
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
File: wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft (raw, json)
Hash identifier: fp9p8oGwaJpUDfQdva1KGf2xH/lFQ7KzvMB3/hqIhuY=
Subject key identifier: 76:DA:93:3E:41:AB:17:C7:31:1C:1C:F8:92:0E:56:46:06:35:14:5B
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial: 0FEF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
Manifest number: 0F5E
Signing time: Tue 24 Mar 2026 17:27:46 +0000
Manifest this update: Tue 24 Mar 2026 17:27:45 +0000
Manifest next update: Tue 31 Mar 2026 17:27:45 +0000
Files and hashes: 1: wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl (hash: pEmOe6w759wdnFZ1VQEWjS8OmxX4EfOizw1Du1gqSF8=)
2: 3D6D075A0ED011F0850DFC18C4F9AE02.roa (hash: 84bATkmq8Cq5bXGPwg6yROheXDIbxxbJc8dJExvDwlI=)
3: 20AB43C81F9411F083A54B70C4F9AE02.roa (hash: 7cDdADbTHZRG0bVfK6SUqFLI7wiUJaBfx2Pc8146GtM=)
4: 2A03C2CEBEE011F08AE93C56C4F9AE02.roa (hash: WV02wqJsppKXq1XlBbQhmsKZt8eCHoQe8+9r6ds5Qp4=)
5: 2AE826A8BEE011F0BE9E3C56C4F9AE02.roa (hash: 6QSJlYvGlxlOHjtqJLDfZzMxNsOTkqRaWJqPkERhp50=)
6: 218CF3401F9411F083A54B70C4F9AE02.roa (hash: N5mJJjPLK714usB1Auj1jXAnw3X85CmNICNXmMMuj+Y=)
7: 1A582DBABDCB11ED998A723DC4F9AE02.roa (hash: 0HaUO00nBR+YnGoQ+Zy9ot2m3QDaVdxpXyCgl3vg4D0=)
8: E23B9C48F97D11EDB12DE418C4F9AE02.roa (hash: kf4ZyHNL4zylzb7OM9gXObkG3qlHM7UZYwNm8i065DQ=)
9: 8BF4322E978211EF8ED65F7CC4F9AE02.roa (hash: OlsJd6ey1m/lkk+tPjvI82t7mX5fZieFbLEHKqrFHQU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4079 (0xfef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Validity
Not Before: Mar 24 17:27:45 2026 GMT
Not After : Mar 31 17:27:45 2026 GMT
Subject: CN=69c2c992-2407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:9f:6b:b4:22:0b:fc:fd:28:71:63:d1:e5:
12:71:61:65:34:7f:f3:8c:7a:31:f2:64:74:ab:f3:
dc:f1:68:14:de:d6:ec:50:c9:14:69:80:33:44:a0:
43:a1:4b:c8:a4:e3:52:9d:71:2a:b2:03:00:11:11:
ab:e5:55:82:00:7b:85:24:94:f5:3a:bb:b3:7d:1c:
e4:a4:1c:09:54:3b:44:59:1b:48:83:c7:43:78:22:
5c:1b:ba:d0:b6:d4:3d:22:92:40:8b:57:ce:13:bb:
93:e0:a3:95:a2:e1:a9:fb:01:27:a1:ee:fd:73:47:
05:6b:81:01:a5:b4:73:b5:83:19:1b:9e:bb:dc:fa:
74:c6:38:86:2e:da:ef:aa:04:af:83:4a:c8:fb:5f:
7d:07:7c:54:76:6d:7e:20:a5:49:c3:e7:bf:05:9a:
e8:c5:44:2c:32:26:dc:5a:25:c0:48:68:aa:82:8e:
78:1c:95:3d:9a:9c:9f:b5:71:26:79:7c:3f:bb:59:
3a:34:73:6f:c4:19:a3:25:c6:9a:87:4b:38:25:3a:
b3:5b:ec:58:42:ef:4f:e0:7d:e3:07:40:6b:71:14:
