
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
File: wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft (raw, json)
Hash identifier: bL9rNQUSSs0B8Vb4xtPG1YXoKM3H+UCdscjX0iLzWyo=
Subject key identifier: E3:AB:03:4F:0F:D8:84:22:73:D2:44:DB:4E:DA:F5:76:8B:45:CC:3E
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial: 0FE9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
Manifest number: 0F58
Signing time: Thu 12 Mar 2026 17:25:44 +0000
Manifest this update: Thu 12 Mar 2026 17:25:44 +0000
Manifest next update: Thu 19 Mar 2026 17:25:44 +0000
Files and hashes: 1: wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl (hash: +Q1fF4SZ9/rDr4r3yOORDJ4PJc//vSD3bN8I6Lotitg=)
2: 3D6D075A0ED011F0850DFC18C4F9AE02.roa (hash: 84bATkmq8Cq5bXGPwg6yROheXDIbxxbJc8dJExvDwlI=)
3: 218CF3401F9411F083A54B70C4F9AE02.roa (hash: N5mJJjPLK714usB1Auj1jXAnw3X85CmNICNXmMMuj+Y=)
4: 20AB43C81F9411F083A54B70C4F9AE02.roa (hash: 7cDdADbTHZRG0bVfK6SUqFLI7wiUJaBfx2Pc8146GtM=)
5: 2AE826A8BEE011F0BE9E3C56C4F9AE02.roa (hash: 6QSJlYvGlxlOHjtqJLDfZzMxNsOTkqRaWJqPkERhp50=)
6: 1A582DBABDCB11ED998A723DC4F9AE02.roa (hash: 0HaUO00nBR+YnGoQ+Zy9ot2m3QDaVdxpXyCgl3vg4D0=)
7: 2A03C2CEBEE011F08AE93C56C4F9AE02.roa (hash: WV02wqJsppKXq1XlBbQhmsKZt8eCHoQe8+9r6ds5Qp4=)
8: E23B9C48F97D11EDB12DE418C4F9AE02.roa (hash: kf4ZyHNL4zylzb7OM9gXObkG3qlHM7UZYwNm8i065DQ=)
9: 8BF4322E978211EF8ED65F7CC4F9AE02.roa (hash: OlsJd6ey1m/lkk+tPjvI82t7mX5fZieFbLEHKqrFHQU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 17:25:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4073 (0xfe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Validity
Not Before: Mar 12 17:25:44 2026 GMT
Not After : Mar 19 17:25:44 2026 GMT
Subject: CN=69b2f718-f8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:bd:9c:bc:cf:55:ac:e3:a6:d3:54:94:eb:
dd:06:cd:97:bc:96:63:d9:03:d8:39:34:f6:0b:35:
dd:23:77:7b:18:62:6c:01:54:07:55:b0:2f:c7:50:
8e:d6:28:eb:6d:57:8d:38:80:53:9b:29:de:15:1d:
6b:48:d3:4b:fc:04:c6:b3:21:26:7d:a0:49:14:a1:
61:7d:82:8f:27:8d:3a:06:96:7c:8d:14:9b:61:6f:
59:90:a1:19:76:11:37:76:66:39:3a:3d:02:ec:b0:
10:35:0e:a2:09:4d:29:f7:af:ac:e2:b5:cf:fe:d3:
dd:89:bb:31:52:41:c3:a0:b0:e6:a8:89:03:15:82:
9d:01:d4:2b:1c:f1:74:6b:48:5c:bc:2a:cb:00:7a:
d4:f9:ad:55:13:ce:6d:46:ae:50:75:59:5e:cf:b0:
76:4b:9e:82:56:f9:e1:e1:08:9f:51:ca:88:b6:f3:
1a:a4:f9:f5:a9:57:91:66:95:ca:10:a9:c7:a6:63:
89:12:26:e7:7a:06:72:d2:1e:64:2a:d4:69:13:b5:
27:96:9d:0f:c1:4b:4b:3a:4f:78:02:5d:53:a3:4b:
85:b3:36:9c:1f:b1:6a:53:cb:7a:7d:e2:de:43:55:
43:1e:10:8b:58:c4:d6:ab:83:8c:1b:f6:f3:04:c2:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AB:03:4F:0F:D8:84:22:73:D2:44:DB:4E:DA:F5:76:8B:45:CC:3E
X509v3 Authority Key Identifier:
keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f4:43:22:a1:1d:62:b2:7f:cb:5b:0c:23:01:4a:93:cd:fe:
35:b4:50:b7:e5:ef:e4:ff:ff:a9:f7:15:64:8f:9b:fb:26:69:
73:b6:69:ac:93:2a:2e:30:ba:6f:25:4f:b1:d3:f9:c2:b7:1a:
2f:78:64:0c:78:84:07:85:74:96:08:21:fe:21:47:c8:82:a6:
2e:85:08:f5:36:36:af:48:9f:a5:47:26:81:4f:7a:ae:8a:cd:
c1:cd:59:ca:5d:1e:2a:e7:18:d4:74:db:14:f6:b2:ae:9d:aa:
9e:90:93:df:dd:ab:f8:01:08:7a:f1:c9:e0:4d:06:79:23:06:
05:8c:1f:ae:bb:bb:89:b1:53:06:1c:b3:ca:d4:b6:5e:81:53:
73:bb:46:e7:b9:bc:bd:48:e9:59:1c:84:9b:96:4e:73:d5:31:
1a:a5:6e:34:ca:92:36:6f:0d:94:43:01:cd:33:36:c0:0e:99:
2e:fa:56:a8:a9:b3:e4:89:8e:cb:dc:e6:7a:7a:ee:99:7e:2b:
db:2f:cc:1a:c7:50:ed:21:34:74:65:78:a2:5d:e7:85:61:6c:
10:b6:4a:e2:d1:90:15:ce:bb:6d:ee:d2:eb:7d:47:b9:1b:95:
f8:71:6c:fc:ca:f4:9d:8b:53:1d:2f:b5:ea:6b:4c:6e:99:f8:
6c:a7:cf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:14:33 2026 by rpki-client