
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
File: RwHPLSggCdbG6vRVb7DcGw1VV-8.mft (raw, json)
Hash identifier: cZmm++xw1RUuC9yLrzvsIs6xFXBRgJRLUQ6RKxVsxbY=
Subject key identifier: DA:CA:34:68:F9:AD:09:DA:9C:59:C2:46:70:3D:DE:F6:52:82:C4:26
Authority key identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF
Certificate issuer: /CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
Manifest number: 010E
Signing time: Fri 17 Apr 2026 05:47:17 +0000
Manifest this update: Fri 17 Apr 2026 05:47:16 +0000
Manifest next update: Fri 24 Apr 2026 05:47:16 +0000
Files and hashes: 1: RwHPLSggCdbG6vRVb7DcGw1VV-8.crl (hash: +d8iimf97T97fsJ8v/cNR2eCCNS78CCV/DXz7gbPDME=)
2: 2EA5BC6EE71811F0B23E26476E6F56BC.roa (hash: lCmAQOrZ2kPo2z1WrTRR5Ga4bExHmOCUErDXwba52rk=)
3: D2D1A4B45BD711F089C6844AC4F9AE02.roa (hash: 7/PYR2UzhNdyaVe+j4NKzC7NkrhIUWRjvvNuf/ZKIrg=)
4: ECB98052057511F1AF941BA6343D8C67.roa (hash: 29KxdPQG9ynzrMx8tx0q3SkLdwBifjAYKiCjhv/9CKE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl
rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DAC5, serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
Validity
Not Before: Apr 17 05:47:16 2026 GMT
Not After : Apr 24 05:47:16 2026 GMT
Subject: CN=69e1c964-c76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3c:8f:b4:01:9d:9e:c7:3d:1a:02:eb:b5:8f:
27:d7:f0:31:61:59:d6:95:a0:83:2f:d8:27:1d:78:
50:d6:c4:cb:97:9a:17:42:ba:28:a5:f7:e1:fd:8d:
7b:72:aa:cf:21:e1:af:65:96:f1:68:47:fd:e2:75:
98:b4:65:10:98:0c:57:20:e5:67:c1:8e:ed:8c:04:
bd:88:dc:10:9a:61:ba:b2:ad:9e:f4:b5:30:0c:a7:
23:ee:d6:37:c1:44:04:fc:3a:48:8f:f4:eb:7e:09:
77:b2:25:62:70:42:72:ef:73:24:92:e9:b8:de:22:
4b:24:16:4c:65:8b:dc:11:68:1d:30:11:22:e8:92:
39:d4:83:af:11:48:1d:30:02:68:e3:c0:39:8d:9f:
06:0c:61:04:45:b0:13:96:c9:a6:b3:a4:8f:5f:d0:
3c:04:9a:5c:dd:66:ee:7f:08:f2:8e:eb:b0:95:4d:
d9:d0:35:cb:16:e6:83:d4:93:0b:37:f8:76:ac:2e:
d0:b2:94:2d:84:df:75:6b:00:4e:15:45:c3:c2:22:
5d:41:37:8b:36:c0:f7:df:67:4c:17:26:e3:36:f3:
43:9e:08:c3:df:7d:d7:fd:fe:1c:fb:4a:f8:27:e3:
d5:96:7a:13:96:a8:20:32:68:24:63:80:d6:0d:50:
fc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CA:34:68:F9:AD:09:DA:9C:59:C2:46:70:3D:DE:F6:52:82:C4:26
X509v3 Authority Key Identifier:
keyid:47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:1b:75:25:0a:52:bb:32:3a:5c:43:d8:d3:ed:34:d6:c0:b5:
b1:c6:70:b4:93:30:90:df:e9:56:3c:75:9a:31:64:90:37:5d:
3b:81:83:04:09:f1:2b:f1:78:5c:d8:35:0a:f2:b4:33:9b:a6:
b2:52:bc:ca:7e:1f:af:70:7a:5f:30:3b:e3:b6:91:f2:a8:0b:
f3:db:3b:fe:6a:30:05:9d:01:dd:98:55:df:43:81:b6:9b:44:
fb:3a:e9:da:f7:7e:34:d6:cc:4e:92:e7:ca:24:cc:31:d3:3f:
a2:f5:ad:34:88:6c:7f:aa:b8:61:08:d2:5e:b9:13:6f:bd:42:
d2:44:b1:8a:80:88:5c:11:7b:25:c2:5d:b2:2f:e2:75:1b:52:
cb:94:04:eb:16:b7:9b:ee:f9:33:b7:de:99:cc:93:ba:d2:8b:
57:0a:50:7f:27:86:b5:7c:c3:ed:9a:02:23:73:ca:69:c2:40:
72:7e:25:fd:97:b4:f8:e2:d4:ff:ad:42:64:60:3d:fb:02:70:
88:8e:e2:5a:a5:ea:4a:ae:9c:16:1e:73:2d:f2:e1:70:ce:c1:
6c:f0:a8:62:b4:b6:bf:fe:0c:e6:b7:74:2c:e1:20:c1:4a:ec:
46:c1:2d:ae:49:78:6a:59:0c:ae:09:f2:27:aa:c9:cd:7d:72:
30:7e:02:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:09 2026 by rpki-client