
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
File: hwrlmks42vxqMavjKcz4eP33Kow.mft (raw, json)
Hash identifier: 6DImCdW0QP94+NT6G1jjILDRsR3JTzhN7Q+0SyPPbLg=
Subject key identifier: 97:00:C3:7F:65:FA:77:23:3D:7E:DF:3C:8A:5B:EF:58:16:B7:04:B3
Authority key identifier: 87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C
Certificate issuer: /CN=A9110795/serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
Certificate serial: 1830
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
Manifest number: 180B
Signing time: Mon 31 Aug 2026 16:31:33 +0000
Manifest this update: Mon 31 Aug 2026 16:31:32 +0000
Manifest next update: Mon 07 Sep 2026 16:31:32 +0000
Files and hashes: 1: hwrlmks42vxqMavjKcz4eP33Kow.crl (hash: NlJhk+4sC4E0GVqUk8NiKi2iH4oX6zZDkX3ddcfZAV0=)
2: 5F94C5B814A311EDA489B80DC4F9AE02.roa (hash: 5FNppusvGt34VNZtqC/hpzQYdJ+kkgwElsHx39CrCq4=)
3: E734D3DE6E7F11ECB1C0E439C4F9AE02.roa (hash: jAIq80qCBr0145SI+BZrypTAw2o+G+yCXWLqVpqXYs4=)
4: F439D662AAAE11E8B3984735C4F9AE02.roa (hash: qgEM8tgcBEY4om6MtgXnx1pYzFwPcAM4LBil0v/++zg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl
rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 16:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6192 (0x1830)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110795, serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
Validity
Not Before: Aug 31 16:31:32 2026 GMT
Not After : Sep 7 16:31:32 2026 GMT
Subject: CN=6a95ac65-5488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:86:15:a7:e5:d2:28:df:ef:b0:f0:a0:7a:
1e:3c:63:73:33:94:fd:1c:78:2a:90:a9:20:45:c6:
13:83:f8:e3:66:4e:1d:16:85:95:3a:9f:4d:51:3b:
8f:b8:81:de:3d:6f:eb:6e:c6:11:05:24:44:9c:8e:
30:53:42:27:b0:e1:27:da:18:b2:8a:06:83:97:2c:
19:35:9f:b1:2f:f8:e4:ff:16:5c:6b:06:f8:62:e3:
1b:5a:b3:ff:06:13:ac:eb:12:2f:2f:c8:8f:f9:ef:
e2:d8:a1:55:6f:8e:29:9f:ce:dd:95:c7:49:6c:56:
a6:e8:2b:5f:5a:ff:7f:51:47:86:f3:ff:79:52:13:
40:91:bc:43:80:d8:2d:29:6c:0e:57:c2:ab:a4:3e:
99:e9:f1:47:fe:26:c6:55:c3:5d:d2:25:f8:52:66:
98:c3:94:4f:4e:83:82:d8:19:d9:9d:5e:a0:92:bc:
c4:06:eb:7b:e7:3e:f8:e0:ca:df:fb:ed:e7:43:f0:
58:40:d4:d5:15:bf:7c:e8:d1:6e:f4:21:a3:5f:18:
25:51:8a:bf:f3:fd:7e:87:b3:d9:9d:cd:4f:5b:0f:
69:f5:e1:cb:d7:49:1b:81:ba:6e:3a:8d:87:f4:18:
8c:4b:b6:ed:05:db:e8:7f:b5:80:ba:85:1a:ce:71:
d9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:00:C3:7F:65:FA:77:23:3D:7E:DF:3C:8A:5B:EF:58:16:B7:04:B3
X509v3 Authority Key Identifier:
keyid:87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:a2:d7:c0:88:a5:04:dc:58:a1:c3:8c:94:26:f6:d7:48:92:
4b:ef:73:1b:c8:80:0c:25:24:f6:05:28:4d:57:13:a4:e9:ef:
d8:7d:5f:e7:a0:fe:8c:03:51:27:73:9c:0d:6e:e6:35:80:9d:
c3:98:07:06:20:db:49:ac:18:db:d4:c0:d0:24:67:af:bd:55:
e6:17:7c:43:a1:0f:0f:ee:dd:3e:b2:09:b9:94:18:86:bd:94:
56:5a:ab:04:eb:4a:43:ae:c9:61:80:29:99:a4:08:e2:a6:85:
2e:9b:59:fc:c5:07:b2:bc:9b:f0:c6:40:79:82:b6:90:59:bd:
6f:a1:02:c8:7d:7a:a4:5b:77:ec:f3:2d:55:2d:8d:34:8c:4f:
8b:3c:41:6f:92:2c:84:77:d6:40:53:54:97:07:63:8f:6c:13:
e2:ac:f9:06:ac:e2:86:bb:c8:1f:71:b9:ae:28:46:80:72:4f:
52:34:fc:c0:b9:71:8f:a9:9b:08:49:57:b3:72:3d:91:3f:76:
66:02:01:32:2e:fe:39:51:8d:f9:94:5f:e4:be:6e:37:e4:52:
f7:44:61:ae:55:30:38:fb:7f:1b:05:32:2a:20:38:86:82:67:
82:3e:df:77:74:ce:0d:d4:52:9d:33:59:2b:83:e3:e9:ad:21:
14:28:b0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:10:23 2026 by rpki-client