
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
File: hwrlmks42vxqMavjKcz4eP33Kow.mft (raw, json)
Hash identifier: tgyDCZ7uTTctxA6aR3PpEIU8LFCwWUkEej80r133JCo=
Subject key identifier: 94:43:CB:55:63:C7:C6:01:3B:0C:E4:8D:B8:E7:7D:7D:7E:D4:25:56
Authority key identifier: 87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C
Certificate issuer: /CN=A9110795/serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
Certificate serial: 1818
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
Manifest number: 17F3
Signing time: Thu 16 Jul 2026 16:36:07 +0000
Manifest this update: Thu 16 Jul 2026 16:36:06 +0000
Manifest next update: Thu 23 Jul 2026 16:36:06 +0000
Files and hashes: 1: hwrlmks42vxqMavjKcz4eP33Kow.crl (hash: KBk0FikGccpMz4XJkiacS4oJa1MlNuzvn9dQzZc/DCk=)
2: F439D662AAAE11E8B3984735C4F9AE02.roa (hash: qgEM8tgcBEY4om6MtgXnx1pYzFwPcAM4LBil0v/++zg=)
3: E734D3DE6E7F11ECB1C0E439C4F9AE02.roa (hash: jAIq80qCBr0145SI+BZrypTAw2o+G+yCXWLqVpqXYs4=)
4: 5F94C5B814A311EDA489B80DC4F9AE02.roa (hash: 5FNppusvGt34VNZtqC/hpzQYdJ+kkgwElsHx39CrCq4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl
rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 16:36:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6168 (0x1818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110795, serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
Validity
Not Before: Jul 16 16:36:06 2026 GMT
Not After : Jul 23 16:36:06 2026 GMT
Subject: CN=6a590877-94f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:64:ca:d4:18:5c:6b:47:7d:0d:d0:98:cc:e5:
8b:b6:5b:18:55:bd:9e:57:e4:5b:f3:12:16:88:a7:
b3:6f:b0:46:1b:e7:69:c2:dd:ac:bd:d6:86:e2:a8:
bf:d3:da:a5:fa:3a:cc:90:25:17:e4:29:37:38:ee:
6e:ad:5c:f3:b0:7b:3c:b8:de:fd:fb:d7:3d:81:a3:
0a:fa:50:8f:da:f4:67:46:3e:13:67:c0:50:f7:1b:
d5:09:de:7d:32:28:60:7b:f2:8c:1f:85:c3:93:49:
d2:20:45:ab:ea:5b:2d:4c:17:98:95:b6:44:dc:12:
76:32:1d:67:6a:7d:5b:1a:cf:d4:79:2a:57:8d:4c:
30:94:ae:5d:16:7a:aa:92:bc:b3:33:1f:76:b0:67:
d1:35:33:8b:75:86:55:d7:49:b2:66:97:04:47:32:
8e:93:e3:ef:0b:40:0b:a2:73:90:90:5b:7a:e4:b2:
f4:62:9c:b2:9a:e5:6d:08:4c:98:60:c4:0b:af:68:
82:c5:31:ec:19:1b:1f:6e:93:fb:51:5e:1a:b8:ff:
49:e6:3e:fe:cb:3e:6a:a3:5b:32:60:f4:36:07:8d:
57:58:75:2d:6e:de:84:dc:8d:d1:9c:92:53:25:27:
89:12:79:bb:1a:b6:a4:ca:3f:19:78:a3:f7:b2:23:
76:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:43:CB:55:63:C7:C6:01:3B:0C:E4:8D:B8:E7:7D:7D:7E:D4:25:56
X509v3 Authority Key Identifier:
keyid:87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7f:f2:ff:51:bc:eb:9b:e1:ed:a1:ca:53:c0:6f:3f:52:62:
ae:82:30:55:d5:59:ec:8b:31:ff:64:bb:f0:1f:fc:8d:ad:44:
71:2b:4f:33:55:e8:45:e2:b2:c9:49:f4:66:2a:67:7a:8e:e0:
63:f3:44:3b:d9:4d:8e:6c:93:a9:3f:a5:49:a5:78:1f:1a:8c:
c7:00:90:71:f3:75:ab:95:a7:ae:c2:fe:be:96:46:13:d9:79:
62:89:34:44:fa:a1:35:b5:40:87:f3:5d:42:8d:d3:89:8b:a4:
0c:80:fb:99:55:7a:4f:79:56:e1:2a:cd:d6:49:37:71:e5:0f:
a8:5e:b1:8a:f2:4b:b7:0d:a5:29:fe:7e:f1:7a:fc:e1:ae:ca:
3b:f6:ef:c8:4c:e6:0a:24:86:ce:86:e4:d9:b9:ab:59:98:6f:
61:dd:27:36:81:6c:40:3e:a9:bb:b3:16:0b:98:f9:b7:c0:ad:
4f:0f:4c:92:e2:79:0e:dc:94:57:6b:0e:78:cf:b9:24:74:c6:
7a:2a:de:f1:f7:ef:79:59:23:bc:7d:51:0a:32:85:ed:d6:b8:
61:55:9e:c5:65:0a:d9:7c:c0:57:d1:20:e7:ec:01:30:cb:88:
2d:04:d7:49:31:6d:7a:2c:e3:12:68:f5:a2:01:14:46:c1:c3:
32:c2:3e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 11:08:15 2026 by rpki-client