
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
File: HWGssMZyy01A7T6U08CbIMdFJa4.mft (raw, json)
Hash identifier: DZOMyQOT8jsqV6L29QUimfGH15+ho78I1sRRRUOgTaw=
Subject key identifier: 07:59:54:4C:64:29:B0:CF:55:3F:19:14:C4:56:46:63:73:25:80:52
Authority key identifier: 1D:61:AC:B0:C6:72:CB:4D:40:ED:3E:94:D3:C0:9B:20:C7:45:25:AE
Certificate issuer: /CN=A9176BDB/serialNumber=1D61ACB0C672CB4D40ED3E94D3C09B20C74525AE
Certificate serial: 03FF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
Manifest number: 03F1
Signing time: Mon 03 Aug 2026 01:11:56 +0000
Manifest this update: Mon 03 Aug 2026 01:11:55 +0000
Manifest next update: Mon 10 Aug 2026 01:11:55 +0000
Files and hashes: 1: HWGssMZyy01A7T6U08CbIMdFJa4.crl (hash: 6KCYh7cqgpMZd1pFdJGQLEBuOS7UBuK7NH6ETrVR0B0=)
2: 72AFB32C559211F1B22C82B592833773.roa (hash: TMbP6L3Em89acCRjO434FFkbgmcYoUU8SeaJFFKDkHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.crl
rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Aug 2026 01:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1023 (0x3ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176BDB, serialNumber=1D61ACB0C672CB4D40ED3E94D3C09B20C74525AE
Validity
Not Before: Aug 3 01:11:55 2026 GMT
Not After : Aug 10 01:11:55 2026 GMT
Subject: CN=6a6feadc-e0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:76:d4:32:e8:2c:98:ad:4e:e7:3c:d1:d4:f2:
58:32:64:b1:be:c4:f4:af:51:79:07:cd:d2:e5:c0:
4d:01:b7:ca:03:21:66:a3:46:87:3a:f4:da:8c:61:
f0:ae:48:0e:0b:02:c7:7f:61:a9:8d:b1:3c:56:e1:
91:cc:aa:27:29:eb:a4:ad:d6:b3:99:d9:43:5d:70:
c1:3d:a6:b0:1b:90:d2:79:ab:b4:61:42:31:31:e5:
b2:08:ef:7e:a8:6d:ec:72:24:3c:03:96:80:5f:d7:
ef:73:fa:3c:36:be:27:3e:80:be:0c:de:26:a8:4a:
a4:91:2e:5b:96:23:18:cc:ba:9e:04:b1:cf:7d:37:
4f:d7:cd:05:ea:08:78:a4:9f:3c:03:04:ed:68:8b:
db:cc:2c:a9:de:1c:60:d8:7a:eb:18:82:60:0c:3d:
3f:7f:ef:85:fd:0d:f6:c4:16:f7:df:5e:a5:bf:fe:
50:b0:9c:89:65:c9:8b:ab:2a:76:e6:25:3d:41:e6:
f6:6f:5b:15:dd:c7:a1:f1:06:c4:21:4b:42:e3:62:
4a:48:ef:75:2f:c2:e4:72:52:d2:fa:02:b1:60:54:
57:ef:54:a4:20:44:bb:ed:12:d7:2e:5f:df:21:ce:
ee:d5:f9:e5:b5:fc:ad:4c:96:60:f1:fa:16:38:77:
d3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:59:54:4C:64:29:B0:CF:55:3F:19:14:C4:56:46:63:73:25:80:52
X509v3 Authority Key Identifier:
keyid:1D:61:AC:B0:C6:72:CB:4D:40:ED:3E:94:D3:C0:9B:20:C7:45:25:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:27:8c:5b:08:7a:af:c0:56:18:81:0a:21:75:fa:ac:54:a2:
73:62:df:bf:60:58:97:f7:0f:81:ba:fc:73:d6:e9:5e:e3:c2:
4f:94:71:f3:6d:ee:29:f2:61:40:8e:e0:10:03:ab:57:98:9b:
98:dd:e9:ee:c2:c7:97:53:d3:5f:35:95:12:d5:fb:c9:ee:b7:
17:cb:cf:4c:62:08:4a:31:cb:48:d8:57:bd:82:77:9b:9d:07:
38:3d:e3:ba:0e:91:b6:f3:87:8f:f7:96:c3:69:db:3c:e6:a2:
e0:45:56:5c:cb:1e:dc:05:41:a6:bd:4f:3e:7f:46:51:4e:2c:
08:d2:b4:12:ac:d5:40:4c:59:9f:f5:bc:c5:3f:cd:4f:ce:99:
4b:b0:5e:f5:b0:f7:ea:9c:6f:55:a4:3b:6e:42:4f:69:33:19:
92:3a:fb:ff:44:7b:70:91:8b:00:54:a1:c5:49:f1:db:d1:c1:
e1:a9:1f:41:32:ab:00:b3:53:3a:ef:32:f3:d2:3e:a9:3c:39:
7c:a2:9f:be:4e:87:f5:ac:18:88:4c:89:b0:7f:08:f3:8f:1b:
2f:bb:b5:12:88:fa:f3:ca:df:30:1a:3e:a2:17:cf:1c:82:ab:
bd:66:56:ca:b6:75:70:fc:97:35:67:8e:a2:fc:78:6a:55:1a:
5c:3b:45:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 17:33:08 2026 by rpki-client