
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
File: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json)
Hash identifier: rVzrMkgh0iUq6OMn3DCOJrClRCsksvua233cK7hIDVw=
Subject key identifier: 0E:9A:76:7B:7B:ED:1D:39:49:08:9A:04:6C:FD:3D:E1:CC:47:C0:70
Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Certificate serial: 3629
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
Manifest number: 35D4
Signing time: Fri 18 Sep 2026 14:39:04 +0000
Manifest this update: Fri 18 Sep 2026 14:39:03 +0000
Manifest next update: Fri 25 Sep 2026 14:39:03 +0000
Files and hashes: 1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: jbAHdqB6hDQ7m7/pL9edSAJhm6Fw5Le2c6jPhxpaEGI=)
2: C2DFDA20DE0611EF9DC6A135C4F9AE02.roa (hash: vKe+s1AjVTC2tWxyer0iCi6sE34mb63o5/xf7YiZBp8=)
3: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: 4K+Xr5cEWGU3CtoxwVoZf3ocwZzyt3Pe/yTV1VWV7A0=)
4: 2B622E1282F511EF9090F681C4F9AE02.roa (hash: JS+c9sL3L+WCOEhTvnP+XpOyBuJ/6R/u9Qm2AM/cHpk=)
5: 0FCDEA68113B11F09E3A4157C4F9AE02.roa (hash: t4/ezhxy8Yfpe9cG1UobV4ijgY6RGmsFly/MX9OY10A=)
6: 7BC92742ADA611F18F55423F6E11F970.roa (hash: ai7pgQHXoz7YgQfjtoOzeruV6ucLwGuomU9kU9c7KlM=)
7: B403FEF04F7A11F1B793142BCC833773.roa (hash: IKEvB9HOIvcPiPrVCDKQordv8ZQb5XOZI7Vg1pWDv1I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl
rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13865 (0x3629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Validity
Not Before: Sep 18 14:39:03 2026 GMT
Not After : Sep 25 14:39:03 2026 GMT
Subject: CN=6aad4d08-6111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:af:f7:ce:d4:e2:81:4a:b2:ec:67:54:67:
e4:88:6e:12:b8:3c:bc:e9:dd:4b:15:9a:ae:d0:6c:
65:81:c9:a7:d0:02:a9:2e:17:ae:48:b4:fd:21:5c:
6c:49:7b:7f:a1:4c:d3:36:46:be:6d:31:5a:b8:6c:
27:d2:34:dd:70:83:00:0b:3c:fe:bc:0e:de:b5:0c:
18:8a:51:24:52:b8:5e:0e:31:9c:18:ec:f8:c4:4e:
44:de:d5:a6:a4:ce:6b:12:a8:58:1d:94:34:ef:ce:
9d:8c:b9:db:f9:0d:54:32:ca:90:0f:47:b2:56:14:
b7:75:ee:98:cd:14:90:e6:ea:ab:b4:d0:ac:65:67:
4d:97:70:b0:9d:f8:de:f2:3c:b4:51:22:33:3e:45:
9f:77:26:c3:54:32:f0:aa:56:cf:45:ce:a1:d5:bc:
b0:bc:d4:29:37:13:71:16:c5:96:dc:fa:5d:0c:f4:
93:97:6b:11:02:7f:d3:9c:85:a2:30:df:f5:a9:18:
f6:a3:db:a7:ff:04:f2:d1:3c:6b:64:89:f6:7b:28:
a5:a7:d4:50:68:c6:eb:50:90:5f:d4:6d:de:0c:94:
7c:3d:f1:39:ce:6d:fb:c1:a1:43:e1:8b:8d:9b:1d:
08:b1:18:cc:60:f2:62:c5:89:dc:60:dc:f9:0b:9c:
a8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9A:76:7B:7B:ED:1D:39:49:08:9A:04:6C:FD:3D:E1:CC:47:C0:70
X509v3 Authority Key Identifier:
keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:07:0c:ec:a7:fc:6c:1a:50:67:44:ce:38:70:b4:13:4b:ca:
cd:42:80:8e:69:87:a7:f1:31:e3:81:d9:44:be:01:c3:4e:fc:
0a:df:20:72:c4:ea:b8:58:1b:b2:09:b7:9d:0a:41:af:4d:34:
6f:c5:de:5f:7f:f2:b7:d0:c4:98:4e:8b:e8:5b:5e:96:5d:f7:
96:3c:66:7c:29:dd:c6:2d:ac:f6:98:5c:e5:61:a4:23:e4:55:
3e:25:0d:f9:50:44:1a:36:93:25:d8:ca:1e:2c:f7:42:43:7a:
26:5a:5b:3e:8b:58:bc:68:b7:01:b1:5a:a2:73:af:36:27:66:
62:aa:9b:43:a3:26:bb:d0:a0:68:a7:ca:1e:82:cc:83:d3:4e:
df:31:98:20:1d:a7:58:fa:30:69:2d:a9:dc:ed:5a:db:f8:d7:
64:95:af:23:70:81:35:7c:8d:80:ec:26:46:7c:77:42:5d:26:
99:39:59:a4:50:ae:10:24:43:ca:fa:95:55:f0:9e:bf:ff:43:
45:f6:95:b3:6d:01:e7:3b:cc:d3:39:d7:fb:35:97:a8:49:37:
bb:07:45:dd:c6:6b:5b:f2:30:65:2a:9c:75:9c:39:25:17:7f:
72:89:5d:f7:1e:d1:db:e8:19:bc:de:13:3a:94:95:10:a0:1f:
ef:40:62:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 15:00:10 2026 by rpki-client