63:a6:67:a2:6b:fc:00:2d:36:e2:61:a4:86:ae:af:
82:4e:4d:2d:0e:d5:3f:b7:79:95:09:d6:b1:8e:57:
15:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DA:93:3E:41:AB:17:C7:31:1C:1C:F8:92:0E:56:46:06:35:14:5B
X509v3 Authority Key Identifier:
keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:c8:76:1c:cc:8d:61:45:e0:f9:ee:70:5e:4d:fb:31:13:00:
ca:d9:e1:0e:2e:4c:26:e3:08:a2:72:7d:f7:75:af:5d:c8:ef:
b6:22:2d:e3:f2:bc:ec:df:bb:6d:a9:c3:f2:bd:80:6d:c4:43:
8c:57:73:8f:fe:96:99:dd:49:c2:8c:7b:25:63:1b:43:a7:59:
82:c0:a5:72:2e:97:e0:e6:bf:02:fb:3a:9a:a0:87:e3:0e:16:
94:1c:ac:58:a3:06:35:a0:08:ba:82:f4:60:5b:ee:68:c8:94:
3a:f6:62:fb:ad:45:29:fc:b1:ce:0e:b4:9e:5c:ca:ac:ea:f9:
98:27:9d:52:0c:8c:35:41:c1:14:fa:9d:f5:cd:01:06:c0:c5:
4f:72:81:66:57:09:24:9b:c0:f9:89:37:a1:43:73:aa:07:8d:
fe:ea:94:14:11:21:fd:b9:9b:a8:87:5f:a4:94:1b:09:0c:6f:
c1:d5:f7:a2:4d:3e:89:86:f7:4a:6d:42:50:68:8b:db:74:f9:
c8:41:00:f3:3d:17:78:e2:3f:1f:93:c3:2e:ac:2f:fb:d2:ab:
f3:43:57:20:38:ee:ce:a5:b3:0e:e7:3f:f6:62:b2:68:f3:51:
d4:5a:4a:07:fd:63:1f:9a:df:b2:fe:a1:88:ee:fc:ec:06:f9:
20:19:4d:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC
NTI3NzZGNzIwHhcNMjYwMzI0MTcyNzQ1WhcNMjYwMzMxMTcyNzQ1WjAYMRYwFAYD
VQQDEw02OWMyYzk5Mi0yNDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt4qfa7QiC/z9KHFj0eUScWFlNH/zjHox8mR0q/Pc8WgU3tbsUMkUaYAzRKBD
oUvIpONSnXEqsgMAERGr5VWCAHuFJJT1OruzfRzkpBwJVDtEWRtIg8dDeCJcG7rQ
ttQ9IpJAi1fOE7uT4KOVouGp+wEnoe79c0cFa4EBpbRztYMZG5673Pp0xjiGLtrv
qgSvg0rI+199B3xUdm1+IKVJw+e/BZroxUQsMibcWiXASGiqgo54HJU9mpyftXEm
eXw/u1k6NHNvxBmjJcaah0s4JTqzW+xYQu9P4H3jB0BrcRRjpmeia/wALTbiYaSG
rq+CTk0tDtU/t3mVCdaxjlcVDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHbakz5B
qxfHMRwc+JIOVkYGNRRbMB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz
RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi
M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkJGRi9FNDJCRUFDMjkzRjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFB
V2kxSVc2UVMydEsxSjNiM0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlsh2HMyNYUXg+e5wXk37MRMAytnhDi5MJuMIonJ993WvXcjvtiIt4/K87N+7
banD8r2AbcRDjFdzj/6Wmd1Jwox7JWMbQ6dZgsClci6X4Oa/Avs6mqCH4w4WlBys
WKMGNaAIuoL0YFvuaMiUOvZi+61FKfyxzg60nlzKrOr5mCedUgyMNUHBFPqd9c0B
BsDFT3KBZlcJJJvA+Yk3oUNzqgeN/uqUFBEh/bmbqIdfpJQbCQxvwdX3ok0+iYb3
Sm1CUGiL23T5yEEA8z0XeOI/H5PDLqwv+9Kr80NXIDjuzqWzDuc/9mKyaPNR1FpK
B/1jH5rfsv6hiO787Ab5IBlNiA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:45:30 2026 by rpki-client