
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
File: wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft (raw, json)
Hash identifier: TglBUDcGg0LFhRnylrzJRJypFAm3cJ2NJ6HNNIjJaUE=
Subject key identifier: 2B:F2:44:9D:6D:EF:3F:2B:1F:65:ED:D5:09:99:C2:ED:DE:36:05:28
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial: 1000
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
Manifest number: 0F6F
Signing time: Sun 26 Apr 2026 17:29:49 +0000
Manifest this update: Sun 26 Apr 2026 17:29:49 +0000
Manifest next update: Sun 03 May 2026 17:29:49 +0000
Files and hashes: 1: wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl (hash: lsynPy/8u+MKSxMLEzUCGeD7EFjKLc+5qYpTR9t24MM=)
2: 8BF4322E978211EF8ED65F7CC4F9AE02.roa (hash: OlsJd6ey1m/lkk+tPjvI82t7mX5fZieFbLEHKqrFHQU=)
3: 2AE826A8BEE011F0BE9E3C56C4F9AE02.roa (hash: 6QSJlYvGlxlOHjtqJLDfZzMxNsOTkqRaWJqPkERhp50=)
4: 3D6D075A0ED011F0850DFC18C4F9AE02.roa (hash: 84bATkmq8Cq5bXGPwg6yROheXDIbxxbJc8dJExvDwlI=)
5: 218CF3401F9411F083A54B70C4F9AE02.roa (hash: N5mJJjPLK714usB1Auj1jXAnw3X85CmNICNXmMMuj+Y=)
6: 20AB43C81F9411F083A54B70C4F9AE02.roa (hash: 7cDdADbTHZRG0bVfK6SUqFLI7wiUJaBfx2Pc8146GtM=)
7: 2A03C2CEBEE011F08AE93C56C4F9AE02.roa (hash: WV02wqJsppKXq1XlBbQhmsKZt8eCHoQe8+9r6ds5Qp4=)
8: 1A582DBABDCB11ED998A723DC4F9AE02.roa (hash: 0HaUO00nBR+YnGoQ+Zy9ot2m3QDaVdxpXyCgl3vg4D0=)
9: E23B9C48F97D11EDB12DE418C4F9AE02.roa (hash: kf4ZyHNL4zylzb7OM9gXObkG3qlHM7UZYwNm8i065DQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 17:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4096 (0x1000)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Validity
Not Before: Apr 26 17:29:49 2026 GMT
Not After : May 3 17:29:49 2026 GMT
Subject: CN=69ee4b8d-9744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:9b:30:2d:96:7d:3d:e3:cd:46:c6:53:fd:
a7:e2:84:4e:30:94:ef:54:f6:fb:39:b2:24:df:79:
25:cd:fe:10:f0:6d:db:6b:6b:0f:63:14:58:6b:32:
32:7a:ea:48:a8:4c:37:2c:1c:bf:4c:b3:c6:72:55:
a9:b0:ca:4e:27:aa:c6:d3:bf:17:af:27:c7:8d:88:
94:ea:c6:33:ef:ea:f4:b2:9a:a9:48:cb:85:60:96:
51:df:f1:24:7a:61:3b:5a:cc:c2:c7:f9:b9:6e:81:
41:42:bb:08:f6:8e:b6:54:02:9f:45:87:32:20:95:
2a:02:57:54:d8:73:76:97:b1:3a:7f:7a:72:f6:7f:
88:23:de:96:8d:83:2b:4f:a9:79:6c:09:dc:83:56:
f5:27:e8:1e:f1:6d:0e:25:19:8c:10:ce:9f:d7:2b:
de:9e:ab:17:84:48:2e:26:11:89:dd:03:1c:07:37:
91:48:d5:2b:7f:b2:1a:80:6b:3a:14:78:e1:ec:57:
cc:9b:90:f2:fc:44:fc:b8:46:ae:1d:09:db:0a:49:
45:03:da:07:07:ae:da:4b:6b:d1:7f:d3:23:b7:f6:
99:f2:5b:d8:6a:7c:06:50:d6:d4:b4:ad:59:f8:b6:
03:7e:f3:8b:06:8a:35:8a:74:14:36:d5:66:b4:90:
52:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F2:44:9D:6D:EF:3F:2B:1F:65:ED:D5:09:99:C2:ED:DE:36:05:28
X509v3 Authority Key Identifier:
keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:41:65:ac:c1:d2:95:26:9f:bc:9b:d6:44:89:fd:72:fa:b3:
d2:af:c3:fb:7c:e2:58:d4:3e:fb:4f:0a:56:83:15:ae:7f:4a:
69:68:d3:22:b3:fe:f1:46:42:51:cc:e3:f1:80:1b:da:20:bd:
21:b3:b0:bf:21:62:0d:e2:82:25:ac:4d:6d:4a:0e:ed:fb:c4:
38:b5:88:bc:10:93:eb:40:d4:63:9a:c1:49:c0:6b:28:ec:03:
74:1d:9e:c4:81:a1:02:05:b8:ed:ac:2f:a9:23:40:62:a3:a2:
5f:46:6f:6d:d1:21:d6:aa:31:78:59:ef:fd:72:e5:da:0b:e9:
7e:e4:a4:29:19:9a:85:90:fc:33:70:17:d7:50:b0:34:cf:e9:
1b:4a:63:d6:c0:69:d6:bf:d9:a3:a6:6e:7a:ae:52:38:cb:d9:
de:64:a5:27:0f:57:f9:e6:34:c5:4d:64:de:09:ed:d2:14:4f:
bf:54:59:e6:39:87:14:47:d7:87:32:01:79:aa:9f:21:1f:89:
08:d4:f3:9d:5a:89:44:4c:d5:9c:48:09:62:ce:c5:b7:83:a3:
f1:b9:ff:71:fe:73:c9:9d:d6:48:3e:66:d3:e3:36:15:ea:55:
fa:e0:99:a9:18:8b:aa:e1:f6:80:3c:21:72:1c:91:1c:ec:f6:
f2:c2:67:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:06:31 2026 by rpki-client