
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
File: wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft (raw, json)
Hash identifier: K0FXH8qrWB/pmVDfDsbV+pQwHEWClx/1/th65Jqgp74=
Subject key identifier: 5A:C2:6D:85:7F:7A:AF:00:DD:50:29:56:1D:73:2F:BB:94:BD:68:F9
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial: 1022
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
Manifest number: 0F89
Signing time: Fri 12 Jun 2026 17:31:32 +0000
Manifest this update: Fri 12 Jun 2026 17:31:32 +0000
Manifest next update: Fri 19 Jun 2026 17:31:32 +0000
Files and hashes: 1: wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl (hash: 7THdxf676DU7vCD+/AuV0XIVGCAGoCfVk4O3POikoMY=)
2: 2AE826A8BEE011F0BE9E3C56C4F9AE02.roa (hash: lBzSDBoFwPVYr9nVJeO11sVZPzap2yWKQHzgf1NyD54=)
3: 3D6D075A0ED011F0850DFC18C4F9AE02.roa (hash: tcES9bbnYa9sMd0E6c8ONg2SdJEFQ89dXJ9htMy/1nA=)
4: 218CF3401F9411F083A54B70C4F9AE02.roa (hash: AfxsSO9FHfjWy4GaK4DD9dFkkSVrMeZpOnYqrrHShdc=)
5: 20AB43C81F9411F083A54B70C4F9AE02.roa (hash: W3nL9md2m5OmRVt3q+FDbGg0y/1/j41/PMxuQ4IJIV0=)
6: 8BF4322E978211EF8ED65F7CC4F9AE02.roa (hash: OSSwVFSAWsYmpofbEjCTEo9DaTk6ZUaYIAQk2dLTs/4=)
7: 2A03C2CEBEE011F08AE93C56C4F9AE02.roa (hash: qM9hNon2vTx2jvL9zzyv+f9Ko2Ua+nbdbfuo0+REKkY=)
8: E23B9C48F97D11EDB12DE418C4F9AE02.roa (hash: 8Olp3JSJvstaBbTqUKuFXzKQ0iGuTK8M0EIzyJHsbfg=)
9: 1A582DBABDCB11ED998A723DC4F9AE02.roa (hash: 384juJSfXkpiKn653ckYH8G7gAqoZodCMxeGxqOmprY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4130 (0x1022)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Validity
Not Before: Jun 12 17:31:32 2026 GMT
Not After : Jun 19 17:31:32 2026 GMT
Subject: CN=6a2c4274-f479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:75:80:b1:58:7f:77:a1:4f:06:f3:5a:44:
5f:fe:2e:3a:05:40:29:aa:68:22:6b:2d:a8:6f:63:
7d:6f:29:a6:8c:2c:98:a1:f7:a9:02:07:cf:7c:85:
df:ba:bf:15:cf:0e:87:df:46:bc:d3:33:47:aa:46:
17:5c:e1:1d:9b:9c:03:7b:6a:49:c3:18:5f:31:8d:
a8:82:bf:ea:d4:45:57:d0:39:af:4f:a2:19:02:69:
1b:cf:c9:74:09:fe:8b:78:25:f4:72:df:0c:25:ec:
bb:c8:07:57:88:25:9d:62:0c:0b:07:a6:68:1e:42:
05:3d:59:59:fb:2c:b5:c9:ee:ad:71:39:a4:cc:0f:
20:39:2f:09:0e:a2:7b:31:2b:a2:ba:dc:99:d0:08:
9d:2a:3a:1a:a0:53:93:d6:0b:41:fc:03:8d:cf:ab:
97:a8:1b:3d:47:e7:08:4f:92:43:9a:14:a9:a6:cf:
17:65:a4:d9:2c:58:3e:aa:51:8d:21:f1:f4:ef:8e:
25:23:af:62:2a:62:bf:47:0d:dd:c6:74:83:ab:ad:
0e:2c:10:f6:75:f9:6f:76:4f:76:a8:61:d7:d4:01:
fb:a4:cb:95:82:e2:cc:41:34:41:a6:69:cf:c1:2b:
99:ec:1a:60:1e:bf:70:05:40:4f:4a:50:1f:78:23:
a2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C2:6D:85:7F:7A:AF:00:DD:50:29:56:1D:73:2F:BB:94:BD:68:F9
X509v3 Authority Key Identifier:
keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:41:27:e8:91:0b:29:c8:8b:25:40:73:92:4b:27:ad:ef:b4:
62:cb:b9:84:f0:78:b7:d0:f2:4d:31:3c:e9:63:a2:5a:bc:f6:
d7:aa:7b:6d:25:67:16:cc:c9:92:ee:8f:ec:41:3b:f9:68:1b:
93:15:6d:fc:e3:f3:c3:65:f2:bd:54:d3:02:ae:7c:7e:90:5f:
4a:58:0a:43:45:1e:ad:b5:ac:55:5f:9a:c5:2a:c7:42:6f:8c:
bf:26:e9:1e:71:1f:3e:7d:84:06:2f:a9:dc:d9:32:32:9b:1e:
bd:a3:74:54:49:11:e8:22:40:79:1e:18:ad:e8:dc:c7:ba:d4:
b1:70:67:c4:c5:31:68:15:c3:62:3f:62:2c:e5:5e:46:cf:77:
4e:53:d8:27:c6:ad:1b:c4:af:80:7f:ca:9e:b9:9c:b9:8b:ce:
59:50:47:33:6f:82:08:6f:d1:05:4d:27:8d:b6:9d:f1:d8:89:
45:3b:ff:00:e3:71:ed:e2:ed:47:86:0d:c6:10:97:5c:33:65:
af:0a:fa:50:02:60:f3:4e:7b:be:0f:1c:66:b5:ad:f1:76:36:
40:0c:56:6e:d2:b1:11:52:3e:09:2c:3d:b2:f9:75:e5:c4:13:
05:7f:83:98:4c:67:c6:29:7b:aa:4d:5e:ae:65:9d:6d:6a:21:
c0:a7:b3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:11:17 2026 by rpki-client