
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
File: hf--WNwc9_kcLTgTTiC27wssOl8.mft (raw, json)
Hash identifier: U12BnAYsoJ9OhZC7ZLcOq/yjKPuQ7lusfdKXzl+8LRw=
Subject key identifier: 2D:F5:F9:15:BB:24:FD:DA:F9:C0:62:D5:C0:CE:84:EF:D7:43:98:6E
Authority key identifier: 85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F
Certificate issuer: /CN=A911954F/serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F
Certificate serial: 01CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
Manifest number: 03E0
Signing time: Sat 03 Oct 2026 03:35:44 +0000
Manifest this update: Sat 03 Oct 2026 03:35:44 +0000
Manifest next update: Sat 10 Oct 2026 03:35:44 +0000
Files and hashes: 1: hf--WNwc9_kcLTgTTiC27wssOl8.crl (hash: 1BZFfcyRxqo8/EBCArMe2y08llHNQZG7Nw1MBHuHZkg=)
2: 65874B72FF1D11F09D5C691B85EE528E.roa (hash: mRk4Fo6iZr93iyaJTrEyOENMDqLXHjjP+xgNzUN6Prs=)
3: 5FAC3CB644CE11F19BD95499BE833773.roa (hash: WkErIMYK/mQSKLc4lnPt53wSfKMo9LaNrKnnlPsS/9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl
rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911954F, serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F
Validity
Not Before: Oct 3 03:35:44 2026 GMT
Not After : Oct 10 03:35:44 2026 GMT
Subject: CN=6ac07810-b2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c4:cd:98:ca:28:9d:f5:bb:c8:9b:28:fa:e4:
d1:b2:02:1b:fd:7a:8a:e1:c4:e0:d8:a1:f0:13:e6:
19:75:a8:8c:a2:61:95:75:ca:41:26:bd:8b:3a:5e:
03:78:a2:76:d0:9d:a6:9c:3a:78:76:60:b3:c7:8c:
de:9a:09:3b:d7:e8:53:d2:22:89:56:a1:50:ee:4f:
a9:e7:8a:9f:53:3a:4f:79:56:b6:a3:7d:af:39:74:
79:f5:2e:6e:89:a2:d4:a7:75:87:6d:a2:07:20:08:
d4:a5:ce:af:2a:60:1e:36:2d:c2:e7:33:d3:52:fc:
4a:59:56:b4:bd:c4:26:bb:07:e7:54:5c:eb:f5:e8:
45:27:70:4a:5c:a4:53:60:8a:4d:db:1e:1d:0d:13:
bc:aa:df:95:be:cd:16:3a:78:94:ce:3a:72:50:6a:
1c:75:16:4e:57:61:4a:4d:f7:b3:a0:76:dc:ec:34:
ef:c9:d4:de:c2:16:15:bd:a3:56:83:60:20:93:9a:
d6:97:b6:66:e2:94:97:76:c7:d3:83:17:bb:11:2d:
df:0a:75:0c:3c:23:b5:5b:14:ef:35:b0:1a:e8:ce:
41:7b:d0:0d:95:d8:3d:b6:25:79:ed:2c:c5:60:4a:
2c:2a:74:83:ce:30:65:a4:92:60:8b:2a:a7:88:2b:
57:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F5:F9:15:BB:24:FD:DA:F9:C0:62:D5:C0:CE:84:EF:D7:43:98:6E
X509v3 Authority Key Identifier:
keyid:85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:94:70:16:6e:72:61:12:eb:b0:cc:b2:a9:b6:7c:36:ed:6d:
