
$ rpki-client -vvf rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.mft
File: Hwqez8yog84ajHjPFa9I2e-VQWo.mft (raw, json)
Hash identifier: SWX8XqTXioDLVrdoKwn41p2Xj8xv1HIMUch+pSUhqow=
Subject key identifier: D3:8D:3D:36:50:21:09:91:F0:6D:8A:78:22:E9:10:27:2B:82:1F:FE
Authority key identifier: 1F:0A:9E:CF:CC:A8:83:CE:1A:8C:78:CF:15:AF:48:D9:EF:95:41:6A
Certificate issuer: /CN=A917286F/serialNumber=1F0A9ECFCCA883CE1A8C78CF15AF48D9EF95416A
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Hwqez8yog84ajHjPFa9I2e-VQWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.mft
Manifest number: 1F
Signing time: Fri 17 Jul 2026 10:14:34 +0000
Manifest this update: Fri 17 Jul 2026 10:14:33 +0000
Manifest next update: Fri 24 Jul 2026 10:14:33 +0000
Files and hashes: 1: Hwqez8yog84ajHjPFa9I2e-VQWo.crl (hash: ybt07whZvF6KyTYiJpVyxeZv90+9rjo13jivECk1sHk=)
2: 427F4E6653C011F1A527BD9DBA833773.roa (hash: eG5S+GARzWRbVnPna51fSv5pLFPdQ2BwMOqn8Rq4jV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.crl
rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Hwqez8yog84ajHjPFa9I2e-VQWo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917286F, serialNumber=1F0A9ECFCCA883CE1A8C78CF15AF48D9EF95416A
Validity
Not Before: Jul 17 10:14:33 2026 GMT
Not After : Jul 24 10:14:33 2026 GMT
Subject: CN=6a5a0089-0601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:ae:c3:3f:76:4a:bf:7d:13:db:9d:14:23:
59:77:03:d8:cc:3a:60:e7:82:9e:4b:0d:18:4d:28:
31:e3:f2:4b:ea:0e:ab:33:f1:e3:2a:f6:33:02:91:
3c:f2:16:73:d1:24:27:40:38:cc:e7:7e:02:7c:39:
85:8b:81:70:94:0c:3d:80:15:cf:b8:ef:c5:06:d2:
80:06:eb:c1:c8:2f:7f:79:16:e7:cf:51:15:58:2b:
70:92:82:2f:59:f0:c3:98:94:b0:65:d5:49:e6:da:
91:51:9b:85:27:7b:1d:02:fa:3a:17:24:1a:e8:8d:
b5:bb:29:df:21:7b:35:1b:99:e0:e3:0f:c6:93:4e:
8f:c7:20:7e:d6:7c:97:9c:08:e0:2b:2b:2b:ab:d3:
f4:1a:4b:2c:01:89:12:6d:31:6a:c6:a5:58:54:2b:
a2:98:62:f9:ad:e5:4f:37:cb:47:5b:4e:dc:69:07:
db:1f:8c:55:c0:41:91:2b:8e:92:ae:c8:af:a4:a4:
37:08:88:2c:10:66:35:c5:b8:ad:01:b1:17:3a:f2:
c0:10:fe:a3:0e:72:cc:f6:ab:73:27:aa:d0:20:97:
e0:9b:a6:13:87:73:09:39:92:c3:bd:64:93:ad:a3:
92:e6:bd:d9:49:d7:e8:02:d6:83:f4:8e:71:a3:f1:
ae:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8D:3D:36:50:21:09:91:F0:6D:8A:78:22:E9:10:27:2B:82:1F:FE
X509v3 Authority Key Identifier:
keyid:1F:0A:9E:CF:CC:A8:83:CE:1A:8C:78:CF:15:AF:48:D9:EF:95:41:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Hwqez8yog84ajHjPFa9I2e-VQWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:8d:e7:0d:54:f6:74:5a:30:da:c3:d0:3b:c6:8a:57:aa:bd:
99:4f:51:31:22:44:11:9e:2c:8a:8a:1b:ca:f4:9e:5f:08:00:
e8:d0:1b:f2:30:a4:73:86:1e:e3:a3:a0:3c:99:ad:c8:73:5a:
ce:87:b1:a0:7c:0a:fd:b8:fc:d1:c0:6b:49:63:c1:22:0d:6e:
74:4f:f2:db:a5:79:f1:9b:47:af:96:0a:1d:d4:4d:45:8d:51:
e4:a5:58:6f:35:1a:70:ee:8a:d3:bb:ec:ac:55:14:3d:ee:aa:
16:0b:82:74:c3:a6:db:18:3b:70:e0:16:da:1d:65:8c:1f:8e:
bf:31:4b:0d:1f:67:cf:a1:03:7c:a7:ff:e6:f0:76:50:e5:04:
2e:65:33:c8:2a:e7:30:0a:a8:4a:66:4f:65:6e:5e:17:fb:f6:
86:fd:ba:01:66:d3:3d:57:49:38:05:de:bd:06:c8:67:b4:d0:
fc:21:24:7c:b4:3e:76:9e:a1:8a:06:54:6d:fc:fd:54:55:26:
e7:ba:89:15:fd:52:2f:31:33:c9:94:3c:fc:9b:79:b1:8b:2f:
1d:32:e2:3d:e8:36:e0:1d:83:5c:e7:d2:30:26:80:f7:82:5e:
a8:98:73:09:eb:a1:77:ef:80:08:1d:93:30:14:69:da:78:b1:
2e:66:d5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:10 2026 by rpki-client