
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft
File: HlwQfv0DzxPSFKOaaizo3a0wRw4.mft (raw, json)
Hash identifier: 9Zgrhh4V8RFnOnqhQTZgKW9uUyU/U4hK4RKfT+9NdrY=
Subject key identifier: A8:24:04:F6:73:68:AC:CD:C9:1F:77:89:68:B2:D8:C8:D9:0C:31:E8
Authority key identifier: 1E:5C:10:7E:FD:03:CF:13:D2:14:A3:9A:6A:2C:E8:DD:AD:30:47:0E
Certificate issuer: /CN=A914D9C3/serialNumber=1E5C107EFD03CF13D214A39A6A2CE8DDAD30470E
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft
Manifest number: 0184
Signing time: Sat 17 Oct 2026 05:16:19 +0000
Manifest this update: Sat 17 Oct 2026 05:16:19 +0000
Manifest next update: Sat 24 Oct 2026 05:16:19 +0000
Files and hashes: 1: HlwQfv0DzxPSFKOaaizo3a0wRw4.crl (hash: RqsoSUqepuXqrf+fyCJQer396F0ljSz+WWEn0i5iY2k=)
2: F7B3707C806911EF8C30A03DC4F9AE02.roa (hash: aiqE7GBN+l3YOlzTvalxpxvHOLBHG0Z/5JCvpwlar2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.crl
rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 05:16:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D9C3, serialNumber=1E5C107EFD03CF13D214A39A6A2CE8DDAD30470E
Validity
Not Before: Oct 17 05:16:19 2026 GMT
Not After : Oct 24 05:16:19 2026 GMT
Subject: CN=6ad304a3-2428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:39:61:39:17:7f:8d:a1:04:37:b4:23:a7:
b8:02:4f:49:e3:04:3b:b3:4b:d2:97:2b:e8:21:0a:
81:e1:2b:f3:64:1d:56:4a:77:74:13:44:2c:f7:64:
b9:d5:9f:42:ef:62:22:63:22:af:7a:3d:9c:4c:46:
f1:27:96:2d:bd:ed:05:1d:ca:f8:e3:79:45:8b:0e:
dd:36:52:b1:91:72:17:d9:5c:9c:5b:81:c0:16:c6:
68:35:b6:38:ce:70:24:c1:51:3f:c0:2f:18:a7:53:
69:36:36:ce:f2:69:74:8a:a8:12:94:ac:fb:8d:51:
f8:6c:8d:e4:c7:8f:52:90:e0:bf:db:8b:c6:c1:17:
7b:f3:fd:45:59:da:b2:dd:58:e2:5c:26:36:89:1d:
55:ad:06:03:9b:92:9b:a1:6d:cf:ac:1b:85:c3:da:
a6:80:89:26:82:b4:b7:35:fc:1c:37:b1:3d:6e:c5:
8a:71:18:b8:5e:41:2b:e0:fd:de:de:a5:d2:ff:c3:
86:33:79:48:ff:51:cd:49:35:0b:f3:ca:46:eb:30:
70:c0:4c:28:3a:21:db:d4:9b:ee:34:7f:96:18:4b:
28:0c:05:b2:b5:54:99:fd:20:4f:23:87:02:f7:9d:
65:b2:0d:a2:a2:06:e3:19:8f:a3:e3:14:ca:18:49:
7d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:24:04:F6:73:68:AC:CD:C9:1F:77:89:68:B2:D8:C8:D9:0C:31:E8
X509v3 Authority Key Identifier:
keyid:1E:5C:10:7E:FD:03:CF:13:D2:14:A3:9A:6A:2C:E8:DD:AD:30:47:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:81:9c:cb:e4:a3:74:89:63:27:67:f7:20:80:b3:23:15:7f:
e6:ae:0f:2e:df:d4:44:79:12:25:e0:69:51:21:8b:da:15:4c:
fc:bd:07:24:27:a4:bd:58:ea:58:b0:c8:c0:4a:93:e1:d7:31:
d3:74:65:e1:91:9e:89:8d:c3:b5:c6:e9:1f:36:4a:06:05:d2:
98:98:be:0c:dc:58:eb:bb:e2:c8:af:e4:38:fe:f8:f7:c8:c3:
a8:ef:3a:ee:45:d9:25:10:93:ee:7c:b4:5e:db:55:64:f1:4b:
50:56:4e:1f:d5:f0:2e:22:db:36:70:ff:ef:d0:ce:16:af:15:
f6:fb:9a:dd:65:1e:f7:3b:7a:c3:48:f4:1c:c9:e2:5e:ef:f2:
a7:16:eb:10:d7:37:5f:b4:37:a5:4b:ba:5a:7b:c2:4e:28:dd:
a7:30:28:ed:60:0c:29:a6:55:8d:f9:80:12:68:0c:93:97:2d:
e4:88:db:69:86:73:9c:b0:a3:9b:69:bf:26:2e:4e:82:5e:6e:
71:e9:7e:c7:89:af:a1:ae:61:c1:77:27:f8:1a:6c:d0:af:85:
85:79:9d:35:41:a5:7a:1e:9b:38:0f:db:d1:bd:74:df:c8:bb:
9f:83:1f:5f:a6:ae:64:3c:03:1a:ba:b9:89:d9:bc:c4:8b:82:
ae:63:39:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:08:08 2026 by rpki-client