
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
File: HWGssMZyy01A7T6U08CbIMdFJa4.mft (raw, json)
Hash identifier: 0Z+8VzplNsAhOndXRP0gvL2hFBZkv/GgSZONpD7cEYA=
Subject key identifier: E4:8E:8B:4D:1E:96:7B:FE:04:AF:E1:71:77:E4:84:3E:EA:A2:46:B7
Authority key identifier: 1D:61:AC:B0:C6:72:CB:4D:40:ED:3E:94:D3:C0:9B:20:C7:45:25:AE
Certificate issuer: /CN=A9176BDB/serialNumber=1D61ACB0C672CB4D40ED3E94D3C09B20C74525AE
Certificate serial: 03E6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
Manifest number: 03D8
Signing time: Mon 15 Jun 2026 00:39:09 +0000
Manifest this update: Mon 15 Jun 2026 00:39:09 +0000
Manifest next update: Mon 22 Jun 2026 00:39:09 +0000
Files and hashes: 1: HWGssMZyy01A7T6U08CbIMdFJa4.crl (hash: SiINwEZxwlJ4jOIPr24P9JV6QUtxFKRKPq4Sp+8NhBw=)
2: 72AFB32C559211F1B22C82B592833773.roa (hash: TMbP6L3Em89acCRjO434FFkbgmcYoUU8SeaJFFKDkHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.crl
rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 00:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 998 (0x3e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176BDB, serialNumber=1D61ACB0C672CB4D40ED3E94D3C09B20C74525AE
Validity
Not Before: Jun 15 00:39:09 2026 GMT
Not After : Jun 22 00:39:09 2026 GMT
Subject: CN=6a2f49ad-73c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2b:9b:e4:70:85:a2:74:a8:97:f2:f9:f7:c2:
ee:39:87:82:61:72:e8:2e:d9:5d:5c:1e:3d:27:9f:
ac:ad:dd:40:f4:88:7a:ff:30:96:fc:8b:cd:4d:df:
b5:17:f2:7c:0a:14:f2:93:9e:dc:89:07:92:03:2a:
65:8a:81:18:1a:18:f0:a8:ed:d9:c1:b3:2e:aa:a9:
11:6e:ea:ac:4b:0f:30:6a:74:36:a4:08:4b:e4:b6:
f8:38:c0:c3:db:f1:ed:50:52:76:d3:d5:93:4b:90:
b8:89:72:c7:1b:6e:e8:f0:c0:bd:c7:0d:0a:b4:93:
a0:11:2f:ac:44:7a:7a:0a:6a:40:07:89:cd:eb:84:
f2:fe:f8:16:62:b4:4b:aa:b0:90:cf:9d:86:ea:f1:
2a:e5:ad:c6:65:85:17:0d:7e:a2:a2:93:85:11:6a:
a0:b9:6f:b5:48:03:00:1a:91:13:c1:b5:53:13:99:
0a:35:1c:e0:ee:f7:a3:22:53:e6:12:1a:7c:b2:3b:
15:ba:bd:8b:17:be:1b:47:5b:b6:c9:5c:06:99:99:
88:e3:e9:32:b6:3c:ba:ea:40:a2:2c:c1:74:84:91:
b8:97:1f:eb:25:8e:6e:55:d8:96:d9:27:e4:71:cd:
9e:73:12:d9:b3:61:a0:ba:78:5c:a7:0d:27:08:f5:
fe:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8E:8B:4D:1E:96:7B:FE:04:AF:E1:71:77:E4:84:3E:EA:A2:46:B7
X509v3 Authority Key Identifier:
keyid:1D:61:AC:B0:C6:72:CB:4D:40:ED:3E:94:D3:C0:9B:20:C7:45:25:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:99:bd:22:64:60:1c:1c:cd:eb:7f:69:a9:9e:83:89:a3:3a:
ec:af:9e:db:54:95:01:14:3e:78:3f:94:2d:91:74:be:af:87:
a3:b1:1f:a3:73:f4:19:fd:b5:6d:21:d3:8d:7e:02:36:40:28:
16:f5:29:6a:16:ee:97:35:72:b5:5f:dc:3f:76:73:b7:51:5c:
42:e8:8e:1c:25:72:f1:f7:ad:bb:0e:1e:26:15:a6:a4:7c:d6:
2f:f2:65:ba:c5:bc:29:6c:fc:50:74:0b:4d:69:53:cc:19:2d:
82:16:27:59:95:71:80:de:3e:5f:c1:2d:c8:03:d2:32:1d:9f:
00:25:d9:d0:ff:0f:02:88:fc:1c:52:0a:07:f8:b7:4b:69:a3:
54:87:e9:d3:64:77:3b:e3:b9:2b:89:4e:c9:b6:b6:8d:ce:98:
5f:c3:a6:ba:76:1f:26:79:ad:66:1d:af:61:06:68:73:45:33:
6d:9b:7d:7c:7e:9f:a4:9d:f4:89:f7:3a:dd:d2:9c:03:1b:b0:
38:9f:60:35:c6:d2:17:32:c9:97:a9:43:40:6c:b4:22:e9:a3:
dc:f1:37:58:d6:c7:97:95:14:5d:b0:67:47:39:08:d8:ab:b6:
40:fb:82:ec:0d:8d:c5:94:6a:63:10:11:08:97:8d:59:f4:53:
b4:18:3e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 17:52:24 2026 by rpki-client