
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
File: WAFITP9u_F0ACyYp-RFr4jXErDY.mft (raw, json)
Hash identifier: PUGkQnpNboCl25kzLqqZ7OXkDMkvLLvz4IYT8JhSMVA=
Subject key identifier: 65:56:B2:9A:1B:61:71:45:69:7C:7B:10:55:44:EC:06:D8:F1:27:4D
Authority key identifier: 58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36
Certificate issuer: /CN=A914C531/serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
Manifest number: 013D
Signing time: Wed 25 Mar 2026 04:46:01 +0000
Manifest this update: Wed 25 Mar 2026 04:46:00 +0000
Manifest next update: Wed 01 Apr 2026 04:46:00 +0000
Files and hashes: 1: WAFITP9u_F0ACyYp-RFr4jXErDY.crl (hash: IB2W9bYDFY9dNiQwr9NgBSI1NBMbUWjqCwBWPMP7YfM=)
2: 7CFDC462FDFF11F0A0866006396F56BC.roa (hash: +nqUfnqZM240wHmlLmwt1IzdYc+ilUUlikwHt9hTQik=)
3: 94055454FDFF11F082530311396F56BC.roa (hash: Z7Xvs6Zo3H05hxqePIsipO5XtIq53HzH7Srkw1bleio=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl
rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C531, serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36
Validity
Not Before: Mar 25 04:46:00 2026 GMT
Not After : Apr 1 04:46:00 2026 GMT
Subject: CN=69c36889-c3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:d1:69:78:7f:ec:6b:7a:78:84:62:ac:79:
41:bd:d3:d7:cf:55:6d:cc:b6:a4:23:24:5f:59:48:
3f:c5:13:54:48:7b:8d:0d:ef:d5:d8:4a:77:93:f1:
31:89:b5:90:5a:44:4d:91:a3:59:ff:d9:73:42:43:
90:c3:b1:f9:39:0a:08:0a:eb:63:ee:61:cd:e7:d2:
fc:32:10:a6:ef:44:ca:e8:16:f7:3c:d4:15:f6:e6:
53:7c:32:36:b1:82:f3:60:88:e6:c8:b6:10:48:93:
77:e7:df:ce:21:2f:16:68:6a:f3:cf:9a:4b:69:2e:
d0:8c:3f:47:f3:8a:96:50:6c:37:a2:9c:13:51:1e:
e1:57:dd:a6:2e:0d:42:12:c4:80:dc:9c:a1:f2:fe:
f4:b0:a7:7c:6d:a2:38:3f:c0:78:97:a6:4d:08:aa:
12:fa:40:19:29:d0:16:80:75:1c:19:39:84:a0:7a:
fc:07:5a:5d:10:d8:f9:19:70:7b:2d:0c:b5:55:69:
7e:07:ca:9a:f6:93:62:6d:f2:55:0e:ee:dd:6f:28:
c6:31:b3:40:f7:d4:e5:91:c3:c3:3e:7f:f1:16:b1:
16:bf:98:28:fc:dd:45:3c:45:9f:76:52:7a:ad:3e:
67:45:a6:47:e0:f1:0f:49:67:72:9a:d0:fe:59:15:
18:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:56:B2:9A:1B:61:71:45:69:7C:7B:10:55:44:EC:06:D8:F1:27:4D
X509v3 Authority Key Identifier:
keyid:58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d8:8d:e2:37:61:a8:08:53:bf:c5:e7:85:94:30:8e:80:b4:
