
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json)
Hash identifier: dKRnqEcQaw0Zc31lgTTVW86K51DEdLf/fyCuGEWbkhg=
Subject key identifier: EC:AC:81:59:F4:5B:7C:AC:59:77:0A:1C:64:B8:41:65:48:DD:60:0F
Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Certificate serial: 35ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
Manifest number: 3575
Signing time: Thu 04 Jun 2026 14:26:50 +0000
Manifest this update: Thu 04 Jun 2026 14:26:49 +0000
Manifest next update: Thu 11 Jun 2026 14:26:49 +0000
Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: 6klkN0Gx5H6721BFrQqElLSe30c7KDZriY3WU6pppyA=)
2: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: Vd536Yo/UmC9YisTI800kHevdHaCEUXlwObFTopHde0=)
3: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: hP7biJkDS354Ac1lKBliVsjrL4sBRs39Al7da/cRPrg=)
4: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: jgvloA4p8jwDkndKROuj2KaJOu+0VnyQm1S7vb4/ARo=)
5: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 5ZpkIo1n4Gv5uwa7NImU9M0kb+w/Ii5LkQHA44vK79I=)
6: 967D3674CB7911F0B5816B84C4F9AE02.roa (hash: 0KMQ/55D5rrZWDAZvQGMwOpEu4hRv1HBS+IR1ld3fas=)
7: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: rPUnL7lHYdjtoOgbW/NTPA75gMTNRBPXaMY8wYcuEDk=)
8: 78F6DFE8CB6411F0A28C973CC4F9AE02.roa (hash: gvi8hWhSZEyhI/MZ6vtRb0JcAY+iSRYiYJZi1gBmvRI=)
9: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: Ac7ar5e+1Wqv3lV5cwQxtXQSoDcys5+NNyVEldaHACw=)
10: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: nh33iXL7qlto9SPY3eGtRzqM7MNK4E7ZZsv8bnTGP0E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 14:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13805 (0x35ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Validity
Not Before: Jun 4 14:26:49 2026 GMT
Not After : Jun 11 14:26:49 2026 GMT
Subject: CN=6a218b2a-37b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:65:6c:4c:5c:30:f1:d6:c6:60:e7:5f:d7:
32:95:1a:3f:36:95:fa:07:fa:06:c4:20:f1:97:b1:
8e:d6:55:71:22:c8:ad:52:f8:4e:73:df:52:1f:25:
cb:c8:cb:e3:b8:6e:d2:c6:79:5c:67:9d:d8:15:02:
ac:16:22:2f:5c:32:f9:93:af:3b:7d:24:53:15:6f:
31:9d:b4:c8:7f:f7:ae:ec:ce:5d:d3:3b:19:5a:84:
5c:45:e1:39:d7:1f:4d:37:3d:94:06:4b:a5:69:2e:
79:cc:ea:dd:86:e9:4e:3d:71:5f:27:12:bb:09:50:
94:17:85:01:f4:48:52:e0:64:19:27:ef:25:c0:24:
d0:ec:b9:3f:03:af:45:06:3e:81:8b:fe:e2:e9:70:
c0:47:61:4a:d8:f1:21:11:f0:4f:53:43:ee:c7:8b:
ac:38:35:45:d1:b9:3e:60:8f:3e:92:9b:7e:34:21:
82:f4:ab:1f:41:95:5f:3e:a2:6f:6d:5b:04:89:00:
83:1f:1b:54:08:96:14:4a:30:a9:2d:cf:d2:09:f1:
52:6a:b1:aa:e1:52:75:f9:c4:cf:d3:91:cf:8b:60:
74:5d:f9:b5:60:9b:11:ca:c7:63:c2:84:54:16:cb:
0a:3c:4c:24:a7:43:eb:06:cc:83:37:89:2f:ff:5e:
d4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AC:81:59:F4:5B:7C:AC:59:77:0A:1C:64:B8:41:65:48:DD:60:0F
X509v3 Authority Key Identifier:
keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:5f:0d:a2:e7:cc:e1:bb:d7:cf:dd:9a:95:8d:45:14:6a:45:
cf:ad:01:7f:6d:ca:b4:05:bc:6d:a5:e8:c8:8a:04:6e:bb:9c:
67:23:46:b6:75:16:da:a8:a2:db:72:be:b7:31:98:12:71:80:
f2:ad:b7:c6:b4:93:3d:77:be:b3:0d:82:a0:3e:70:3f:ce:e4:
af:14:e1:c8:f7:fa:f6:c6:82:13:c4:54:20:72:d0:fc:78:73:
ce:21:58:8e:d2:a8:77:22:24:80:ac:96:f9:fa:01:8f:29:b1:
e0:01:d5:0e:42:6e:56:f8:57:65:02:ed:f5:59:f3:99:7e:91:
52:df:34:30:2c:7b:16:a5:51:b8:aa:65:f4:7b:e4:42:03:38:
c8:99:5a:79:01:e2:ae:1d:ed:66:32:94:61:1b:c0:c9:61:ec:
7c:96:c7:d0:74:71:30:33:b0:d7:f3:0c:c8:ef:b0:e3:68:ac:
31:43:b8:da:f6:a2:be:04:1b:63:2c:fc:a6:d3:33:e0:cb:05:
c0:4e:4c:20:14:82:0e:1a:e2:82:d2:e2:da:05:ea:98:20:18:
60:1a:f2:30:ba:ce:67:97:cb:f5:6c:60:71:00:5a:1a:54:8a:
7f:9f:05:cd:e8:c3:54:d5:9e:a7:b8:b4:81:1e:01:7e:3b:82:
d7:fc:a0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:20:32 2026 by rpki-client