
$ rpki-client -vvf rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft
File: wHHWGUmidyqcROW18GMBiuCuEtc.mft (raw, json)
Hash identifier: QWPRJ2SOFN4UPqMBLRqVNMtLODk3VeJqtjGckgkcsW8=
Subject key identifier: 10:B9:81:12:D8:18:0D:49:5D:FA:17:73:8E:8D:35:61:3E:E4:2F:F8
Authority key identifier: C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7
Certificate issuer: /CN=A916F42A/serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7
Certificate serial: 0B88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft
Manifest number: 0B7B
Signing time: Sat 04 Apr 2026 18:57:52 +0000
Manifest this update: Sat 04 Apr 2026 18:57:52 +0000
Manifest next update: Sat 11 Apr 2026 18:57:52 +0000
Files and hashes: 1: wHHWGUmidyqcROW18GMBiuCuEtc.crl (hash: TbBVtgjjAH1HUziMPNVfmCEYVFFjicSRBjKUDUD7k5o=)
2: 5A56D82CEE9711EA9A99063CC4F9AE02.roa (hash: dQw/K24ByzOS2NIIvkuiLaVQdcGkad0c+80rej/dGxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl
rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2952 (0xb88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916F42A, serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7
Validity
Not Before: Apr 4 18:57:52 2026 GMT
Not After : Apr 11 18:57:52 2026 GMT
Subject: CN=69d15f30-7440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:85:e6:c5:f4:be:b3:28:13:dc:9a:5e:05:4e:
50:79:0b:9a:c2:7f:24:69:7f:ce:2c:da:a9:38:e4:
ed:9c:aa:7e:6a:da:b1:85:6a:23:b2:6f:80:d1:5c:
31:92:19:4c:38:94:4c:b7:b8:2e:d1:2b:e7:12:dd:
29:fa:14:9d:68:da:c3:6d:08:98:b3:2d:f4:49:e6:
da:ec:c3:40:3c:91:7f:90:26:35:a8:67:82:19:22:
da:f2:03:4a:3f:8e:b8:1f:65:90:5a:a2:98:dd:9e:
02:2f:ab:df:f8:85:df:c0:4e:83:4e:f1:a5:e8:4a:
bc:86:6c:6a:b5:7a:99:c3:50:5e:6b:41:aa:49:fa:
ef:8f:dc:0d:72:04:f9:d3:05:83:ee:9a:1d:fa:3d:
6f:56:9f:80:88:39:10:a1:87:64:16:d5:67:e6:5a:
e3:9a:c3:bb:71:69:06:a9:a8:5f:ca:cd:e4:c6:07:
85:bf:63:f2:3d:86:2a:3b:ae:b9:0c:9f:a8:91:27:
10:48:d4:63:16:7b:fe:ac:60:51:fb:dc:57:78:1b:
1c:eb:e3:90:3e:de:29:11:6f:ee:ce:75:ae:f5:c9:
50:8a:ac:6c:72:ab:6a:80:5b:51:56:c1:86:d1:a7:
27:dc:22:f4:1a:43:02:8b:9b:f3:6f:ee:57:e7:7a:
d3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B9:81:12:D8:18:0D:49:5D:FA:17:73:8E:8D:35:61:3E:E4:2F:F8
X509v3 Authority Key Identifier:
keyid:C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:8d:5c:a0:70:37:e9:e1:25:14:9e:52:0c:8e:cb:04:57:dc:
