
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
File: hwGGtlfRGymKhLAkIO504fu1woI.mft (raw, json)
Hash identifier: RXCVtAQl21Pg3QuQFfkmH8aNFWoPVuKbo7Fmfcwttdc=
Subject key identifier: 9E:A1:88:0A:73:0A:80:D3:3B:94:1E:C4:DC:4A:6E:C5:D0:D2:56:B8
Authority key identifier: 87:01:86:B6:57:D1:1B:29:8A:84:B0:24:20:EE:74:E1:FB:B5:C2:82
Certificate issuer: /CN=A9191885/serialNumber=870186B657D11B298A84B02420EE74E1FBB5C282
Certificate serial: 01FC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
Manifest number: 01F2
Signing time: Fri 09 Oct 2026 03:54:21 +0000
Manifest this update: Fri 09 Oct 2026 03:54:21 +0000
Manifest next update: Fri 16 Oct 2026 03:54:21 +0000
Files and hashes: 1: hwGGtlfRGymKhLAkIO504fu1woI.crl (hash: IVau2fMuh+jCGT2prsd1bU1HowPzg9M3KyZJa6eTRaI=)
2: 8E31656CC9FF11EEA53CA25CC4F9AE02.roa (hash: 6fQFL5w3Iy2l1PRkFey8e5vxSvMamd8avEe4N1b1Afc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.crl
rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 03:54:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191885, serialNumber=870186B657D11B298A84B02420EE74E1FBB5C282
Validity
Not Before: Oct 9 03:54:21 2026 GMT
Not After : Oct 16 03:54:21 2026 GMT
Subject: CN=6ac8656d-2835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0b:06:56:f2:83:48:7d:bf:1b:64:03:c4:23:
d7:72:b4:6c:62:42:69:eb:37:16:96:29:fc:ee:42:
9f:7a:9a:20:c9:9b:9c:91:6e:99:27:53:df:08:b5:
af:9c:50:86:f8:d5:04:c1:46:6c:6a:27:0e:30:4b:
ad:84:2e:b0:e1:06:98:8f:6a:42:ad:23:ba:d0:81:
2f:e2:46:42:b4:a0:3b:58:00:c9:e5:f9:bf:0d:90:
a1:55:5d:2f:54:2a:aa:3c:e8:98:7a:19:fa:ec:ef:
da:03:23:22:97:d0:d9:30:ec:db:da:56:b6:84:da:
80:18:80:fb:34:ac:3d:6e:4e:b8:cd:15:29:d8:f0:
02:94:77:43:05:0e:f0:59:4f:aa:26:64:63:5f:e2:
46:72:bf:d6:84:b6:11:0d:10:67:e6:aa:85:a3:14:
36:bc:c8:30:d1:7f:ef:6b:f3:77:05:48:22:17:82:
ac:95:11:26:99:3c:0d:8c:7f:e9:9b:43:6f:6c:68:
a0:d1:4a:cd:69:af:b3:ee:85:cc:10:5b:63:0a:1b:
4e:30:1b:1e:68:d6:3b:8c:a3:89:27:b6:a5:79:5c:
0e:0d:ce:d7:07:25:b2:ab:28:f3:f9:1f:3a:c9:43:
19:98:2e:60:fa:33:6f:2b:ca:6b:69:ee:58:23:af:
7d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A1:88:0A:73:0A:80:D3:3B:94:1E:C4:DC:4A:6E:C5:D0:D2:56:B8
X509v3 Authority Key Identifier:
keyid:87:01:86:B6:57:D1:1B:29:8A:84:B0:24:20:EE:74:E1:FB:B5:C2:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:0f:78:65:d2:55:98:e7:54:30:5b:fa:6d:f7:1a:c0:43:21:
f1:d3:08:86:7d:ee:70:c5:38:9e:d4:a4:c5:76:b2:2d:87:f7:
3a:6d:46:cb:12:a8:03:dc:25:86:d0:78:f0:77:97:72:ca:46:
1c:a2:73:d0:aa:3e:3d:26:42:43:79:81:1c:1b:ce:26:e5:00:
b0:14:55:4d:99:05:bc:11:16:84:b7:ac:14:a4:9e:dd:ac:d5:
6a:a7:ec:1e:6b:38:6d:e4:32:25:7a:1b:4f:7b:97:32:c1:c3:
d5:99:c5:08:f8:3e:08:91:46:6d:fe:7e:58:4a:06:ce:c7:7b:
36:c1:b5:a6:3c:2a:b1:ee:84:30:92:07:4c:b8:c8:c7:45:21:
0f:b6:25:f4:c1:11:c5:e5:e9:25:df:0f:6d:99:14:16:5c:89:
8e:87:6a:04:3b:d1:e9:f4:ae:a2:89:32:14:5e:31:54:8b:08:
90:98:dd:30:d1:f9:ce:7c:dc:89:a1:c0:84:ac:11:85:3a:a4:
26:fa:a4:e2:0c:36:27:db:20:d1:8a:c1:75:89:1b:70:77:ba:
ea:36:73:8f:ef:dc:e1:da:26:bc:02:d2:66:70:ec:45:7d:dc:
50:00:20:e5:b4:88:c4:5e:f0:87:9c:c8:a4:c3:ee:47:80:45:
f8:4f:f4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 10:06:15 2026 by rpki-client