
$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
File: hf--WNwc9_kcLTgTTiC27wssOl8.mft (raw, json)
Hash identifier: +gZo7vTUjG/s55KuK/mN/r6EPPk9CmI3y5J/5/NH74Q=
Subject key identifier: 01:C7:B6:55:50:39:31:FC:8A:EC:57:AB:92:58:7C:40:BE:C7:1B:E5
Authority key identifier: 85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F
Certificate issuer: /CN=A911954F/serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
Manifest number: 0335
Signing time: Fri 17 Apr 2026 03:34:57 +0000
Manifest this update: Fri 17 Apr 2026 03:34:56 +0000
Manifest next update: Fri 24 Apr 2026 03:34:56 +0000
Files and hashes: 1: hf--WNwc9_kcLTgTTiC27wssOl8.crl (hash: Rxjus/dgj/xGhZ+arLsmNPbTycJ4SXjMeBgszui6xYc=)
2: 65874B72FF1D11F09D5C691B85EE528E.roa (hash: mRk4Fo6iZr93iyaJTrEyOENMDqLXHjjP+xgNzUN6Prs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl
rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:34:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911954F, serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F
Validity
Not Before: Apr 17 03:34:56 2026 GMT
Not After : Apr 24 03:34:56 2026 GMT
Subject: CN=69e1aa60-2ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:f1:9a:a1:29:01:74:ed:40:b2:43:3d:b8:
34:d4:f1:86:e7:ae:86:0a:4f:cc:68:1b:e1:c4:cf:
6d:63:80:07:95:49:ff:32:f8:a0:f7:c8:52:07:8a:
8b:37:04:b0:12:e4:33:d3:d7:29:a9:1f:1e:c9:60:
49:bf:ab:02:3a:11:85:3b:80:80:fa:9e:50:22:1d:
98:a9:69:21:8d:f2:49:c9:d8:0e:8f:40:12:8b:18:
75:04:29:15:5a:da:f1:86:1f:2f:80:a2:ed:8b:75:
0b:6d:29:5c:ea:17:3f:0d:9f:4e:90:a7:05:cb:8e:
b9:bf:1a:5c:a8:86:20:c0:45:36:0a:f2:c0:bf:35:
a8:0c:a9:a5:3d:2d:7d:31:15:38:33:8e:a4:4e:7b:
91:85:59:94:62:39:87:e3:d5:ee:ea:2d:aa:1b:ff:
dd:9f:f6:19:e0:70:46:85:c5:55:7f:78:84:64:86:
23:fb:2f:61:43:03:4f:a9:28:d1:71:6f:df:15:ce:
73:d5:ae:3b:64:de:a4:86:3d:ad:9a:0e:1b:b1:49:
f9:fc:33:dc:21:68:25:78:f3:bc:64:80:c8:a5:2a:
f0:38:14:e7:52:1b:6a:a4:08:a4:2a:5c:20:4f:53:
f6:06:56:cd:bf:05:d6:b9:6d:fa:8b:8e:51:a5:2c:
dd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C7:B6:55:50:39:31:FC:8A:EC:57:AB:92:58:7C:40:BE:C7:1B:E5
X509v3 Authority Key Identifier:
keyid:85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:b6:13:cb:c1:31:18:74:04:29:fb:ea:f5:cc:73:ea:7f:33:
2d:62:8e:5b:b4:6b:2f:e3:98:44:28:ba:db:a3:bc:43:d3:8e:
5a:64:70:45:3c:ba:b6:af:6c:1f:ba:cb:5b:2f:fc:bd:76:86:
5b:64:1c:14:be:73:77:67:e4:8b:8c:2c:7d:7c:55:cb:24:4a:
ee:15:f1:38:f8:b9:98:49:99:a7:f8:02:aa:2f:db:14:64:d8:
a5:6d:7e:5c:66:ce:9a:81:96:5b:65:85:91:b7:c5:c4:da:b8:
9c:b0:1c:13:a9:0e:ae:c9:29:6a:52:e0:1d:61:d2:1c:5d:78:
d0:d1:32:dd:60:e2:4c:c4:0f:76:cb:88:4e:a3:b4:7d:42:0c:
e1:30:ff:f7:e2:09:c6:15:61:e7:74:04:82:43:0b:3e:5a:a0:
23:65:f6:a3:e5:d8:ea:f1:e7:8c:6d:0f:49:67:4f:b0:63:b6:
b8:6a:4b:e2:d6:3b:73:dd:7f:88:0c:3b:1a:55:26:c2:04:fb:
5d:df:d1:35:b4:79:78:0d:5c:d9:85:89:e8:b6:54:65:90:42:
4f:b3:7f:e0:ab:cf:d2:7c:00:ad:b6:de:8f:5c:d4:61:01:85:
77:cd:c3:00:8e:88:15:3a:33:eb:92:38:6b:ac:76:dd:23:fa:
59:21:60:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:58:53 2026 by rpki-client