29:4c:1e:7c:bd:77:8c:32:7f:43:1f:75:01:7f:6d:15:45:cc:
af:24:fb:22:53:d2:d5:d3:f9:65:ee:ea:25:50:4f:81:43:57:
53:6c:56:f8:a7:7b:4c:1b:98:ef:52:6d:af:08:5a:35:1f:62:
74:37:9a:85:e6:13:93:cf:a2:f6:7d:9d:ad:51:9b:bc:0f:53:
58:17:f4:2b:e1:1c:1e:2e:c5:e0:7f:3b:77:de:29:a9:74:bf:
27:f0:10:ca:d7:64:5b:10:36:33:31:5c:7e:ba:ff:84:16:43:
14:c6:4d:20:c4:14:9c:c1:37:38:90:13:d0:fb:67:f9:84:e9:
bf:a1:a8:75:3c:06:7e:09:d9:96:95:e6:13:c0:dc:69:e6:32:
3e:f0:9d:a3:8e:c5:0d:78:96:95:f3:a9:38:03:8e:5a:68:f3:
0e:86:f8:e0:70:e2:16:6a:7e:ae:f0:23:1c:b5:6a:33:bb:4b:
42:52:a2:85:58:55:e7:35:10:b3:8d:09:6f:d8:f3:79:63:9c:
3b:cb:0f:84:c7:20:f4:e5:e1:0b:8d:51:ec:89:6b:c5:d8:02:
ff:9a:cf:fc:9c:0a:83:18:a3:8b:af:b9:85:d3:db:23:ce:a8:
a2:00:79:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkY0MkExMTAvBgNVBAUTKEMwNzFENjE5NDlBMjc3MkE5QzQ0RTVCNUYwNjMwMThB
RTBBRTEyRDcwHhcNMjYwNDA0MTg1NzUyWhcNMjYwNDExMTg1NzUyWjAYMRYwFAYD
VQQDEw02OWQxNWYzMC03NDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmYXmxfS+sygT3JpeBU5QeQuawn8kaX/OLNqpOOTtnKp+atqxhWojsm+A0Vwx
khlMOJRMt7gu0SvnEt0p+hSdaNrDbQiYsy30Seba7MNAPJF/kCY1qGeCGSLa8gNK
P464H2WQWqKY3Z4CL6vf+IXfwE6DTvGl6Eq8hmxqtXqZw1Bea0GqSfrvj9wNcgT5
0wWD7pod+j1vVp+AiDkQoYdkFtVn5lrjmsO7cWkGqahfys3kxgeFv2PyPYYqO665
DJ+okScQSNRjFnv+rGBR+9xXeBsc6+OQPt4pEW/uznWu9clQiqxscqtqgFtRVsGG
0acn3CL0GkMCi5vzb+5X53rTzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBC5gRLY
GA1JXfoXc46NNWE+5C/4MB8GA1UdIwQYMBaAFMBx1hlJoncqnETltfBjAYrgrhLX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjQyQS8xQjIwNTU3RTRC
QkUxMUVBQkMyN0E1NDdDNEY5QUUwMi93SEhXR1VtaWR5cWNST1cxOEdNQml1Q3VF
dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dISFdHVW1pZHlxY1JPVzE4R01CaXVDdUV0Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RjQyQS8xQjIwNTU3RTRCQkUxMUVBQkMyN0E1NDdDNEY5QUUwMi93SEhXR1VtaWR5
cWNST1cxOEdNQml1Q3VFdGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYI1coHA36eElFJ5SDI7LBFfcKUwefL13jDJ/Qx91AX9tFUXMryT7IlPS1dP5
Ze7qJVBPgUNXU2xW+Kd7TBuY71JtrwhaNR9idDeaheYTk8+i9n2drVGbvA9TWBf0
K+EcHi7F4H87d94pqXS/J/AQytdkWxA2MzFcfrr/hBZDFMZNIMQUnME3OJAT0Ptn
+YTpv6GodTwGfgnZlpXmE8DcaeYyPvCdo47FDXiWlfOpOAOOWmjzDob44HDiFmp+
rvAjHLVqM7tLQlKihVhV5zUQs40Jb9jzeWOcO8sPhMcg9OXhC41R7IlrxdgC/5rP
/JwKgxiji6+5hdPbI86oogB55A==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:21 2026 by rpki-client