
$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
File: hf--WNwc9_kcLTgTTiC27wssOl8.mft (raw, json)
Hash identifier: BblR8ogzgBXE5wxS5rmCrSXO4/TQYE60Bv1vSakvDRs=
Subject key identifier: B0:BC:D0:03:B0:FF:6F:BD:B0:B0:5A:20:FB:FE:DF:25:46:56:55:71
Authority key identifier: 85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F
Certificate issuer: /CN=A911954F/serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F
Certificate serial: 01A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
Manifest number: 0396
Signing time: Thu 23 Jul 2026 04:38:56 +0000
Manifest this update: Thu 23 Jul 2026 04:38:55 +0000
Manifest next update: Thu 30 Jul 2026 04:38:55 +0000
Files and hashes: 1: hf--WNwc9_kcLTgTTiC27wssOl8.crl (hash: kv8bCQwDEAOfYawIS8XagxTlp4+1y0PdxCYQ6jEilBw=)
2: 5FAC3CB644CE11F19BD95499BE833773.roa (hash: WkErIMYK/mQSKLc4lnPt53wSfKMo9LaNrKnnlPsS/9g=)
3: 65874B72FF1D11F09D5C691B85EE528E.roa (hash: mRk4Fo6iZr93iyaJTrEyOENMDqLXHjjP+xgNzUN6Prs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl
rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911954F, serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F
Validity
Not Before: Jul 23 04:38:55 2026 GMT
Not After : Jul 30 04:38:55 2026 GMT
Subject: CN=6a619ae0-99e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:83:5b:13:01:54:c5:ee:f2:d0:17:f7:c4:
04:9f:33:d1:c9:10:cd:f3:4a:13:eb:9b:c5:75:81:
f4:c9:8d:9d:7e:21:73:94:4d:d9:7f:5b:9f:fb:aa:
5b:7c:bf:3d:94:dd:6e:33:74:72:e8:d4:3c:0a:b7:
81:86:db:4f:8b:8d:53:32:a3:14:c4:70:0d:6b:4c:
17:ec:ce:7f:0a:d5:3b:11:81:2c:69:2a:ee:9a:9c:
e0:f9:61:ce:c8:d7:46:47:82:d4:76:e7:41:3e:51:
e4:60:01:43:e9:6b:7b:83:d0:59:90:d3:94:8c:a3:
38:38:06:7f:75:ea:70:0d:1a:1e:7f:95:bc:ad:54:
fd:74:5b:50:b4:74:4d:0e:94:0e:76:21:5a:5c:f1:
d7:30:1d:6f:a8:11:1e:c6:a5:4c:54:e8:a9:4c:c9:
fd:73:cf:fd:a0:2d:f0:08:ef:de:aa:e8:45:ab:8b:
ba:c4:90:5f:bf:b6:21:2e:50:01:f2:39:14:4c:40:
e2:fa:5e:f1:eb:5f:fd:bf:76:c9:6a:88:fe:2f:a2:
36:e0:a7:12:b1:b3:d4:d9:f0:f0:82:dd:6a:7f:ef:
9a:0f:35:87:a1:a4:66:30:4b:61:e5:cf:75:ee:98:
a7:48:01:72:a4:82:e8:e9:83:a0:34:12:f5:a6:d0:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BC:D0:03:B0:FF:6F:BD:B0:B0:5A:20:FB:FE:DF:25:46:56:55:71
X509v3 Authority Key Identifier:
keyid:85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:b2:4f:a5:ca:ad:aa:d1:40:70:f5:c3:fc:4e:24:11:b7:4e:
e4:bf:90:2a:24:50:7b:d7:c2:e1:3a:7e:85:53:2d:89:6f:8f:
87:98:5e:ba:76:bb:68:ec:4a:a8:7c:67:17:2b:7c:33:99:e9:
f9:49:15:9d:be:53:54:fa:89:63:b5:6f:c3:f7:9c:ef:a7:a0:
6d:5f:b1:38:3a:6a:86:1f:4c:ae:40:26:d2:e8:98:6f:1d:73:
2a:2b:bf:ee:3f:ef:b1:42:92:91:a1:1a:b8:07:ea:93:90:c2:
bf:26:8d:d7:d2:8a:21:c7:b7:ec:5e:b2:b8:72:93:7c:d2:70:
9f:6d:e2:57:9d:e7:5b:15:a8:99:26:78:26:84:a7:6e:9c:bf:
d1:44:bc:c0:ae:4c:44:38:52:9f:d2:d5:94:b4:9e:72:c7:49:
93:d3:92:c2:c5:f5:45:49:68:7e:1c:54:42:6b:b4:09:bc:5b:
0c:ba:4c:68:05:41:22:b9:e5:e9:6b:18:0e:6b:5c:74:c1:8b:
4e:a0:c0:7f:7b:d4:4c:79:85:8e:04:57:a9:48:e8:7c:a6:68:
e8:5d:c6:cb:ab:29:f0:21:e3:fb:87:30:af:db:0b:71:62:c4:
df:47:e7:92:22:02:cb:7f:7f:e2:37:eb:3e:4f:eb:e9:48:5a:
75:51:90:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:06:05 2026 by rpki-client