
$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
File: WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft (raw, json)
Hash identifier: qCeFsxHtWeSgs2bOqIRLV55ueGRZUZFxoDwuT1/jkvQ=
Subject key identifier: 85:AD:7E:97:5E:C2:1A:1F:29:E5:F2:28:02:58:1D:B4:BC:81:19:5D
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial: 146B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
Manifest number: 1429
Signing time: Sun 26 Jul 2026 15:00:05 +0000
Manifest this update: Sun 26 Jul 2026 15:00:05 +0000
Manifest next update: Sun 02 Aug 2026 15:00:05 +0000
Files and hashes: 1: WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl (hash: Y0QPRp3tVVIbuJ8fYtU3Lv+IoxybuXSwsSUo9TdVKKE=)
2: E53A0A54450911EBBA450A64C4F9AE02.roa (hash: QsNfjyBldTeeXZxbYWBlEhOqNtrvsHdGyA494jCXWak=)
3: 5BE6FE3ED7A311EF9D214C13C4F9AE02.roa (hash: f6ZjXZpyq8OVEfmQdaDwSN6wsAiiFOFq3Xa/dwSKfIU=)
4: 994F0A88D86B11E9B8BFCE0AC4F9AE02.roa (hash: SE39gOZ2xnFhkX1dRNgXZ68hAy9sMt5XwzHtFoVdgBQ=)
5: 46CE46B416BF11EBB31D5A6AC4F9AE02.roa (hash: uelfGUi7e/t05BHwWkhZVN++x9escF/UtiNhCjCcV0s=)
6: 005D2F8E56B611EAA08F9B82C4F9AE02.roa (hash: 6B9hPSQdsNcZKZfD4I2g+nG3PQ9K3MqkXD1L3kncMBw=)
7: 0D4D857E3B9211F0857DC432C4F9AE02.roa (hash: krDa/XdE9E/2Q0I211bs1loNvGb6/CHjA41cl9NEUoY=)
8: E1982A2EAD7511EA94C97127C4F9AE02.roa (hash: FXJ8Ym+jtcL3rZsEDtV2bU4z875vH9QG04Qb3pATJI0=)
9: 069626A6ABC211EA9C9FC06EC4F9AE02.roa (hash: a13wcJgj/v303LsVDa83QJzYatBFpSPG3+KuAw015o8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 15:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5227 (0x146b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Validity
Not Before: Jul 26 15:00:05 2026 GMT
Not After : Aug 2 15:00:05 2026 GMT
Subject: CN=6a6620f5-d4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:bd:60:85:6a:e1:b4:15:33:ee:1e:a8:56:
8b:c0:a9:7a:b2:4b:4e:cf:ee:ea:08:22:d0:f0:b5:
0f:0c:30:40:3d:d6:94:3f:b7:e5:3f:2f:0a:61:30:
4d:dc:8e:2e:01:2d:b2:d7:59:1a:40:b7:89:68:32:
60:c3:37:16:b9:1c:36:16:0f:c4:6d:30:11:0e:78:
56:7c:a6:32:83:f3:97:51:a5:da:4f:89:5d:44:df:
d6:51:e6:16:60:60:6b:cf:2a:0f:1e:1f:1d:05:80:
23:45:0f:d3:46:0e:d3:6c:95:f0:bd:35:d3:53:f9:
eb:b5:b2:67:a5:dc:ab:81:84:87:72:35:21:1f:16:
7a:38:d2:8f:d4:0d:8a:83:52:48:7e:3a:59:7d:d7:
d1:79:62:9b:37:45:b9:e2:93:51:54:ed:e2:a0:47:
61:c7:8f:7a:c2:9c:69:08:c3:7a:d4:74:61:9d:69:
fa:c3:f8:b4:66:67:37:f7:bc:4a:3e:9b:b3:3b:3e:
4a:eb:ca:13:fa:63:d3:5b:b5:ca:d9:f9:8f:fa:7b:
51:70:43:bf:7a:37:92:29:69:83:6b:8c:d4:09:12:
32:63:87:3e:36:83:fb:8d:77:b3:ab:10:c7:e1:12:
f8:9f:1b:7f:b7:b5:1a:58:87:7d:04:dc:96:57:41:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AD:7E:97:5E:C2:1A:1F:29:E5:F2:28:02:58:1D:B4:BC:81:19:5D
X509v3 Authority Key Identifier:
keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:3f:70:6d:3c:a5:02:c2:54:13:e1:3e:58:dc:8a:75:9d:6d:
c9:1c:15:d1:18:6b:fd:11:c3:8a:67:84:4c:21:2b:45:29:2e:
cf:04:93:34:e7:f8:84:be:74:4c:ec:d5:84:d7:6f:6f:39:5c:
ed:b1:58:02:8c:c4:17:bc:a3:c9:e7:25:22:d0:7a:92:c1:19:
6f:87:20:81:9d:b9:b2:85:d7:74:66:58:30:98:5f:7a:31:ab:
a4:30:1b:66:1d:ef:f4:00:06:39:5b:d5:4d:43:2a:7e:1d:d4:
38:7d:35:0e:8b:d1:ef:7e:da:2f:a2:21:72:16:78:1d:df:d7:
58:c4:d5:41:10:12:89:17:f6:fd:7b:5d:32:06:47:91:89:d2:
55:38:04:6e:69:7d:f1:f5:b6:ba:9a:90:02:14:df:4e:35:0a:
6d:79:48:7c:eb:cf:4d:06:4f:9e:30:b9:d0:69:62:4e:02:65:
a8:db:e3:69:e6:70:e3:10:a3:bd:68:6c:99:6c:93:a1:fc:aa:
0d:15:47:de:bd:a8:c3:c5:46:dc:f0:89:f3:1c:8e:e2:40:72:
bd:02:d0:bc:24:32:64:b2:cb:60:13:22:51:fb:83:4d:5e:11:
be:14:b2:c9:2e:0f:f7:ce:ed:b8:24:b5:d9:2e:d5:31:c4:13:
b6:71:56:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:19:32 2026 by rpki-client