
$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
File: WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft (raw, json)
Hash identifier: PQn/N6srFkFWsVfRSImSE/+L8dqg+UKoZESY4BP5HH8=
Subject key identifier: 46:5A:9C:E4:82:F3:42:8E:5C:34:77:DC:32:74:7F:E3:C6:25:B9:32
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial: 1420
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
Manifest number: 13DE
Signing time: Mon 02 Mar 2026 00:04:22 +0000
Manifest this update: Mon 02 Mar 2026 00:04:19 +0000
Manifest next update: Mon 09 Mar 2026 00:04:19 +0000
Files and hashes: 1: WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl (hash: dtz6D6RXkwZHl+FOiFpiquZFy6kHmoXugxSk4njVd0Q=)
2: 46CE46B416BF11EBB31D5A6AC4F9AE02.roa (hash: uelfGUi7e/t05BHwWkhZVN++x9escF/UtiNhCjCcV0s=)
3: 994F0A88D86B11E9B8BFCE0AC4F9AE02.roa (hash: SE39gOZ2xnFhkX1dRNgXZ68hAy9sMt5XwzHtFoVdgBQ=)
4: E1982A2EAD7511EA94C97127C4F9AE02.roa (hash: FXJ8Ym+jtcL3rZsEDtV2bU4z875vH9QG04Qb3pATJI0=)
5: 005D2F8E56B611EAA08F9B82C4F9AE02.roa (hash: 6B9hPSQdsNcZKZfD4I2g+nG3PQ9K3MqkXD1L3kncMBw=)
6: 069626A6ABC211EA9C9FC06EC4F9AE02.roa (hash: a13wcJgj/v303LsVDa83QJzYatBFpSPG3+KuAw015o8=)
7: 5BE6FE3ED7A311EF9D214C13C4F9AE02.roa (hash: f6ZjXZpyq8OVEfmQdaDwSN6wsAiiFOFq3Xa/dwSKfIU=)
8: 0D4D857E3B9211F0857DC432C4F9AE02.roa (hash: krDa/XdE9E/2Q0I211bs1loNvGb6/CHjA41cl9NEUoY=)
9: E53A0A54450911EBBA450A64C4F9AE02.roa (hash: QsNfjyBldTeeXZxbYWBlEhOqNtrvsHdGyA494jCXWak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5152 (0x1420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Validity
Not Before: Mar 2 00:04:19 2026 GMT
Not After : Mar 9 00:04:19 2026 GMT
Subject: CN=69a4d406-a3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:b1:82:88:95:03:28:b3:db:4d:93:29:5f:
6b:d1:61:e5:0f:7f:8a:f7:e4:b2:a7:ed:26:75:04:
51:46:75:d4:69:2a:05:b8:a4:c2:ec:d1:6a:1d:d5:
22:13:68:9a:7f:53:c9:cf:ba:1a:df:21:3e:4a:72:
c6:5f:66:db:0c:56:02:30:5b:45:56:26:bd:54:75:
07:f9:af:56:75:c8:77:39:08:27:8d:9d:20:93:c1:
60:1a:f6:c2:95:da:ca:66:bb:0e:c1:a0:8e:c8:7a:
68:79:d4:a0:6a:2f:a0:18:f1:57:8c:7d:84:21:9a:
29:cb:23:69:67:09:d5:c9:72:53:b4:fd:9d:18:d3:
7b:aa:08:11:20:14:5b:80:9f:5d:36:e6:65:dc:50:
32:1b:62:f4:8f:9b:07:98:cb:4b:02:bb:c4:a3:1d:
cb:86:38:b1:b3:b4:b5:3c:40:41:a9:fb:ce:f6:a3:
d6:72:3e:77:2f:aa:8f:a9:bb:19:df:0e:78:bd:ce:
81:db:29:fc:22:3e:f9:c4:cd:4d:86:92:68:af:cd:
7f:84:1f:a0:a7:b5:74:22:71:16:38:4d:5b:c3:ea:
8a:39:d7:65:65:6d:80:1a:f5:9e:44:08:d4:ff:b2:
27:66:28:61:83:0e:ac:52:f2:1c:f9:de:a8:dc:ac:
07:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5A:9C:E4:82:F3:42:8E:5C:34:77:DC:32:74:7F:E3:C6:25:B9:32
X509v3 Authority Key Identifier:
keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c7:76:b4:28:1d:f5:bf:c3:65:08:53:6e:24:3b:bb:c9:c6:
35:27:97:f3:44:9d:32:fe:09:d6:6a:1c:58:d9:c7:21:fb:e8:
9a:8b:94:67:99:f4:7c:65:f0:a5:70:f6:dd:0e:29:7c:55:e0:
73:1b:b2:78:a2:e5:64:03:06:e0:5e:80:eb:b1:cc:36:e9:19:
f1:c5:6e:79:23:9b:a6:95:45:fe:30:38:13:7f:72:93:da:6d:
2b:64:9c:be:d0:bd:0e:66:2f:a9:15:27:e9:90:de:24:9c:63:
13:c6:e3:57:c0:8d:64:8d:69:37:5a:c1:7e:fc:5a:22:9c:93:
87:c6:fb:2f:af:84:24:ee:7d:42:42:13:c9:4c:c1:4e:30:bd:
ca:e3:29:a4:3f:0a:84:92:16:aa:27:cb:09:39:b1:7c:5d:af:
94:4c:ea:88:d1:c9:57:25:a7:f9:0c:e3:c6:36:1d:da:0c:e2:
23:c0:df:87:be:f8:c4:b5:02:b3:53:0f:c9:c5:f1:d3:db:2a:
01:84:b1:74:94:9f:94:ab:63:19:6b:1d:ad:00:77:c4:60:20:
9a:f5:7d:8a:b1:ed:44:d1:93:98:44:48:f9:ae:fc:15:eb:e2:
89:cd:b3:0f:fe:90:5c:d3:e1:a6:bc:47:aa:e0:be:5d:84:d5:
3e:ab:a0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:07:23 2026 by rpki-client