
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json)
Hash identifier: /xtiTy9cW+RkZHBIhEgtTN+RdJUtkVFiXUXThK176PQ=
Subject key identifier: E6:53:0B:1F:52:3E:0B:9C:D5:52:1A:03:9C:22:4C:F9:58:37:5D:E7
Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Certificate serial: 35E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
Manifest number: 3569
Signing time: Tue 12 May 2026 14:27:11 +0000
Manifest this update: Tue 12 May 2026 14:27:11 +0000
Manifest next update: Tue 19 May 2026 14:27:11 +0000
Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: qz+RduRcb+nsJJ7Ktnjw3hipdGoPwGpeUogJYT6uu/w=)
2: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: Vd536Yo/UmC9YisTI800kHevdHaCEUXlwObFTopHde0=)
3: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: jgvloA4p8jwDkndKROuj2KaJOu+0VnyQm1S7vb4/ARo=)
4: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: Ac7ar5e+1Wqv3lV5cwQxtXQSoDcys5+NNyVEldaHACw=)
5: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 5ZpkIo1n4Gv5uwa7NImU9M0kb+w/Ii5LkQHA44vK79I=)
6: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: rPUnL7lHYdjtoOgbW/NTPA75gMTNRBPXaMY8wYcuEDk=)
7: 78F6DFE8CB6411F0A28C973CC4F9AE02.roa (hash: gvi8hWhSZEyhI/MZ6vtRb0JcAY+iSRYiYJZi1gBmvRI=)
8: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: nh33iXL7qlto9SPY3eGtRzqM7MNK4E7ZZsv8bnTGP0E=)
9: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: hP7biJkDS354Ac1lKBliVsjrL4sBRs39Al7da/cRPrg=)
10: 967D3674CB7911F0B5816B84C4F9AE02.roa (hash: 0KMQ/55D5rrZWDAZvQGMwOpEu4hRv1HBS+IR1ld3fas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13793 (0x35e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Validity
Not Before: May 12 14:27:11 2026 GMT
Not After : May 19 14:27:11 2026 GMT
Subject: CN=6a0338bf-b821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b1:39:20:86:23:e3:e9:39:36:bc:4f:5f:f5:
85:b4:6e:a5:7e:50:92:5b:15:c6:cb:63:df:b4:b7:
b5:52:ab:1c:79:9a:8c:bc:a3:db:d6:c3:95:9e:68:
69:f7:e4:dc:68:e1:c5:6c:86:d7:ee:d9:ab:9f:17:
ef:17:e8:26:42:8f:94:ab:e2:c6:48:15:a7:46:44:
0f:26:a8:96:1c:b1:fd:21:c8:aa:cc:16:ac:6a:0e:
c2:9a:d7:df:7e:32:5d:8f:bd:51:ab:97:27:69:56:
d8:ad:0c:09:17:e2:34:5c:89:e7:94:42:5a:6d:58:
48:de:f7:de:af:67:0e:3a:64:f2:1f:d2:68:25:78:
5b:b8:f8:fc:63:b4:d5:d8:54:7f:c8:f2:66:8c:f0:
a8:98:63:81:26:da:80:59:1a:88:fe:7a:eb:19:19:
97:c1:96:5f:e1:a7:10:0f:3a:a0:14:c7:e5:a6:52:
81:67:0a:44:8b:6c:97:51:d5:c5:d8:f6:14:e5:9b:
58:94:bb:63:b4:6b:47:86:b5:49:1a:42:60:61:c6:
c4:80:c5:12:03:7f:7f:69:f7:b7:fa:2b:74:b8:07:
9c:46:d2:18:cb:42:0f:17:5d:2e:80:da:45:04:15:
3f:0a:c2:dc:08:74:52:84:af:93:da:1f:37:e7:38:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:53:0B:1F:52:3E:0B:9C:D5:52:1A:03:9C:22:4C:F9:58:37:5D:E7
X509v3 Authority Key Identifier:
keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9b:09:92:b3:af:e8:c0:17:2a:f6:b2:7f:27:7a:a7:35:42:
03:08:22:aa:70:34:db:ae:bb:09:61:84:bc:e5:54:84:93:d0:
ac:07:b8:72:1c:f3:7c:23:04:74:e0:03:68:d5:a0:fd:a5:28:
90:af:2b:54:d4:b2:5e:60:e6:d6:ba:eb:39:d5:ed:4c:51:78:
bf:8b:0a:97:d3:98:c2:a4:d9:38:a9:4b:9b:aa:9a:14:4a:5d:
76:8c:69:7d:8b:71:9b:cf:ab:10:5c:8a:fe:48:f8:06:5f:c0:
86:f3:b1:19:f9:3a:cf:d0:30:87:3c:56:25:7a:5a:45:85:03:
29:9c:0f:c1:4e:89:8f:63:53:70:ee:67:81:ac:db:a1:89:36:
ea:9e:4e:53:67:fc:4e:88:55:34:66:64:36:06:62:bb:0d:ce:
68:d0:22:73:94:9e:ae:9c:7e:f9:ee:11:20:11:5c:4e:91:db:
e1:8a:be:5a:0e:b4:1b:a2:76:46:8b:e5:05:87:43:c2:6d:e5:
e2:3c:5a:0f:5e:4e:34:d4:87:02:9c:f8:5a:ee:25:64:18:8d:
bd:e7:f6:35:84:83:57:53:f9:66:3d:94:2a:7d:73:4c:1a:96:
06:ad:2e:9e:84:39:13:7b:1f:84:ab:07:6f:08:5e:c3:b0:58:
8a:cd:2f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:08:39 2026 by rpki-client