
$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
File: hf--WNwc9_kcLTgTTiC27wssOl8.mft (raw, json)
Hash identifier: +eV4zLQsK11be8/qdEjRBwJXplioCEQXBr/SsK0qS10=
Subject key identifier: A8:49:73:07:C0:63:9D:3C:FC:3A:53:FE:2F:38:DC:53:AA:AA:A4:00
Authority key identifier: 85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F
Certificate issuer: /CN=A911954F/serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
Manifest number: 034E
Signing time: Mon 11 May 2026 03:44:47 +0000
Manifest this update: Mon 11 May 2026 03:44:47 +0000
Manifest next update: Mon 18 May 2026 03:44:47 +0000
Files and hashes: 1: hf--WNwc9_kcLTgTTiC27wssOl8.crl (hash: sDiV7ivuAXx7xKhhBtUGkOFDjVdRKhHpbhDAwszEzL8=)
2: 5FAC3CB644CE11F19BD95499BE833773.roa (hash: WkErIMYK/mQSKLc4lnPt53wSfKMo9LaNrKnnlPsS/9g=)
3: 65874B72FF1D11F09D5C691B85EE528E.roa (hash: mRk4Fo6iZr93iyaJTrEyOENMDqLXHjjP+xgNzUN6Prs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl
rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911954F, serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F
Validity
Not Before: May 11 03:44:47 2026 GMT
Not After : May 18 03:44:47 2026 GMT
Subject: CN=6a0150af-870b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:8e:7b:d3:cd:99:ef:f6:f9:c4:a2:af:bd:
5c:70:ff:0b:96:1f:c4:94:aa:63:b3:e9:05:16:7f:
ee:d5:fa:15:b8:57:a9:54:c7:e0:9a:a0:ba:5d:c0:
56:03:23:17:97:2b:24:ca:24:27:cd:6f:e9:0c:26:
d5:89:45:1f:a6:84:c5:ce:4f:56:71:7e:b6:6e:e6:
c6:d7:91:d2:c2:cb:38:68:fe:e3:9a:56:e0:86:75:
39:fd:b5:64:93:a4:6d:11:38:0a:a3:ec:29:21:45:
73:80:d9:65:e0:ee:88:3d:ea:43:f7:6c:62:02:b0:
24:04:2a:8d:c9:e2:2a:7b:75:d5:a1:35:cd:34:ac:
5b:f4:30:9b:e5:e5:e2:12:13:8c:96:04:ad:48:5b:
1e:48:b3:0f:91:e8:9e:32:e8:47:18:f7:80:0f:ff:
0c:af:46:e6:42:8b:3a:f2:c1:39:c3:f5:68:f0:c2:
86:f0:0a:c4:e2:07:a4:3e:16:2a:2b:fb:9e:35:98:
2e:c3:96:82:30:a6:a2:73:f5:46:69:4b:e7:1d:36:
00:a2:d2:a3:b1:dd:84:7a:9a:5c:d8:4c:fe:70:1b:
b5:d6:34:c8:5b:0f:d8:d0:99:35:ae:b7:a8:5e:9e:
e1:57:90:0f:cb:33:d0:0f:94:5d:0f:e7:9a:1b:4f:
27:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:49:73:07:C0:63:9D:3C:FC:3A:53:FE:2F:38:DC:53:AA:AA:A4:00
X509v3 Authority Key Identifier:
keyid:85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:6a:8f:5c:6d:a9:4a:6c:c1:ca:dc:45:a9:74:79:fe:1f:5a:
31:e8:32:9e:eb:69:b9:e9:7f:89:03:fa:8e:a3:e1:18:e7:1a:
0e:eb:23:56:71:a0:29:74:f9:7d:49:2c:85:68:0f:16:a9:66:
12:16:b8:d7:9d:fe:30:a8:af:c3:36:d7:92:77:47:e3:fc:5b:
11:46:f8:96:f6:5a:ff:8e:56:df:c6:52:5e:63:13:63:59:b3:
95:4d:84:10:8b:f0:d5:5c:e0:6e:aa:56:02:89:12:6a:37:15:
34:05:b3:34:78:ef:28:b7:30:6e:f7:b7:65:bb:6e:72:81:ad:
c8:10:57:21:a1:9d:bd:82:46:da:4b:63:44:27:09:c9:f3:d8:
33:78:4e:13:d5:c0:32:4e:83:f1:97:d5:0a:aa:37:31:ff:ef:
05:e2:17:a5:48:59:25:70:35:b6:30:ad:78:bb:aa:1b:cb:85:
b7:bb:39:c6:bf:9d:63:02:5e:cb:05:cf:b8:a3:64:f5:e1:a1:
64:82:2f:c3:ce:66:9c:7f:da:1f:8d:32:30:00:5b:7c:95:67:
b4:c2:02:29:6e:49:60:fb:4b:5e:a0:8f:fc:6e:49:87:d9:4b:
94:7c:0e:3b:2b:7c:0a:05:39:97:29:9d:cf:ee:cd:9c:c4:18:
28:90:6e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:25 2026 by rpki-client