e:89:4e:db:ca:a9:4b:bb:28:0f:3d:f7:aa:7f:1d:36:
fb:02:6d:11:dc:d2:88:d6:7d:2e:20:3b:56:75:3e:d2:e5:b7:
ee:ea:83:0d:8f:04:a8:be:bb:a4:fe:74:7e:07:cc:18:0d:df:
67:7b:77:c9:2f:92:50:39:cf:1b:3f:9a:71:48:44:8b:ad:39:
9c:da:dc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:05:58 2026 by rpki-client