
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json)
Hash identifier: IpQZSvllbOMzEl69Tsvayfrb7nGjxMPY+CZGGlYnp/Y=
Subject key identifier: 37:FA:6C:4B:A9:21:44:3C:38:36:57:76:F0:E0:F1:2D:8A:56:71:28
Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Certificate serial: 3635
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
Manifest number: 35BD
Signing time: Sat 24 Oct 2026 14:26:38 +0000
Manifest this update: Sat 24 Oct 2026 14:26:37 +0000
Manifest next update: Sat 31 Oct 2026 14:26:37 +0000
Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: NjR7KmDxeVbjztNoOEu6gCRK4zRBQCMFfAMsnrarTGU=)
2: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: hP7biJkDS354Ac1lKBliVsjrL4sBRs39Al7da/cRPrg=)
3: 967D3674CB7911F0B5816B84C4F9AE02.roa (hash: 0KMQ/55D5rrZWDAZvQGMwOpEu4hRv1HBS+IR1ld3fas=)
4: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: jgvloA4p8jwDkndKROuj2KaJOu+0VnyQm1S7vb4/ARo=)
5: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: Ac7ar5e+1Wqv3lV5cwQxtXQSoDcys5+NNyVEldaHACw=)
6: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: rPUnL7lHYdjtoOgbW/NTPA75gMTNRBPXaMY8wYcuEDk=)
7: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: Vd536Yo/UmC9YisTI800kHevdHaCEUXlwObFTopHde0=)
8: 78F6DFE8CB6411F0A28C973CC4F9AE02.roa (hash: gvi8hWhSZEyhI/MZ6vtRb0JcAY+iSRYiYJZi1gBmvRI=)
9: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 5ZpkIo1n4Gv5uwa7NImU9M0kb+w/Ii5LkQHA44vK79I=)
10: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: nh33iXL7qlto9SPY3eGtRzqM7MNK4E7ZZsv8bnTGP0E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13877 (0x3635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Validity
Not Before: Oct 24 14:26:37 2026 GMT
Not After : Oct 31 14:26:37 2026 GMT
Subject: CN=6adcc01e-bbbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:7b:e3:38:32:32:41:1d:1c:df:95:1a:ea:
f4:72:3d:32:3a:c7:e9:76:58:90:b1:df:99:d8:d5:
9e:5e:3d:87:81:bb:1a:07:72:37:2e:8f:c6:7d:94:
ff:81:1a:b2:c4:0b:cd:ca:9d:51:90:6d:2f:1b:3d:
08:07:06:9a:58:ae:0c:83:b9:c4:e7:bb:1e:c4:3a:
17:5f:46:23:ea:4c:4c:27:49:69:70:67:ca:3d:4c:
75:59:7c:df:1d:fb:22:ff:87:ad:9f:ab:3c:33:74:
88:b6:5c:13:75:3b:43:f4:d2:d3:36:fa:01:37:89:
35:5b:13:56:35:20:e5:62:65:23:ff:ac:32:8f:35:
ad:f5:05:c1:30:09:20:78:1b:5b:7b:e9:65:32:d4:
9f:5d:6c:9c:14:3a:f1:c9:36:9b:09:fa:b2:70:69:
0f:4e:ba:10:95:ae:a4:92:dc:6d:2c:99:90:c5:04:
cb:62:62:1d:97:9a:c7:a5:30:98:15:e2:00:28:43:
79:5d:b8:88:43:28:52:60:4a:83:a8:d3:67:cd:b2:
54:cf:57:fc:b5:2c:c7:89:05:8f:60:a3:b5:6f:46:
e0:07:a3:5c:0b:d4:81:1b:5b:69:44:8d:d9:cf:16:
e5:14:c9:e0:52:7b:58:36:09:2e:29:1e:ca:b7:af:
10:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FA:6C:4B:A9:21:44:3C:38:36:57:76:F0:E0:F1:2D:8A:56:71:28
X509v3 Authority Key Identifier:
keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3e:93:e4:2f:f3:ed:fe:65:5f:2c:ff:09:a4:45:01:51:5b:
82:e6:25:e5:c8:82:33:6e:b2:30:7c:9f:97:7a:e6:64:8c:2c:
bb:26:bb:b1:2d:8a:02:0f:95:4c:7a:43:e4:8a:6b:fd:55:3a:
8a:e6:65:07:29:8a:38:04:c9:0a:17:27:aa:2f:eb:dd:bb:e2:
85:9f:64:e0:e2:21:c1:9b:58:6d:bc:38:7a:7a:b0:23:1b:c7:
bb:8d:f1:24:b8:25:fe:b1:c5:a7:bb:97:2d:4b:d7:ce:d5:f6:
fd:55:61:8b:82:dc:4c:7b:02:54:a0:53:7f:94:43:6e:05:a9:
5f:b6:84:9d:e7:b2:28:7d:f0:6c:d7:4b:21:48:93:66:4a:6e:
7f:ab:77:ae:57:20:c6:96:15:5e:2f:77:91:3f:0b:ac:70:0a:
c6:d3:06:4c:59:1e:7a:10:6e:4a:4f:b6:74:15:6b:d5:2d:61:
c7:09:11:0c:17:fc:b6:35:8e:5c:c9:8b:a2:23:74:a8:50:ee:
f9:65:b2:28:c4:fb:15:f8:67:e8:d9:9a:c7:56:35:33:27:15:
df:c0:ae:89:90:05:8a:96:e7:ce:97:c2:6d:8c:3d:9b:84:08:
62:cb:90:cc:ed:f7:83:04:23:55:3d:34:af:bd:fb:65:ad:fb:
99:fc:04:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:30:16 2026 by rpki-client