
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json)
Hash identifier: GaSKQU5RVsTSw4MDOKPayPvTvwOHM1t1yyMmNywpIOE=
Subject key identifier: 95:6D:D5:68:92:6E:E9:8D:91:58:08:AF:F1:4D:51:A7:75:19:9F:C9
Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Certificate serial: 3626
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
Manifest number: 35AE
Signing time: Thu 24 Sep 2026 14:26:49 +0000
Manifest this update: Thu 24 Sep 2026 14:26:48 +0000
Manifest next update: Thu 01 Oct 2026 14:26:48 +0000
Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: zJDT1aKxBuU5NgcS8oU3M6gV4Qtxkag2tdY0ynw7YBA=)
2: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 5ZpkIo1n4Gv5uwa7NImU9M0kb+w/Ii5LkQHA44vK79I=)
3: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: rPUnL7lHYdjtoOgbW/NTPA75gMTNRBPXaMY8wYcuEDk=)
4: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: hP7biJkDS354Ac1lKBliVsjrL4sBRs39Al7da/cRPrg=)
5: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: Vd536Yo/UmC9YisTI800kHevdHaCEUXlwObFTopHde0=)
6: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: Ac7ar5e+1Wqv3lV5cwQxtXQSoDcys5+NNyVEldaHACw=)
7: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: jgvloA4p8jwDkndKROuj2KaJOu+0VnyQm1S7vb4/ARo=)
8: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: nh33iXL7qlto9SPY3eGtRzqM7MNK4E7ZZsv8bnTGP0E=)
9: 967D3674CB7911F0B5816B84C4F9AE02.roa (hash: 0KMQ/55D5rrZWDAZvQGMwOpEu4hRv1HBS+IR1ld3fas=)
10: 78F6DFE8CB6411F0A28C973CC4F9AE02.roa (hash: gvi8hWhSZEyhI/MZ6vtRb0JcAY+iSRYiYJZi1gBmvRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13862 (0x3626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Validity
Not Before: Sep 24 14:26:48 2026 GMT
Not After : Oct 1 14:26:48 2026 GMT
Subject: CN=6ab53328-a130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:5f:f7:e6:da:3b:0d:63:30:f1:7e:4a:98:
d4:32:0e:22:34:b2:b9:4d:23:2d:0b:21:36:f8:14:
88:2d:66:24:31:13:ed:3a:d5:2e:cb:7b:26:64:f4:
0e:ea:e7:1f:fe:65:22:f7:14:9e:36:03:e8:85:e5:
0a:b9:5c:f5:73:e2:13:cf:e7:11:6e:a2:79:14:ff:
95:f9:6b:39:5e:45:2f:b0:10:e6:12:ca:b0:12:0c:
ac:f8:db:4c:24:9d:d9:9f:95:ea:66:7b:c8:a5:42:
1e:f0:cd:9e:51:6b:2b:83:ae:0d:db:63:1b:7a:d1:
65:dc:30:c2:bd:40:0d:f7:5a:9a:ed:d6:7e:00:42:
02:2e:ee:c4:db:e5:ca:80:d7:ad:dc:74:13:d5:b7:
b1:24:5b:05:01:ed:10:f2:82:a9:ab:b5:ac:93:8a:
35:4c:a4:a2:a9:15:96:5c:a4:80:53:ca:bd:e1:51:
3c:51:29:46:3d:c4:2b:7d:62:b3:f4:a6:a6:6f:82:
2d:37:1c:b2:9a:62:a2:60:e1:df:2b:56:cd:f6:ea:
48:0a:2a:50:65:3b:e9:ba:37:fa:c5:d6:f5:60:48:
63:a7:eb:74:95:fe:b9:33:a1:96:8f:d7:77:a4:46:
5d:f0:6e:66:67:6c:6e:d6:71:84:41:0e:ba:52:c4:
02:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6D:D5:68:92:6E:E9:8D:91:58:08:AF:F1:4D:51:A7:75:19:9F:C9
X509v3 Authority Key Identifier:
keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:55:48:91:d2:99:b1:77:6a:78:a5:6c:63:7b:9e:49:0e:b5:
19:e4:9d:14:c8:ea:0b:78:6c:8b:72:80:38:c5:49:82:36:3d:
13:0d:62:61:93:59:f9:05:f2:63:2b:22:13:86:a7:9d:e0:8f:
e1:64:3f:46:7b:c6:c2:45:59:33:57:6f:e9:7c:e1:6f:2b:f3:
37:56:c7:bd:6a:09:c8:43:7e:29:95:cd:cb:d3:42:47:a0:94:
9e:37:7a:14:a6:65:7f:8c:86:7d:58:1a:a8:c7:a9:7e:d0:ad:
09:79:36:cc:54:de:23:e3:b1:6a:12:b7:0f:3a:0c:fc:5f:25:
86:38:30:03:62:46:a9:18:44:69:19:05:de:13:cd:3f:ed:93:
0c:75:72:7c:f9:d4:f8:ff:42:84:d8:b7:41:48:55:57:fd:90:
e7:1e:49:56:07:b4:48:0e:fd:dc:4e:fd:06:e1:89:38:96:3e:
dc:cd:4f:7c:ad:eb:05:08:de:e2:14:d8:0c:4a:6a:64:a2:b0:
d1:9a:57:39:66:8e:54:19:83:dd:c4:0c:d0:7e:e3:b2:8d:d2:
c7:46:6e:38:35:9a:ca:ee:33:7d:76:d1:ef:99:40:4e:4c:11:
12:6e:ae:a6:10:bb:b8:e6:cb:c8:e7:81:fe:da:35:e8:36:5c:
ff:f1:bf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:43:53 2026 by rpki-client