
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
File: WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft (raw, json)
Hash identifier: JBh671Qhep1+SrAZTCU0/rdMgehZ4emD2TQepMaicK0=
Subject key identifier: 6A:1F:57:20:6F:A6:80:40:07:D4:32:79:30:60:ED:D7:4D:38:8B:B9
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial: 1493
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
Manifest number: 1451
Signing time: Sat 10 Oct 2026 14:56:16 +0000
Manifest this update: Sat 10 Oct 2026 14:56:16 +0000
Manifest next update: Sat 17 Oct 2026 14:56:16 +0000
Files and hashes: 1: WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl (hash: n6ExkkRSGt7UwY99QbhXcbWamau6Fh3VaTO7zx+UKfc=)
2: 994F0A88D86B11E9B8BFCE0AC4F9AE02.roa (hash: SE39gOZ2xnFhkX1dRNgXZ68hAy9sMt5XwzHtFoVdgBQ=)
3: E1982A2EAD7511EA94C97127C4F9AE02.roa (hash: FXJ8Ym+jtcL3rZsEDtV2bU4z875vH9QG04Qb3pATJI0=)
4: 005D2F8E56B611EAA08F9B82C4F9AE02.roa (hash: 6B9hPSQdsNcZKZfD4I2g+nG3PQ9K3MqkXD1L3kncMBw=)
5: 46CE46B416BF11EBB31D5A6AC4F9AE02.roa (hash: uelfGUi7e/t05BHwWkhZVN++x9escF/UtiNhCjCcV0s=)
6: 0D4D857E3B9211F0857DC432C4F9AE02.roa (hash: krDa/XdE9E/2Q0I211bs1loNvGb6/CHjA41cl9NEUoY=)
7: 069626A6ABC211EA9C9FC06EC4F9AE02.roa (hash: a13wcJgj/v303LsVDa83QJzYatBFpSPG3+KuAw015o8=)
8: E53A0A54450911EBBA450A64C4F9AE02.roa (hash: QsNfjyBldTeeXZxbYWBlEhOqNtrvsHdGyA494jCXWak=)
9: 5BE6FE3ED7A311EF9D214C13C4F9AE02.roa (hash: dfTe+7wX0JsGLfuCS7up2971yM970ZVtiuDePgexKgU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 14:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5267 (0x1493)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Validity
Not Before: Oct 10 14:56:16 2026 GMT
Not After : Oct 17 14:56:16 2026 GMT
Subject: CN=6aca5210-21bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:cc:dd:9d:16:cb:8b:a0:f4:d2:0c:ad:9f:
9b:d4:5c:b2:02:5e:2b:ce:b1:f2:88:b5:fc:2d:63:
a9:0f:4e:33:3e:ad:bf:16:af:96:0c:06:32:e4:ba:
9b:83:38:cb:55:48:42:35:96:3f:c4:8f:c6:bd:16:
b8:22:1a:e0:5f:a0:5d:77:6f:67:84:63:d4:f0:e7:
47:3e:8e:b6:6b:9b:2d:9e:66:a5:ee:1e:86:c6:8f:
0a:4b:a0:65:12:c0:6a:66:09:c2:7c:a4:91:ee:54:
60:bc:5c:e7:87:6b:ab:55:44:9e:8f:b6:f1:a0:6e:
4a:8b:38:1a:a1:72:0e:a2:c9:68:8e:4b:db:6f:07:
8b:7e:98:0e:45:7c:f6:de:8f:5a:66:cb:cc:fd:0d:
76:8d:bf:3c:d4:9e:6c:f6:8d:bc:91:90:e7:92:ec:
0b:c1:dd:28:47:28:cd:75:94:a5:09:c0:1d:1e:05:
d8:0c:d4:d2:c0:f9:73:0c:01:8a:ab:ab:79:ad:8b:
03:2f:5a:dd:21:23:11:1e:a7:16:55:a6:1b:5f:93:
80:32:28:6a:8d:84:3d:48:2e:b4:58:1d:68:f0:e2:
99:c4:8d:03:a2:10:8a:d3:12:ad:22:61:99:8d:32:
0e:4f:7d:6b:73:db:95:c1:16:f5:59:54:50:9d:76:
a4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1F:57:20:6F:A6:80:40:07:D4:32:79:30:60:ED:D7:4D:38:8B:B9
X509v3 Authority Key Identifier:
keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ca:74:1e:dc:fb:5d:7a:29:67:ad:65:08:60:15:c9:ea:90:
e1:91:56:27:48:b3:cd:0e:2f:0c:9f:dc:04:d2:4f:d4:e2:f1:
29:0c:d8:90:46:92:b4:24:dc:54:44:df:4a:57:36:70:b9:69:
e5:f4:c2:82:94:b4:4d:99:36:de:9c:26:83:3d:e0:66:cd:e6:
02:ba:99:e8:f3:21:de:5d:c1:53:19:07:7f:d8:23:ab:7c:e5:
1c:75:b9:b6:4d:b1:fe:c2:dd:ee:f4:84:dd:15:35:a8:23:69:
a9:44:f4:42:16:8b:e6:c4:40:66:92:a8:8d:b1:a9:81:72:15:
48:cc:0c:9b:dc:97:36:61:ce:38:7a:03:72:ce:a6:72:0b:86:
3d:91:45:d7:f9:bb:01:a6:1c:f4:3f:23:a0:40:f8:a8:05:22:
3e:b9:43:c5:ba:21:12:ce:ca:ed:f0:2e:7d:bd:97:a3:2f:b9:
a2:26:b1:07:e8:86:c1:c1:e5:e1:70:ca:c5:51:44:04:9e:1c:
42:d8:44:ba:3f:03:86:63:98:02:1f:fc:20:fb:e5:16:fc:08:
a0:d1:58:67:99:b2:b2:d6:8f:ba:5f:e8:c5:76:45:ee:e6:1e:
b5:b3:a6:6b:92:42:6f:45:cd:a5:2a:db:14:38:05:a4:d2:22:
d0:60:1b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:27:33 2026 by rpki-client