
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
File: hwrlmks42vxqMavjKcz4eP33Kow.mft (raw, json)
Hash identifier: 4cRCtGGvR7vTUCo70/VRspsdBonQYmXBqTyCFVtqrkE=
Subject key identifier: 5C:35:AA:F6:07:53:35:05:DB:66:F1:43:4B:F2:F0:B3:98:5F:4B:7B
Authority key identifier: 87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C
Certificate issuer: /CN=A9110795/serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
Certificate serial: 183A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
Manifest number: 1815
Signing time: Sun 20 Sep 2026 16:30:16 +0000
Manifest this update: Sun 20 Sep 2026 16:30:15 +0000
Manifest next update: Sun 27 Sep 2026 16:30:15 +0000
Files and hashes: 1: hwrlmks42vxqMavjKcz4eP33Kow.crl (hash: IeWHbU9vk/Dr92UMHBtn2qMkPXlcDussWps7OV0GNi0=)
2: 5F94C5B814A311EDA489B80DC4F9AE02.roa (hash: 5FNppusvGt34VNZtqC/hpzQYdJ+kkgwElsHx39CrCq4=)
3: F439D662AAAE11E8B3984735C4F9AE02.roa (hash: qgEM8tgcBEY4om6MtgXnx1pYzFwPcAM4LBil0v/++zg=)
4: E734D3DE6E7F11ECB1C0E439C4F9AE02.roa (hash: jAIq80qCBr0145SI+BZrypTAw2o+G+yCXWLqVpqXYs4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl
rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 16:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6202 (0x183a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110795, serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
Validity
Not Before: Sep 20 16:30:15 2026 GMT
Not After : Sep 27 16:30:15 2026 GMT
Subject: CN=6ab00a18-5942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e0:c3:6f:62:57:4f:2c:4e:bb:aa:92:14:1d:
32:f1:fe:1d:21:b9:38:9a:5f:1f:c1:5c:11:8f:10:
3d:89:b3:7b:4a:90:4c:ac:2e:25:e5:f7:f1:b3:c5:
c5:aa:7e:de:21:49:6c:1b:00:ac:f1:70:19:3c:99:
76:7a:38:f7:7c:98:5a:fc:44:d8:20:8e:15:83:84:
28:38:0a:cb:80:29:78:cf:4d:c8:b1:52:09:c0:45:
43:f4:9f:d1:aa:01:cc:b1:ac:52:f5:57:1c:3a:8d:
b5:d5:e2:dc:e8:c8:f5:c6:52:d7:a0:1b:51:bc:25:
c4:84:e4:d9:f3:c5:1e:a4:2d:01:5f:98:b3:4f:b8:
db:6a:aa:8a:88:6e:75:e5:1d:5d:e6:da:4f:d6:62:
d3:b8:c5:f9:61:da:7d:20:fa:02:b4:6d:38:90:10:
05:14:9d:85:52:22:cb:72:4c:2e:ba:f3:df:2c:be:
db:e3:d5:a7:ac:d0:a7:52:dc:f8:c9:70:6e:ab:4c:
4b:fb:82:b0:6f:2d:6b:78:50:08:df:79:66:eb:0b:
bf:48:ce:9b:04:97:a4:2c:ca:52:2f:3c:c2:2c:39:
6c:5f:5a:92:f1:cf:76:ee:6a:df:ee:1c:8d:0c:39:
a8:ad:25:03:0b:dd:58:d3:54:39:04:5d:f4:1f:cf:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:35:AA:F6:07:53:35:05:DB:66:F1:43:4B:F2:F0:B3:98:5F:4B:7B
X509v3 Authority Key Identifier:
keyid:87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:1a:f9:7f:96:4f:12:d7:2c:c0:18:df:d2:16:cb:82:33:ba:
1e:83:c8:85:7d:9d:cd:4b:62:9e:9c:65:c2:82:df:7a:77:5c:
a4:ef:f6:4a:09:57:ef:7b:39:34:4c:38:4e:b9:d5:8b:d8:8a:
18:ca:98:43:44:b2:3d:4b:ac:09:88:da:d8:97:f9:89:3a:a4:
a6:5a:8e:09:46:d2:49:8e:72:09:54:1a:bf:8e:d4:5a:07:17:
ca:4a:49:d3:ed:99:ac:41:77:e5:3b:f8:a8:03:c6:17:07:79:
34:39:3c:45:6e:5b:51:b5:50:dd:cb:d7:1f:11:b7:da:00:54:
58:b0:b1:47:80:6f:80:90:0f:98:3c:21:c6:43:f8:df:6b:82:
b8:5c:6b:36:2a:97:76:a6:a7:e5:f4:ab:d2:c0:d9:01:f8:7a:
f0:47:c7:6b:02:f5:5f:77:13:01:66:ca:f7:9d:02:94:49:0e:
e1:0c:1b:92:76:d8:89:25:85:4d:e3:77:d5:af:54:c8:9f:a5:
94:45:db:e1:c2:33:3c:26:6f:0b:a6:87:4d:88:20:3e:4e:33:
e7:f9:07:3a:86:4c:8d:44:2f:01:16:d1:e0:86:d0:98:b1:b8:
7f:7f:89:b5:a0:91:89:d3:42:1e:b5:cd:4f:f7:2d:f9:4b:ae:
d0:cf:8d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:19:41 2026 by rpki-client