b8:ed:d6:22:29:da:d4:69:9b:50:1f:34:8d:47:49:ee:8f:07:
90:6d:d8:1b:49:a3:02:01:15:8e:5b:18:3b:44:d9:76:cd:4c:
b8:7d:af:e1:40:6f:d6:46:49:30:40:62:91:a8:a5:bc:97:a3:
73:a3:ec:95:fc:79:46:a8:4d:a2:9f:b1:23:f4:cf:e3:36:ab:
91:13:8e:6a:6c:0f:d4:43:ca:28:f7:45:ad:b5:e6:28:b1:78:
6b:c7:f2:16:d6:9f:88:37:2a:61:2b:7b:d6:e3:94:04:ea:9d:
45:58:d7:01:17:91:4c:18:17:d6:bf:27:09:95:c5:ed:82:e4:
a1:1b:35:15:e1:4c:68:ee:34:0c:1f:98:3d:8e:7d:52:5a:de:
8f:cd:d8:27:a4:c2:94:a0:08:9f:68:20:76:f0:e2:fe:a9:b4:
1f:99:cc:d8:2c:73:b0:ca:c1:24:f3:5c:de:67:02:e0:80:41:
4f:f3:eb:bf:43:93:bd:d0:0d:7d:39:74:cf:83:15:08:46:eb:
83:10:0e:e5:55:8b:31:79:32:df:45:e8:60:12:16:f8:80:d4:
c7:d8:61:8d:b3:9d:c9:b2:7e:50:5f:67:9f:60:e2:b3:82:2f:
df:d0:ac:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM1MzExMTAvBgNVBAUTKDU4MDE0ODRDRkY2RUZDNUQwMDBCMjYyOUY5MTE2QkUy
MzVDNEFDMzYwHhcNMjYwMzI1MDQ0NjAwWhcNMjYwNDAxMDQ0NjAwWjAYMRYwFAYD
VQQDEw02OWMzNjg4OS1jM2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3vbRaXh/7Gt6eIRirHlBvdPXz1VtzLakIyRfWUg/xRNUSHuNDe/V2Ep3k/Ex
ibWQWkRNkaNZ/9lzQkOQw7H5OQoICutj7mHN59L8MhCm70TK6Bb3PNQV9uZTfDI2
sYLzYIjmyLYQSJN359/OIS8WaGrzz5pLaS7QjD9H84qWUGw3opwTUR7hV92mLg1C
EsSA3Jyh8v70sKd8baI4P8B4l6ZNCKoS+kAZKdAWgHUcGTmEoHr8B1pdENj5GXB7
LQy1VWl+B8qa9pNibfJVDu7dbyjGMbNA99TlkcPDPn/xFrEWv5go/N1FPEWfdlJ6
rT5nRaZH4PEPSWdymtD+WRUY6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVWspob
YXFFaXx7EFVE7AbY8SdNMB8GA1UdIwQYMBaAFFgBSEz/bvxdAAsmKfkRa+I1xKw2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzUzMS8wQjBEMEY2NjVE
NUIxMUVGQTRGMzJCMTNDNEY5QUUwMi9XQUZJVFA5dV9GMEFDeVlwLVJGcjRqWEVy
RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dBRklUUDl1X0YwQUN5WXAtUkZyNGpYRXJEWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzUzMS8wQjBEMEY2NjVENUIxMUVGQTRGMzJCMTNDNEY5QUUwMi9XQUZJVFA5dV9G
MEFDeVlwLVJGcjRqWEVyRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwtiN4jdhqAhTv8XnhZQwjoC0uO3WIina1GmbUB80jUdJ7o8HkG3YG0mjAgEV
jlsYO0TZds1MuH2v4UBv1kZJMEBikailvJejc6Pslfx5RqhNop+xI/TP4zarkROO
amwP1EPKKPdFrbXmKLF4a8fyFtafiDcqYSt71uOUBOqdRVjXAReRTBgX1r8nCZXF
7YLkoRs1FeFMaO40DB+YPY59Ulrej83YJ6TClKAIn2ggdvDi/qm0H5nM2CxzsMrB
JPNc3mcC4IBBT/Prv0OTvdANfTl0z4MVCEbrgxAO5VWLMXky30XoYBIW+IDUx9hh
jbOdybJ+UF9nn2Dis4Iv39Csmw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:50:24 2026 by rpki-client