
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
File: HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft (raw, json)
Hash identifier: b8WW+AGi2JQNjUoD7IYl9WgqWrK1KbtGriYG7HCJ6ao=
Subject key identifier: 51:A8:5D:27:D3:AB:E4:C5:87:5C:38:1F:70:31:00:AF:A6:D1:53:10
Authority key identifier: 1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A
Certificate issuer: /CN=A91707D0/serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A
Certificate serial: 0125
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
Manifest number: 0125
Signing time: Sat 03 Oct 2026 06:29:07 +0000
Manifest this update: Sat 03 Oct 2026 06:29:06 +0000
Manifest next update: Sat 10 Oct 2026 06:29:06 +0000
Files and hashes: 1: HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl (hash: p3YfyyGI730/B9kvWeSmLbj00lYXqiv6HdEPKKH/vNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl
rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 06:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91707D0, serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A
Validity
Not Before: Oct 3 06:29:06 2026 GMT
Not After : Oct 10 06:29:06 2026 GMT
Subject: CN=6ac0a0b3-8a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:9f:12:0c:d2:04:50:42:c2:1f:ef:43:6e:
9b:f3:99:f3:d9:34:61:51:fe:8d:08:cb:72:0c:10:
2e:be:a1:9f:1e:37:6b:d5:97:a4:2b:b6:72:3c:ff:
1e:e2:5c:29:4e:9f:41:ad:ec:1d:90:63:6b:99:cb:
4d:87:58:46:a8:34:dd:24:1f:00:23:9f:aa:00:d4:
05:7b:05:59:e3:b6:35:3f:ec:7d:77:16:35:08:e5:
f1:06:84:15:8a:0d:df:b8:7e:c4:c7:2e:69:53:28:
7a:bf:32:16:79:92:b2:17:a4:d6:fc:80:77:0b:42:
3a:49:30:b2:89:e2:a8:00:5c:45:fa:8f:72:ef:7d:
bd:da:cb:5b:75:e4:5f:76:ea:2c:f9:fc:d1:c7:32:
5c:27:e0:50:8c:2c:4c:77:86:81:4d:36:b7:de:f0:
06:5c:c9:99:5f:e9:40:a7:c8:72:13:c0:bc:71:e0:
b1:3f:6a:d8:93:bc:ef:dc:f8:e9:bf:84:d6:3b:f9:
5d:06:a3:50:5b:e3:b1:0a:5f:db:94:21:82:b8:dc:
6c:e7:48:6d:34:0a:d8:d1:c5:da:4f:6d:5a:19:d7:
38:9e:e8:05:83:ba:7c:99:8c:90:d9:c4:f2:01:21:
06:f0:75:dc:c4:2e:8a:d7:aa:5d:8c:15:dc:63:47:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A8:5D:27:D3:AB:E4:C5:87:5C:38:1F:70:31:00:AF:A6:D1:53:10
X509v3 Authority Key Identifier:
keyid:1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8c:34:d0:0e:d8:fa:ab:fc:26:c4:25:b2:2a:71:fa:8b:f9:
fb:e7:e4:ac:56:e5:61:28:8e:45:99:ed:aa:7d:9b:46:a8:ea:
94:42:cf:ce:6f:49:a3:f4:64:f4:da:e8:e2:b4:b4:34:e3:8e:
ef:e7:7e:14:fc:fa:0f:37:ac:8b:40:ef:67:f0:68:f3:d0:bf:
da:12:7a:ec:0f:30:8b:8c:a6:8d:9e:d6:84:ff:fd:4a:2b:e1:
31:55:0e:f2:51:e9:23:82:bf:1c:3f:b8:16:23:e9:51:99:c7:
e1:72:ff:59:d9:8a:ed:d3:a7:22:63:49:54:62:62:00:01:c8:
b4:b0:60:ba:90:93:9a:dd:12:ec:00:c7:22:15:61:26:73:95:
39:80:43:a9:c6:75:e5:c8:54:27:46:40:54:a8:cd:a8:82:13:
9d:ff:95:36:dd:a5:c7:7b:2a:49:1d:46:7e:f4:1f:ca:58:48:
3e:21:28:00:63:b7:f9:7b:0d:1a:a1:6a:01:11:09:0f:cf:6a:
4e:db:b3:ad:7f:30:76:8c:b5:cc:6e:5b:ec:7f:22:7a:92:a4:
5b:b8:64:e4:4a:34:f7:57:f2:ff:31:4f:a0:79:83:7b:b1:aa:
34:b9:77:71:82:19:d8:e2:8a:d7:de:4d:af:44:29:3f:ec:39:
97:f7:f5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:17:34 2026 by rpki-client