
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
File: WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft (raw, json)
Hash identifier: pRSB9JexNdhxTyqgEWXARd9zcPtK56NV0JglP/Eve/o=
Subject key identifier: F5:C8:55:34:F5:A6:28:3F:39:D0:75:43:75:25:55:A0:66:33:57:02
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial: 1483
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
Manifest number: 1441
Signing time: Thu 10 Sep 2026 14:55:56 +0000
Manifest this update: Thu 10 Sep 2026 14:55:56 +0000
Manifest next update: Thu 17 Sep 2026 14:55:56 +0000
Files and hashes: 1: WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl (hash: naCcSkCvbOmunr3Qb76i25NuRYiHW3rRo+MSvjC0iUk=)
2: 46CE46B416BF11EBB31D5A6AC4F9AE02.roa (hash: uelfGUi7e/t05BHwWkhZVN++x9escF/UtiNhCjCcV0s=)
3: 0D4D857E3B9211F0857DC432C4F9AE02.roa (hash: krDa/XdE9E/2Q0I211bs1loNvGb6/CHjA41cl9NEUoY=)
4: 069626A6ABC211EA9C9FC06EC4F9AE02.roa (hash: a13wcJgj/v303LsVDa83QJzYatBFpSPG3+KuAw015o8=)
5: 994F0A88D86B11E9B8BFCE0AC4F9AE02.roa (hash: SE39gOZ2xnFhkX1dRNgXZ68hAy9sMt5XwzHtFoVdgBQ=)
6: 5BE6FE3ED7A311EF9D214C13C4F9AE02.roa (hash: f6ZjXZpyq8OVEfmQdaDwSN6wsAiiFOFq3Xa/dwSKfIU=)
7: E1982A2EAD7511EA94C97127C4F9AE02.roa (hash: FXJ8Ym+jtcL3rZsEDtV2bU4z875vH9QG04Qb3pATJI0=)
8: 005D2F8E56B611EAA08F9B82C4F9AE02.roa (hash: 6B9hPSQdsNcZKZfD4I2g+nG3PQ9K3MqkXD1L3kncMBw=)
9: E53A0A54450911EBBA450A64C4F9AE02.roa (hash: QsNfjyBldTeeXZxbYWBlEhOqNtrvsHdGyA494jCXWak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5251 (0x1483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Validity
Not Before: Sep 10 14:55:56 2026 GMT
Not After : Sep 17 14:55:56 2026 GMT
Subject: CN=6aa2c4fc-29ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:86:8d:9c:6c:de:11:81:93:82:d8:27:a4:
40:41:80:54:73:a3:f6:bd:19:94:ad:fa:a3:49:fb:
54:34:1b:60:80:56:45:b7:3c:d2:46:36:d3:85:dd:
c8:31:25:a1:45:fa:36:af:a9:3e:6d:47:e1:11:35:
3c:a4:56:5f:bb:61:99:14:44:63:d1:f3:90:25:83:
97:b7:cf:06:d2:f1:99:be:6a:1b:2b:74:cf:d5:38:
7b:ff:12:d8:07:7c:2a:e6:c5:a7:eb:fc:4e:d9:5a:
3d:bb:b0:79:bd:ff:03:b9:05:45:de:b5:01:5a:47:
0f:17:21:39:14:1b:64:f8:83:a0:8c:77:8d:a3:95:
3c:71:3c:34:60:7f:c8:a9:a3:e3:47:4c:e2:8c:22:
d9:14:0d:14:91:6f:18:3e:32:23:51:57:66:b9:42:
7e:f4:90:e7:c3:3a:88:c7:f7:9f:18:30:f2:8c:5d:
e1:3c:c4:e9:ee:a3:e2:c9:ad:4f:94:fc:b5:81:87:
6c:18:17:6b:3a:33:d3:7b:96:1c:84:dd:59:31:11:
3b:a0:51:09:48:82:89:a1:73:ac:e5:c0:99:ec:61:
3a:a6:f4:a0:c6:ee:7d:12:47:32:93:dc:21:d5:31:
7d:e1:52:7d:f5:3b:1f:bd:f3:55:1f:a4:b3:b7:31:
6e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C8:55:34:F5:A6:28:3F:39:D0:75:43:75:25:55:A0:66:33:57:02
X509v3 Authority Key Identifier:
keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:02:ad:04:96:30:3e:34:2d:df:42:84:8b:62:2e:c5:5e:21:
5d:68:cc:6a:9d:bd:4f:80:ad:e3:5d:eb:5e:02:d9:f1:5d:43:
55:79:3d:b6:c8:ca:e6:b3:af:71:5e:e2:1b:5d:dc:a4:6e:28:
fa:ee:5d:7c:67:11:e1:0a:92:72:9d:2e:61:d2:44:4a:f2:94:
b1:e5:63:3a:c5:d7:20:9a:14:be:55:00:d4:31:3d:0f:61:f5:
9a:8f:09:7e:e2:d7:68:a1:bc:1a:cf:25:44:08:66:77:bd:15:
49:09:f4:c7:0f:e2:23:4a:85:eb:ae:95:0b:31:1a:86:cb:6b:
1d:5c:07:e6:e9:b0:82:13:6c:98:60:18:85:25:cb:4f:d9:76:
c6:db:f1:5e:d7:42:5a:07:94:63:74:ee:1a:51:4e:af:8d:63:
f6:2a:a1:ad:2f:5d:ba:3d:72:a5:54:e1:92:8a:61:e7:8d:25:
34:9d:bd:de:98:d6:a1:56:0b:f9:d2:2f:37:9c:e7:93:f8:aa:
ec:7c:23:6e:14:45:8e:11:98:33:33:d1:4e:f4:ad:24:b6:40:
4f:6a:b5:c2:31:3e:3d:43:60:39:38:79:bc:35:a8:20:06:e1:
43:b1:d8:75:ca:82:19:a9:8b:e8:48:41:09:5d:1f:25:79:34:
a7:a1:3e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:09:02 2026 by rpki-client