
$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
File: WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft (raw, json)
Hash identifier: 5tSKm2FK/6lLLihno/eiaoyPbDpHy3e3iE/+fr76JQs=
Subject key identifier: E3:C0:AB:0D:4E:26:7E:D5:2C:2A:E0:1F:F2:6A:A7:38:E9:98:A3:2F
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial: 142D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
Manifest number: 13EB
Signing time: Thu 26 Mar 2026 14:59:18 +0000
Manifest this update: Thu 26 Mar 2026 14:59:17 +0000
Manifest next update: Thu 02 Apr 2026 14:59:17 +0000
Files and hashes: 1: WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl (hash: PTYrxaYGp9gpc7S1JjXtQS3lZ5VeOx1uDMcEapHhu/U=)
2: 46CE46B416BF11EBB31D5A6AC4F9AE02.roa (hash: uelfGUi7e/t05BHwWkhZVN++x9escF/UtiNhCjCcV0s=)
3: E53A0A54450911EBBA450A64C4F9AE02.roa (hash: QsNfjyBldTeeXZxbYWBlEhOqNtrvsHdGyA494jCXWak=)
4: E1982A2EAD7511EA94C97127C4F9AE02.roa (hash: FXJ8Ym+jtcL3rZsEDtV2bU4z875vH9QG04Qb3pATJI0=)
5: 069626A6ABC211EA9C9FC06EC4F9AE02.roa (hash: a13wcJgj/v303LsVDa83QJzYatBFpSPG3+KuAw015o8=)
6: 5BE6FE3ED7A311EF9D214C13C4F9AE02.roa (hash: f6ZjXZpyq8OVEfmQdaDwSN6wsAiiFOFq3Xa/dwSKfIU=)
7: 994F0A88D86B11E9B8BFCE0AC4F9AE02.roa (hash: SE39gOZ2xnFhkX1dRNgXZ68hAy9sMt5XwzHtFoVdgBQ=)
8: 005D2F8E56B611EAA08F9B82C4F9AE02.roa (hash: 6B9hPSQdsNcZKZfD4I2g+nG3PQ9K3MqkXD1L3kncMBw=)
9: 0D4D857E3B9211F0857DC432C4F9AE02.roa (hash: krDa/XdE9E/2Q0I211bs1loNvGb6/CHjA41cl9NEUoY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5165 (0x142d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Validity
Not Before: Mar 26 14:59:17 2026 GMT
Not After : Apr 2 14:59:17 2026 GMT
Subject: CN=69c549c6-a36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:80:3f:50:ac:fd:9c:77:ec:d1:36:67:e9:
90:1d:7c:98:c9:42:e8:3b:b9:55:51:b7:b2:f4:c1:
75:96:c9:6f:78:f9:e2:83:56:a5:37:d8:ad:ab:d1:
c6:d9:bd:80:a1:0a:f4:70:19:32:db:3b:5e:b9:cb:
1c:f9:4e:6b:41:5b:d3:25:69:5d:ff:1e:0d:6f:ae:
c2:4c:e3:cc:97:5e:3f:21:45:7a:1d:01:68:a6:c3:
3a:4e:e5:56:89:aa:6f:72:c7:3e:08:24:c6:f2:47:
89:c9:26:04:00:70:cf:5b:ea:bd:02:ae:8f:26:99:
9a:2d:f6:c2:78:99:14:31:11:8e:08:71:5e:0e:72:
28:d3:89:ed:0f:af:f0:83:f6:fb:67:5f:60:5b:cd:
8e:33:51:5d:9b:a7:90:ef:b5:c1:bf:1d:cb:94:20:
7c:05:ab:62:08:c9:72:5f:30:c0:b7:a7:76:9d:76:
12:c9:ad:13:76:b9:d6:72:15:b1:52:8d:c8:ec:2b:
b5:a1:4c:87:57:5a:1e:ad:6e:58:1a:d4:12:d0:d6:
21:1b:ec:60:94:13:92:3c:56:28:85:48:68:db:dc:
1b:a3:69:f4:35:42:ef:bb:92:e7:13:a0:c5:08:5c:
7d:c1:63:27:c9:66:2c:41:82:87:27:5b:41:a6:17:
f6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C0:AB:0D:4E:26:7E:D5:2C:2A:E0:1F:F2:6A:A7:38:E9:98:A3:2F
X509v3 Authority Key Identifier:
keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f1:17:d6:92:92:5d:ff:0b:92:c9:00:d2:ac:70:aa:85:58:
ac:76:ab:8a:bd:bd:92:77:e5:39:94:66:38:a6:57:6e:3e:f3:
a7:7a:2b:4f:3f:c5:e6:85:d6:91:83:c6:8c:55:10:22:3d:2e:
8a:0a:e6:af:21:f2:f9:0c:e2:23:6e:d6:f5:10:82:39:0f:9a:
ff:c7:08:e4:f6:c9:5c:c1:c4:6a:a8:a3:d1:db:f1:47:1a:42:
7b:67:19:26:50:39:9a:3f:e1:86:0e:86:f0:a4:e2:7d:df:2c:
6b:c0:8e:06:be:42:c3:b0:28:84:ef:04:da:0b:d5:31:47:88:
71:a3:5f:3f:1b:8c:0c:1a:18:e9:86:f4:47:87:5a:78:85:79:
ae:2e:0f:27:ca:2c:97:14:ab:b9:2a:af:e7:9f:6a:1d:c9:e0:
ce:d2:96:4b:68:ab:fd:61:b3:00:d8:ca:17:80:b3:e1:02:16:
b3:33:0d:4e:9b:b2:32:f5:4e:7b:d7:8d:f1:e6:65:8b:1d:b3:
66:83:9d:51:1b:4e:fb:98:bf:22:d1:29:d3:fd:65:d2:d0:49:
95:ab:d9:74:16:22:3c:96:4c:5f:46:51:f5:aa:86:5b:70:70:
29:ed:dc:2f:86:92:16:65:2f:80:0b:9a:ce:33:49:af:65:28:
eb:9e:ea:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:26:29 2026 by rpki-client