
$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
File: hf--WNwc9_kcLTgTTiC27wssOl8.mft (raw, json)
Hash identifier: b2T7eb0m/ubFPw8HnslPIVh6yd8mdCICNSkIWloqc6w=
Subject key identifier: D2:CC:B5:A8:A4:FB:C9:3D:01:71:35:8B:BE:21:EC:63:FB:57:FA:4C
Authority key identifier: 85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F
Certificate issuer: /CN=A911954F/serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F
Certificate serial: 0192
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
Manifest number: 036E
Signing time: Sat 13 Jun 2026 03:33:27 +0000
Manifest this update: Sat 13 Jun 2026 03:33:26 +0000
Manifest next update: Sat 20 Jun 2026 03:33:26 +0000
Files and hashes: 1: hf--WNwc9_kcLTgTTiC27wssOl8.crl (hash: Iim5pRmORligrrZgvTBPMHmVkZ/XJ4TFEvgOYNsWe1o=)
2: 5FAC3CB644CE11F19BD95499BE833773.roa (hash: WkErIMYK/mQSKLc4lnPt53wSfKMo9LaNrKnnlPsS/9g=)
3: 65874B72FF1D11F09D5C691B85EE528E.roa (hash: mRk4Fo6iZr93iyaJTrEyOENMDqLXHjjP+xgNzUN6Prs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl
rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911954F, serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F
Validity
Not Before: Jun 13 03:33:26 2026 GMT
Not After : Jun 20 03:33:26 2026 GMT
Subject: CN=6a2ccf86-4622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:97:42:13:02:4e:ff:29:a6:eb:d4:be:0b:
b2:ec:4b:d3:1b:b0:55:05:6b:bc:1a:c3:42:7c:e7:
7e:b4:cd:81:c4:b0:f7:2b:52:a9:9e:ed:15:ce:ee:
f4:bf:54:56:7a:36:9f:f4:6a:56:1b:48:77:ce:18:
3e:93:f9:c5:c3:59:dc:80:67:f2:78:e8:dc:e0:d1:
3c:49:1a:94:0c:d7:47:f0:bc:b5:89:ff:d5:bb:52:
2b:94:ae:16:c6:aa:9d:1a:a9:ce:b3:f3:ed:85:a8:
5d:f0:f3:a7:11:8d:ee:a9:0f:a2:1f:33:a2:69:14:
2f:58:dc:eb:53:35:40:e7:e1:ff:bf:7f:c5:71:7a:
81:07:14:2d:08:76:fe:02:6e:dd:79:e5:dd:87:15:
13:cc:e2:a2:6f:fc:65:f6:22:50:7c:d1:8f:5c:53:
fd:6c:79:a5:d3:a9:a3:eb:8e:9a:82:1b:a6:31:91:
51:28:73:89:11:07:61:6c:11:54:5b:24:a9:16:6f:
b1:fe:6f:65:78:66:32:1c:86:7f:99:7a:77:65:cd:
79:a1:6a:a0:5f:c4:5d:d7:14:e1:92:24:89:2c:1b:
61:91:11:fd:23:ae:51:e3:11:c9:2c:88:48:38:4e:
3c:d0:f5:87:cd:9b:38:9b:f4:1d:2c:86:e7:9f:48:
de:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CC:B5:A8:A4:FB:C9:3D:01:71:35:8B:BE:21:EC:63:FB:57:FA:4C
X509v3 Authority Key Identifier:
keyid:85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:62:f7:e4:87:a9:2e:fd:48:a0:6c:15:48:72:c8:d0:e1:9f:
ac:47:01:32:00:4b:7a:eb:d8:27:1b:2f:f6:2d:09:b2:0e:1f:
75:c6:f3:d2:be:4f:aa:8b:00:2b:34:10:34:09:55:bf:19:4c:
b1:e7:9b:6b:6e:dc:20:3e:5b:c4:c6:f4:9a:a3:6b:2d:f0:5c:
aa:1b:a4:3a:f7:d0:5e:63:b3:0f:00:cd:fc:d9:19:de:87:48:
7f:5c:b9:7f:7a:75:5e:18:fd:36:1e:68:4b:c7:fb:8b:35:12:
47:a1:08:f4:68:e2:04:b7:1f:e8:aa:5b:6c:b3:d7:10:69:ac:
3f:94:15:ef:f7:74:8a:eb:34:ff:ce:c6:15:12:3c:b8:c3:3d:
44:9e:f8:f5:4a:bc:1b:32:c6:09:88:ae:94:75:e0:a8:07:ff:
21:6e:42:ea:d3:ca:d7:e2:5c:c8:09:76:39:ab:95:6a:12:63:
f6:7a:e0:b0:f5:1d:59:96:23:e8:38:b8:d5:00:32:bb:b7:33:
dc:3e:b3:d4:fc:50:e1:1f:b0:8c:c9:87:27:df:92:5b:fd:85:
60:7f:ea:c0:81:34:3e:78:e3:2d:df:42:02:6c:cb:d8:f2:5e:
f4:89:09:e7:12:38:73:7e:d0:e2:9a:bc:da:67:66:0a:04:21:
f2:aa:a1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:03:08 2026 by rpki-client