
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
File: HWGssMZyy01A7T6U08CbIMdFJa4.mft (raw, json)
Hash identifier: 76TZt4M7fVHFFEN9VqORbJiil8mjkRCH8LgiModwrmM=
Subject key identifier: 90:E5:D3:E4:2A:7D:D8:85:C6:8A:F5:04:3A:CA:9C:6A:A8:5C:B3:AE
Authority key identifier: 1D:61:AC:B0:C6:72:CB:4D:40:ED:3E:94:D3:C0:9B:20:C7:45:25:AE
Certificate issuer: /CN=A9176BDB/serialNumber=1D61ACB0C672CB4D40ED3E94D3C09B20C74525AE
Certificate serial: 03C7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
Manifest number: 03BA
Signing time: Wed 29 Apr 2026 01:16:31 +0000
Manifest this update: Wed 29 Apr 2026 01:16:31 +0000
Manifest next update: Wed 06 May 2026 01:16:31 +0000
Files and hashes: 1: HWGssMZyy01A7T6U08CbIMdFJa4.crl (hash: XxHe+GM3TWm9vepTnT/Ca2Y/9Tw1XBEU1PCD/C6xBOo=)
2: CBA514345AD611F0B344B779C4F9AE02.roa (hash: qaqb32QMVSNEZ3f7TtmSpmBYJSl1ZcNm9kGHql238LQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.crl
rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 01:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 967 (0x3c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176BDB, serialNumber=1D61ACB0C672CB4D40ED3E94D3C09B20C74525AE
Validity
Not Before: Apr 29 01:16:31 2026 GMT
Not After : May 6 01:16:31 2026 GMT
Subject: CN=69f15bef-132b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:69:78:55:7f:6e:d4:38:34:64:01:b2:0a:
89:31:0f:a4:a0:66:26:32:ef:79:68:4a:d3:a2:18:
ed:74:96:47:c8:94:6e:4e:7d:5e:0f:e5:e9:e4:ba:
65:df:83:23:e6:b1:a4:40:49:cf:17:06:18:f0:b9:
32:1f:bc:76:1e:e8:53:68:01:10:de:d5:32:54:78:
98:8c:dc:19:05:f1:9e:38:1d:85:e8:71:1c:5e:c9:
ce:da:10:3d:99:c4:38:35:52:33:17:7a:f7:2b:4d:
60:e5:5a:49:04:e8:3a:0a:74:55:8c:fe:36:a0:67:
1e:4c:58:8e:e8:14:91:75:bf:70:27:21:21:6d:56:
06:e0:f9:c8:e9:93:0d:e2:98:10:c1:1e:8f:e9:04:
a5:53:82:7b:5d:e7:9f:4e:d9:e0:ef:c6:19:c0:f1:
b6:99:98:4e:12:44:03:86:c4:4b:a5:fb:79:4e:fb:
f9:03:1d:de:88:34:65:dc:6e:a2:3a:d5:c4:25:3d:
dd:0c:2e:bb:53:7e:2a:4b:96:c1:12:c0:81:8e:49:
a9:c2:9f:c0:58:bd:40:3e:56:94:d4:46:b1:c5:5f:
db:e6:08:92:02:a2:d0:1f:d7:eb:a3:2e:58:57:c1:
45:49:c7:0f:15:3c:c6:7a:8c:10:15:5f:c3:59:33:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E5:D3:E4:2A:7D:D8:85:C6:8A:F5:04:3A:CA:9C:6A:A8:5C:B3:AE
X509v3 Authority Key Identifier:
keyid:1D:61:AC:B0:C6:72:CB:4D:40:ED:3E:94:D3:C0:9B:20:C7:45:25:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ce:fc:76:3f:51:62:a4:d9:ea:6e:26:29:71:24:11:fe:c7:
e2:58:de:8b:09:3c:44:ef:3e:63:1f:a2:7b:f0:2c:eb:6f:e4:
ba:ad:b2:13:c6:56:54:94:bb:7c:f0:96:bc:84:b8:9f:95:74:
2e:d3:27:61:bb:37:79:e7:60:56:fa:c3:88:36:92:7d:b7:4f:
ae:17:95:83:b2:4f:f2:e4:2f:5d:40:f3:7c:20:c2:df:88:5d:
0d:e0:e4:fb:70:1e:37:5e:9a:c2:24:26:f8:5b:08:9d:eb:43:
5b:25:a7:4e:51:39:61:ce:a6:bf:62:75:b1:9f:85:2c:bb:03:
e8:bf:a1:5f:61:11:43:0f:14:66:57:02:2b:62:fa:dd:75:43:
42:b3:88:86:e1:76:7a:d2:28:0c:12:35:6b:e8:f8:ec:83:9a:
c8:78:23:7e:84:9f:19:52:66:7c:68:a8:d3:5c:ac:88:cf:4c:
84:74:5c:8e:19:87:6d:4a:b5:49:a4:a2:43:3f:28:97:ca:ee:
cf:4a:01:9b:ac:a8:10:38:a3:e4:4f:20:fd:7b:94:53:a7:cc:
f2:49:6d:bf:b0:6a:0e:d0:2d:88:11:85:31:94:93:2c:38:f8:
a7:47:3a:cf:f5:30:75:ff:e7:e4:79:42:c3:07:a0:0b:b8:0d:
17:da:2e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 16:57:16 2026 by rpki-client