
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
File: hf--WNwc9_kcLTgTTiC27wssOl8.mft (raw, json)
Hash identifier: YZlrtGCFG8lwSjAYBvEuzvGyf9Xd2oc7X9jZjc7uEE4=
Subject key identifier: C0:A3:1B:62:46:0C:75:A5:03:40:BF:F6:8D:80:70:E2:55:A3:A1:BD
Authority key identifier: 85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F
Certificate issuer: /CN=A911954F/serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F
Certificate serial: 01C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
Manifest number: 03D4
Signing time: Mon 21 Sep 2026 03:02:23 +0000
Manifest this update: Mon 21 Sep 2026 03:02:22 +0000
Manifest next update: Mon 28 Sep 2026 03:02:22 +0000
Files and hashes: 1: hf--WNwc9_kcLTgTTiC27wssOl8.crl (hash: P9myBgT3TGueviLnxSOVo2DJN0FJDleK6TverRrrBEw=)
2: 5FAC3CB644CE11F19BD95499BE833773.roa (hash: WkErIMYK/mQSKLc4lnPt53wSfKMo9LaNrKnnlPsS/9g=)
3: 65874B72FF1D11F09D5C691B85EE528E.roa (hash: mRk4Fo6iZr93iyaJTrEyOENMDqLXHjjP+xgNzUN6Prs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl
rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911954F, serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F
Validity
Not Before: Sep 21 03:02:22 2026 GMT
Not After : Sep 28 03:02:22 2026 GMT
Subject: CN=6ab09e3f-a498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:73:86:dc:79:bc:49:14:00:f5:68:b9:ea:
19:47:e8:76:7e:ac:3e:2a:19:b8:93:11:04:04:20:
d5:1f:7c:cc:59:9c:e3:7a:0f:45:e3:4c:41:d3:37:
d1:b0:72:9e:d6:9f:52:64:33:b8:7c:b9:82:c0:8f:
4e:0b:20:4d:fe:97:c3:71:5f:db:2f:ad:e3:d5:6e:
2a:c4:ea:f7:67:80:d1:cd:49:46:13:8d:a8:24:06:
61:9e:0a:dd:c4:c3:69:b3:68:42:3e:7f:23:6b:9e:
ad:3f:bb:e7:fa:ae:c0:59:f3:d2:c4:ce:26:c3:79:
ff:27:1d:62:95:fe:43:de:52:0f:50:7f:8e:7c:7c:
9f:23:78:dd:16:92:7d:37:d2:37:74:dc:1c:f5:bb:
88:40:55:16:d6:33:8f:c6:92:6a:fa:c7:c6:41:70:
8b:33:b5:5e:d0:b1:5a:c4:5f:15:58:b6:0d:2f:35:
c7:57:45:81:dc:fa:38:90:31:27:f4:56:57:d9:e3:
f3:05:9f:b4:d3:27:1f:c2:41:b0:7c:a3:09:fb:00:
58:25:77:d1:84:ec:2c:56:45:3e:1e:82:b7:b7:6d:
f0:d7:de:4e:2f:81:fd:75:ec:d7:ad:8c:44:60:18:
2c:35:bd:36:2a:9f:36:31:99:e9:ff:ce:b5:76:a6:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A3:1B:62:46:0C:75:A5:03:40:BF:F6:8D:80:70:E2:55:A3:A1:BD
X509v3 Authority Key Identifier:
keyid:85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:44:1d:77:56:78:be:9b:5a:e9:26:07:a2:2e:12:23:b1:d1:
b9:a8:da:9a:b9:9f:b3:b0:b7:00:29:0c:aa:d3:c2:14:f3:3f:
89:56:23:e7:25:7f:ba:44:5c:48:b4:60:fe:59:1d:09:5b:67:
d0:24:c6:75:e4:2d:a1:36:f0:24:68:ba:d2:a4:c9:bd:e6:6c:
96:35:22:8c:e6:e3:a8:22:97:8d:c2:cf:e0:51:87:61:22:e9:
01:92:31:d5:07:b4:56:22:71:62:9d:67:2d:f1:6a:7d:3a:3a:
0f:8c:6f:99:bd:03:71:a6:da:8e:48:c6:e6:65:e6:91:a7:e0:
89:10:20:81:ca:a8:bb:93:c7:5e:65:b1:45:62:bd:b8:14:52:
2d:1b:89:2d:b1:26:24:11:11:43:b5:b1:2c:da:11:5c:f4:c7:
7a:65:ac:ec:f2:be:9c:a5:86:d9:28:5b:0c:b5:de:a1:af:3d:
de:2a:b3:3e:a1:f8:ad:0c:e5:b1:70:42:53:73:c1:e8:b9:20:
a9:95:aa:ae:43:ab:95:93:68:b6:fa:1b:0d:79:54:53:7c:c0:
30:ca:e2:78:6d:54:4a:6c:7f:53:4e:33:2d:3b:64:56:ca:5d:
86:a4:bc:ac:50:bb:be:f9:fa:b0:a7:13:90:64:e4:1f:e4:e3:
47:92:64:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:28:07 2026 by rpki-client