
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
File: wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft (raw, json)
Hash identifier: AnedX+bGfP11nhl/Ala0eTICfpe8i/A5AC1WIfrDvq4=
Subject key identifier: 25:AC:C0:8D:45:DC:1B:99:84:88:48:30:89:CD:08:DB:AD:58:B1:FA
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial: 1036
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
Manifest number: 0F9D
Signing time: Wed 22 Jul 2026 17:42:25 +0000
Manifest this update: Wed 22 Jul 2026 17:42:25 +0000
Manifest next update: Wed 29 Jul 2026 17:42:25 +0000
Files and hashes: 1: wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl (hash: 0zNhHMRbeLVvEO4eHZdDvIAi9OQqQDULOGJGbVk5vYc=)
2: 218CF3401F9411F083A54B70C4F9AE02.roa (hash: AfxsSO9FHfjWy4GaK4DD9dFkkSVrMeZpOnYqrrHShdc=)
3: E23B9C48F97D11EDB12DE418C4F9AE02.roa (hash: 8Olp3JSJvstaBbTqUKuFXzKQ0iGuTK8M0EIzyJHsbfg=)
4: 8BF4322E978211EF8ED65F7CC4F9AE02.roa (hash: OSSwVFSAWsYmpofbEjCTEo9DaTk6ZUaYIAQk2dLTs/4=)
5: 1A582DBABDCB11ED998A723DC4F9AE02.roa (hash: 384juJSfXkpiKn653ckYH8G7gAqoZodCMxeGxqOmprY=)
6: 2AE826A8BEE011F0BE9E3C56C4F9AE02.roa (hash: lBzSDBoFwPVYr9nVJeO11sVZPzap2yWKQHzgf1NyD54=)
7: 3D6D075A0ED011F0850DFC18C4F9AE02.roa (hash: tcES9bbnYa9sMd0E6c8ONg2SdJEFQ89dXJ9htMy/1nA=)
8: 2A03C2CEBEE011F08AE93C56C4F9AE02.roa (hash: qM9hNon2vTx2jvL9zzyv+f9Ko2Ua+nbdbfuo0+REKkY=)
9: 20AB43C81F9411F083A54B70C4F9AE02.roa (hash: W3nL9md2m5OmRVt3q+FDbGg0y/1/j41/PMxuQ4IJIV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:42:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4150 (0x1036)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Validity
Not Before: Jul 22 17:42:25 2026 GMT
Not After : Jul 29 17:42:25 2026 GMT
Subject: CN=6a610101-3b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:7a:f8:b6:87:ad:fa:91:b3:7c:02:24:46:
6b:b9:7a:55:b4:9c:77:4d:66:67:60:6c:f7:b8:f0:
5a:a0:9b:a6:e5:d9:e2:61:56:4b:84:54:2a:af:dc:
03:cb:c1:4a:b1:b0:72:74:76:44:ab:cc:17:9e:40:
37:5e:f6:b8:88:8c:17:d6:7e:9f:99:34:d7:2c:fc:
26:68:e7:b9:ce:ce:2b:55:cb:97:48:dd:a5:14:16:
d8:fa:7c:3a:2f:b0:b7:d9:05:7f:22:e1:54:5f:69:
2e:7f:5f:60:94:d9:d3:05:36:5e:a3:74:0b:96:b6:
eb:73:8b:67:b6:25:40:89:ba:d0:6d:49:d3:3e:50:
d6:bb:13:28:90:0c:6c:cf:44:7e:dd:cf:5e:25:26:
fc:5f:bf:02:00:0d:09:5c:7f:ad:9d:09:6e:9e:c5:
35:5b:75:9e:da:28:99:aa:d5:60:f6:3a:53:a1:be:
d9:6f:b4:15:d5:ef:e0:c8:b0:b8:da:d6:2b:ad:8d:
88:6c:5a:4e:51:5b:a4:63:ce:cf:f5:b6:3f:e6:14:
b3:d3:93:bd:33:dd:e2:02:f9:19:59:ef:14:37:df:
29:94:a9:ac:91:8b:c4:d8:0e:40:c7:c7:a0:33:aa:
8c:3e:c1:13:d1:6f:e4:a9:a6:ff:6b:7b:37:f7:ef:
c2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AC:C0:8D:45:DC:1B:99:84:88:48:30:89:CD:08:DB:AD:58:B1:FA
X509v3 Authority Key Identifier:
keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:16:68:e7:bb:46:ae:5a:9d:03:f1:2a:34:88:70:15:5f:f1:
0e:8c:10:7c:1c:96:8b:b3:67:78:97:d4:b6:94:65:21:cd:44:
17:7f:8d:b0:2b:80:4c:ac:22:8c:d9:f2:d6:a6:89:8a:98:d1:
1e:5d:08:92:8d:09:4f:ad:5d:70:61:69:dd:58:5e:c8:d7:6c:
cf:24:81:fc:bc:13:63:4e:04:57:df:a4:10:92:39:91:bc:92:
07:db:9a:bd:ff:2b:9f:92:62:d9:eb:51:ee:15:62:dd:75:e8:
b5:58:b1:f1:8b:44:e6:d7:25:4a:71:f1:54:4c:2a:26:ca:57:
ce:67:6b:83:56:b7:a1:78:11:8a:e9:7b:27:a9:7a:f6:d0:89:
a6:f8:ab:dd:cc:c8:0f:f8:65:5c:10:79:b9:01:3f:87:8c:fd:
9a:b7:97:00:2c:ed:f2:cc:26:c9:8f:ed:5f:30:6f:8f:7d:da:
64:4f:5e:7d:d7:d8:a7:ce:b8:dd:3f:1f:3f:1f:19:1c:cb:33:
a2:c6:e9:36:ed:1d:6f:3d:ed:6d:86:66:44:2a:ef:5e:ce:50:
93:8a:b8:72:14:b1:90:83:f3:34:7a:fa:00:04:59:87:40:ed:
ce:7f:7e:e2:47:64:f0:ab:36:eb:1e:dd:bf:e1:c9:1b:bb:5f:
93:50:e8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:00:37 2026 by rpki-client