
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
File: wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft (raw, json)
Hash identifier: HAaxSkyHyT04WDGjCezjojvaTlbBJjOGnDpkogBzmo0=
Subject key identifier: 49:3F:76:32:66:2E:AC:B0:A3:FB:21:B5:59:1C:C0:40:E1:A4:BE:89
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial: 1063
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
Manifest number: 0FCA
Signing time: Sun 18 Oct 2026 17:34:52 +0000
Manifest this update: Sun 18 Oct 2026 17:34:51 +0000
Manifest next update: Sun 25 Oct 2026 17:34:51 +0000
Files and hashes: 1: wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl (hash: 1Ky/9QT2LnBPjjYBNWb3S76Ax/Q8Ot/3o1XnpwsPr7c=)
2: 2A03C2CEBEE011F08AE93C56C4F9AE02.roa (hash: qM9hNon2vTx2jvL9zzyv+f9Ko2Ua+nbdbfuo0+REKkY=)
3: 1A582DBABDCB11ED998A723DC4F9AE02.roa (hash: 384juJSfXkpiKn653ckYH8G7gAqoZodCMxeGxqOmprY=)
4: 218CF3401F9411F083A54B70C4F9AE02.roa (hash: AfxsSO9FHfjWy4GaK4DD9dFkkSVrMeZpOnYqrrHShdc=)
5: 3D6D075A0ED011F0850DFC18C4F9AE02.roa (hash: tcES9bbnYa9sMd0E6c8ONg2SdJEFQ89dXJ9htMy/1nA=)
6: 20AB43C81F9411F083A54B70C4F9AE02.roa (hash: W3nL9md2m5OmRVt3q+FDbGg0y/1/j41/PMxuQ4IJIV0=)
7: E23B9C48F97D11EDB12DE418C4F9AE02.roa (hash: 8Olp3JSJvstaBbTqUKuFXzKQ0iGuTK8M0EIzyJHsbfg=)
8: 2AE826A8BEE011F0BE9E3C56C4F9AE02.roa (hash: lBzSDBoFwPVYr9nVJeO11sVZPzap2yWKQHzgf1NyD54=)
9: 8BF4322E978211EF8ED65F7CC4F9AE02.roa (hash: OSSwVFSAWsYmpofbEjCTEo9DaTk6ZUaYIAQk2dLTs/4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 17:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4195 (0x1063)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Validity
Not Before: Oct 18 17:34:51 2026 GMT
Not After : Oct 25 17:34:51 2026 GMT
Subject: CN=6ad5033c-a045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:1b:e1:3e:1b:63:a7:64:7d:45:71:e1:0e:
fd:b6:56:71:4a:23:ac:c4:ab:ea:46:d9:f3:c8:4d:
53:28:e5:57:35:16:03:ad:85:39:10:d0:4e:54:ff:
c2:38:61:17:64:36:1e:69:74:b9:80:d0:9c:b9:85:
5c:a5:73:a8:28:d2:5e:2c:4c:a1:0b:95:94:f7:19:
b5:40:78:e6:b9:1f:74:4f:8d:0d:e2:84:42:80:a8:
64:9f:c0:3c:32:4c:67:07:fe:1c:f3:ed:44:ed:c3:
51:1c:da:54:cc:a8:ce:50:c6:ab:40:67:d6:80:16:
b9:b7:bc:10:d7:00:c6:25:bc:69:09:06:a9:55:76:
39:57:44:bd:23:af:66:aa:8a:9e:d7:01:e4:61:f1:
93:4f:d1:a6:a9:66:e9:f2:d8:d7:5d:5a:e5:2c:b3:
8f:df:17:21:0a:ff:d6:73:4f:0f:1d:5c:a3:bf:56:
0b:cc:4f:20:0c:97:e1:76:9f:63:67:fd:8f:2b:49:
b2:6c:8d:6c:6c:3e:34:cd:61:dc:f8:0c:b6:89:23:
e7:ea:5b:9e:c4:0a:0d:7e:d3:b6:eb:72:8e:63:0f:
e8:ef:ee:d7:e5:0b:1b:d3:30:a5:9c:85:7a:79:7a:
da:f2:50:41:f3:07:f9:ce:88:db:da:93:36:61:a0:
dc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3F:76:32:66:2E:AC:B0:A3:FB:21:B5:59:1C:C0:40:E1:A4:BE:89
X509v3 Authority Key Identifier:
keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:87:63:60:7b:89:72:52:e8:7a:5a:c1:84:ec:39:51:74:b4:
2b:91:a0:06:7c:76:34:7d:db:e6:cb:1b:fc:55:23:d5:57:9e:
d9:30:ed:5f:21:a6:3e:75:8e:ea:8c:80:4a:bc:35:2d:78:d6:
38:ea:5d:52:ba:22:db:51:05:22:cb:f4:01:aa:a7:a6:e3:6d:
98:42:d1:12:0e:79:80:4f:9e:33:6b:a8:8d:ad:d5:3a:5b:5f:
e9:2f:bf:ba:8e:e8:1f:53:83:8d:cf:6c:b4:6e:12:0d:5e:f7:
08:9e:7f:e6:2b:4a:cc:3a:3c:47:b9:ad:3b:33:90:a6:67:87:
56:9c:b4:2a:b1:c6:d6:ea:9d:18:84:eb:19:f0:1b:ae:3b:03:
54:9e:61:b0:3f:bb:77:81:9a:9c:f8:c0:a5:50:71:37:e1:a5:
cc:e2:52:9f:bc:56:bb:05:c0:60:2f:58:58:75:81:c7:5b:7d:
fe:90:62:27:e9:07:ee:a5:11:13:dc:f1:06:68:2b:f9:ea:1e:
6d:bd:a0:56:88:b5:bf:96:6b:23:71:c9:0a:b6:97:b9:47:c2:
46:3e:c8:f9:99:fd:c6:3e:3b:9b:40:ef:8c:83:a7:26:88:e1:
57:f8:dc:3e:e1:06:d3:8e:2a:1e:de:f7:b8:0c:93:93:6d:d5:
80:15:b9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:01:42 2026 by rpki-client