
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
File: weInZRraO_vBh3GuyLYAJnI7YK0.mft (raw, json)
Hash identifier: /HMjxELttGam3c0xEWCCD/ume+ZI6HJFYb5EnfwT+JU=
Subject key identifier: 20:6A:B9:E7:61:51:AD:57:68:84:45:34:A4:A7:49:6D:C5:25:07:1A
Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
Certificate issuer: /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Certificate serial: 29ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
Manifest number: 29B1
Signing time: Wed 22 Jul 2026 15:39:26 +0000
Manifest this update: Wed 22 Jul 2026 15:39:25 +0000
Manifest next update: Wed 29 Jul 2026 15:39:25 +0000
Files and hashes: 1: weInZRraO_vBh3GuyLYAJnI7YK0.crl (hash: oylwslqW0+rPBA81yGTUsho3MaHyhIIOopiTdaO/bOo=)
2: 3AB3F80E578611EA8CC3B124C4F9AE02.roa (hash: C5FmIwbgprkig61fqNmKWaJWuBinr8tfV+3G1uObZOs=)
3: C3876BD8589D11EC9CF19A41C4F9AE02.roa (hash: er4abjooP2pzYLbFn4zXYhItU6fj/FaQ5TH/f8stFqc=)
4: 39932724578611EA8CC3B124C4F9AE02.roa (hash: 5xVxyBLTVv6TTJwr4d6CRZOAj/oOkKXh9D4XacOHsAU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10733 (0x29ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Validity
Not Before: Jul 22 15:39:25 2026 GMT
Not After : Jul 29 15:39:25 2026 GMT
Subject: CN=6a60e42d-8faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:88:ee:33:80:90:18:a8:e5:19:ee:79:1d:
2e:88:cb:0e:89:f4:b8:d8:d3:db:c5:2a:28:2a:21:
f6:28:9b:e3:8d:53:4b:43:96:ab:98:ee:24:3d:09:
a8:09:ca:82:1d:51:c0:39:8d:c6:ac:9a:66:41:8e:
b1:71:e6:77:0b:04:84:6f:0c:78:bd:2a:1d:48:f7:
58:5c:80:56:1a:12:d5:d5:3b:ca:2e:d5:32:5f:54:
b0:d2:1d:38:c8:90:d5:0e:8a:4e:d5:43:2c:d4:ce:
7c:22:66:f5:a3:53:be:03:7b:79:a5:fd:26:1a:f9:
e6:ed:33:05:49:1a:9f:b5:aa:26:e2:6b:97:a2:94:
33:37:2f:20:5c:b6:8d:00:a6:cb:b7:ec:57:3d:d7:
77:e5:86:ef:5a:9d:f8:4c:a2:08:4b:0c:68:07:e2:
32:ef:8f:9c:3c:71:6d:d1:66:39:22:73:36:bc:c5:
22:84:24:09:ef:97:a4:01:74:ac:96:39:0b:63:d3:
38:82:03:fd:df:40:1c:0c:e7:8f:aa:b5:b0:6e:08:
cd:f2:ce:fd:aa:4b:25:c3:e2:27:0d:68:b2:ff:14:
a0:68:34:a2:f3:9a:05:fe:b8:4d:24:71:17:3e:b9:
43:13:0e:fc:87:1b:68:83:51:f8:09:99:cc:99:2b:
e9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6A:B9:E7:61:51:AD:57:68:84:45:34:A4:A7:49:6D:C5:25:07:1A
X509v3 Authority Key Identifier:
keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:63:f2:98:d7:4c:1a:50:a5:10:43:6f:8d:50:a5:c3:b9:4f:
e2:31:0c:29:ac:0c:2e:b4:95:df:8d:72:6f:6c:aa:91:80:df:
d6:42:74:7c:ef:3a:42:b9:9b:c9:4a:1b:b4:72:2d:a4:3c:81:
eb:ba:f0:e4:16:f1:7b:d7:64:21:e5:fd:a3:27:69:18:61:dd:
fb:4a:0e:f0:6b:a4:78:59:bd:29:e7:a4:03:eb:ac:53:49:b4:
57:d3:b0:68:e8:91:2e:6e:57:e3:5c:25:c5:82:e3:a6:11:98:
3e:cd:8d:b8:4b:2a:82:dc:1e:35:45:12:4a:89:c7:5d:a9:52:
a8:3c:a2:cb:35:97:64:ff:f4:59:60:30:e2:b9:f0:c8:11:7d:
ec:3f:9a:5a:e3:c6:0e:6e:ff:cd:28:13:d2:ad:6d:b0:64:bd:
5c:39:fe:2a:c5:54:84:ad:59:1e:d5:1f:bf:84:74:1a:d1:ec:
9a:29:39:58:33:55:84:43:39:57:10:c7:73:4c:99:f6:73:aa:
ff:f1:41:db:e8:a2:d4:2b:5b:f7:46:56:63:8d:80:2e:7d:50:
14:ce:f4:53:f5:a8:86:16:1a:3a:4b:39:05:b3:ad:39:51:9c:
3d:71:18:55:ec:3d:fb:e8:1c:6d:5b:41:31:91:63:49:fa:f8:
e3:05:13:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:18 2026 by rpki-client