aa:9d:78:ae:87:89:0d:4c:f5:fa:55:3a:53:fd:22:cf:88:67:
fb:53:bf:92:99:85:c5:21:58:d6:e8:ec:df:15:a9:05:47:b1:
8f:2e:ec:0e:c7:13:9e:2e:13:9b:06:ce:c1:6a:7c:90:3d:92:
51:27:6f:ff:da:9d:d9:9c:fb:a2:d4:51:cf:1d:35:6b:fb:56:
54:8a:f3:6f:04:06:b9:bf:f5:3f:0a:e9:4b:38:fe:3b:8b:01:
1c:93:40:e1:69:fa:b5:89:d6:38:12:37:f7:7e:10:c1:7a:db:
0f:a5:08:25:10:f0:4a:e7:f3:5c:a7:9d:2a:39:3a:29:db:95:
de:40:aa:e8:b1:c8:7a:44:d1:90:45:9b:67:27:25:bf:b7:b8:
6d:8f:7c:a8:04:80:7a:3a:2a:6f:1a:f4:d6:9a:e2:1c:7d:f3:
43:14:df:b3:f5:94:47:a6:59:41:98:e5:59:a3:f0:a7:b4:3a:
c5:9e:98:af:2e:d5:80:8e:4e:19:a5:10:27:b6:6a:19:67:a3:
50:f3:c3:28:45:e8:50:0e:a9:c8:5e:4b:98:c9:35:8d:2e:1b:
aa:84:c0:2c:d9:47:71:78:fc:44:75:b1:ed:f8:e1:72:da:a9:
7b:d2:e9:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk1NEYxMTAvBgNVBAUTKDg1RkZCRTU4REMxQ0Y3RjkxQzJEMzgxMzRFMjBCNkVG
MEIyQzNBNUYwHhcNMjYxMDAzMDMzNTQ0WhcNMjYxMDEwMDMzNTQ0WjAYMRYwFAYD
VQQDEw02YWMwNzgxMC1iMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAysTNmMoonfW7yJso+uTRsgIb/XqK4cTg2KHwE+YZdaiMomGVdcpBJr2LOl4D
eKJ20J2mnDp4dmCzx4zemgk71+hT0iKJVqFQ7k+p54qfUzpPeVa2o32vOXR59S5u
iaLUp3WHbaIHIAjUpc6vKmAeNi3C5zPTUvxKWVa0vcQmuwfnVFzr9ehFJ3BKXKRT
YIpN2x4dDRO8qt+Vvs0WOniUzjpyUGocdRZOV2FKTfezoHbc7DTvydTewhYVvaNW
g2Agk5rWl7Zm4pSXdsfTgxe7ES3fCnUMPCO1WxTvNbAa6M5Be9ANldg9tiV57SzF
YEosKnSDzjBlpJJgiyqniCtXfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC31+RW7
JP3a+cBi1cDOhO/XQ5huMB8GA1UdIwQYMBaAFIX/vljcHPf5HC04E04gtu8LLDpf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU0Ri81OTFBMzIyMDkx
NEExMUVFOTQyQ0M4NzFDNEY5QUUwMi9oZi0tV053Yzlfa2NMVGdUVGlDMjd3c3NP
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hmLS1XTndjOV9rY0xUZ1RUaUMyN3dzc09sOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTU0Ri81OTFBMzIyMDkxNEExMUVFOTQyQ0M4NzFDNEY5QUUwMi9oZi0tV053Yzlf
a2NMVGdUVGlDMjd3c3NPbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlpRwFm5yYRLrsMyyqbZ8Nu1tqp14roeJDUz1+lU6U/0iz4hn+1O/kpmFxSFY
1ujs3xWpBUexjy7sDscTni4TmwbOwWp8kD2SUSdv/9qd2Zz7otRRzx01a/tWVIrz
bwQGub/1PwrpSzj+O4sBHJNA4Wn6tYnWOBI3934QwXrbD6UIJRDwSufzXKedKjk6
KduV3kCq6LHIekTRkEWbZyclv7e4bY98qASAejoqbxr01priHH3zQxTfs/WUR6ZZ
QZjlWaPwp7Q6xZ6Yry7VgI5OGaUQJ7ZqGWejUPPDKEXoUA6pyF5LmMk1jS4bqoTA
LNlHcXj8RHWx7fjhctqpe9LpQw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 19:58:24 2026 by rpki-client