
$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
File: WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft (raw, json)
Hash identifier: vocbUYB0SP+r2awRFEnQinHe+vp0VXeWa4w5uBVve1E=
Subject key identifier: 09:D6:3A:75:23:2B:0C:30:62:A6:A2:C4:4A:E2:06:05:58:7E:36:6F
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial: 142C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
Manifest number: 13EA
Signing time: Tue 24 Mar 2026 14:56:03 +0000
Manifest this update: Tue 24 Mar 2026 14:56:03 +0000
Manifest next update: Tue 31 Mar 2026 14:56:03 +0000
Files and hashes: 1: WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl (hash: G493ju6XIAxrrMbVpm+mxCMEs3K2/LynGiTNnWt1458=)
2: 069626A6ABC211EA9C9FC06EC4F9AE02.roa (hash: a13wcJgj/v303LsVDa83QJzYatBFpSPG3+KuAw015o8=)
3: E53A0A54450911EBBA450A64C4F9AE02.roa (hash: QsNfjyBldTeeXZxbYWBlEhOqNtrvsHdGyA494jCXWak=)
4: 5BE6FE3ED7A311EF9D214C13C4F9AE02.roa (hash: f6ZjXZpyq8OVEfmQdaDwSN6wsAiiFOFq3Xa/dwSKfIU=)
5: 46CE46B416BF11EBB31D5A6AC4F9AE02.roa (hash: uelfGUi7e/t05BHwWkhZVN++x9escF/UtiNhCjCcV0s=)
6: 005D2F8E56B611EAA08F9B82C4F9AE02.roa (hash: 6B9hPSQdsNcZKZfD4I2g+nG3PQ9K3MqkXD1L3kncMBw=)
7: E1982A2EAD7511EA94C97127C4F9AE02.roa (hash: FXJ8Ym+jtcL3rZsEDtV2bU4z875vH9QG04Qb3pATJI0=)
8: 0D4D857E3B9211F0857DC432C4F9AE02.roa (hash: krDa/XdE9E/2Q0I211bs1loNvGb6/CHjA41cl9NEUoY=)
9: 994F0A88D86B11E9B8BFCE0AC4F9AE02.roa (hash: SE39gOZ2xnFhkX1dRNgXZ68hAy9sMt5XwzHtFoVdgBQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5164 (0x142c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Validity
Not Before: Mar 24 14:56:03 2026 GMT
Not After : Mar 31 14:56:03 2026 GMT
Subject: CN=69c2a603-d70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2a:1d:aa:85:84:2f:ad:16:eb:29:9d:88:c4:
08:45:f6:7f:43:84:04:88:13:02:f3:4c:68:94:a6:
a8:fe:85:12:28:c6:14:d6:89:ec:80:73:ad:2b:6a:
d3:de:53:ec:06:ab:29:d5:c9:6f:15:ae:b1:c3:72:
da:8e:1e:b3:e2:ad:bb:dd:da:54:09:b6:2a:24:4e:
7e:ae:12:ba:97:3a:a9:cc:d2:0f:92:ab:05:3b:b9:
5e:36:af:c3:d0:3d:24:78:2e:d0:6a:68:d9:98:1d:
f5:f4:64:53:15:1f:99:54:d4:6b:f2:a5:1d:57:37:
38:11:6b:e0:9b:f1:49:cf:f5:9e:27:1c:70:40:30:
46:dc:0b:d4:0f:20:d8:8c:f7:37:b1:12:9f:6c:3f:
bd:59:a5:6b:82:73:97:8a:b3:37:63:2d:08:07:58:
63:7f:12:8d:21:32:7f:ec:e5:57:f9:94:11:27:fe:
69:60:f5:07:5e:0e:51:d5:a8:3a:87:16:40:54:12:
5c:4a:77:72:98:f9:8b:2e:28:e5:1e:f7:a7:c2:02:
66:ff:b3:56:b3:18:e0:50:9e:c0:39:24:08:81:92:
6b:79:cd:09:54:3b:15:d7:b0:33:92:10:87:4a:c1:
06:80:c9:d7:48:ad:c5:74:f7:c2:76:49:46:35:50:
cb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D6:3A:75:23:2B:0C:30:62:A6:A2:C4:4A:E2:06:05:58:7E:36:6F
X509v3 Authority Key Identifier:
keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:01:e9:71:eb:2e:a0:5e:46:02:d2:2f:8d:53:e7:31:03:c7:
87:8f:ee:6f:ba:c2:74:4d:f3:7a:d9:e6:f8:2b:c8:23:3a:a8:
cf:f7:39:0e:67:9e:f0:53:88:a7:b5:72:08:9a:ab:85:74:24:
c7:4d:dc:ee:db:be:e4:40:28:db:a9:70:80:f9:73:eb:60:46:
3c:c4:f3:52:55:ba:83:4a:4c:9b:f7:14:e8:99:4e:ce:a0:b5:
c4:5c:a6:0e:ad:a3:dd:e5:ce:66:f5:a2:aa:59:81:3a:30:a3:
99:78:84:c9:8d:59:e0:46:79:5f:4d:0b:06:80:60:90:ff:9b:
59:fc:37:1b:18:a1:96:4a:bb:cc:b7:64:0e:78:14:11:e6:e9:
88:94:65:73:0b:d2:d9:24:b5:b7:10:28:c7:60:c8:3d:e3:ea:
75:aa:74:76:78:76:c5:ac:f6:4c:9d:a2:e7:02:0b:72:34:90:
51:71:d0:06:67:cd:f0:6c:f5:57:27:fa:d7:7b:fb:a0:87:d5:
62:2f:77:91:c1:00:28:aa:b0:51:db:44:5d:b2:01:ba:e0:4c:
0c:16:e1:bf:97:d9:6e:4b:58:64:fc:a2:cc:0e:ef:61:d4:2e:
ea:c9:d7:a3:84:e4:24:49:47:1f:00:1d:4a:04:b6:ac:82:1c:
e2:73:c2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:10:26 2026 by rpki-client