
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
File: HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft (raw, json)
Hash identifier: 8kdV+nl5rEetqkMQQ/ZAo+4aStxL+1ySGMUrHEgkkOg=
Subject key identifier: CD:A7:B9:75:C5:E2:33:7E:0F:AC:3D:E0:FF:74:3E:6D:C5:68:13:E5
Authority key identifier: 1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A
Certificate issuer: /CN=A91707D0/serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A
Certificate serial: 0138
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
Manifest number: 0138
Signing time: Mon 09 Nov 2026 05:42:13 +0000
Manifest this update: Mon 09 Nov 2026 05:42:12 +0000
Manifest next update: Mon 16 Nov 2026 05:42:12 +0000
Files and hashes: 1: HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl (hash: Fgg1YsNduoBUrukXZ7N0Pvqg3tFM2GK7/kIvVBTQawg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl
rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 05:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91707D0, serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A
Validity
Not Before: Nov 9 05:42:12 2026 GMT
Not After : Nov 16 05:42:12 2026 GMT
Subject: CN=6af15d34-61c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:31:22:2a:c4:14:9b:9b:04:06:81:88:cc:
1a:94:3a:dc:b6:69:b1:f3:47:45:46:c9:d0:74:d5:
97:48:1d:61:64:40:19:f5:3f:1f:5b:06:64:31:0b:
3d:a1:5e:5e:2a:85:2f:0c:2d:45:e3:28:9c:81:c1:
f0:d3:46:b2:84:f5:fc:60:15:8c:70:c6:3b:63:a1:
81:44:55:94:00:1a:32:bc:42:4a:2a:9d:e4:2f:54:
2c:36:f2:e6:3a:36:50:c8:b1:df:f7:6f:5e:e4:88:
89:0a:ec:d9:18:bb:a0:db:19:0f:bb:4d:d4:d7:5d:
82:7c:3c:dc:cb:dd:bc:83:df:a2:24:1e:72:c0:96:
a8:21:fe:b9:77:b1:80:7c:38:ba:12:e4:4d:0e:26:
3b:be:c9:75:24:76:1e:68:29:b6:b4:40:84:d1:87:
14:db:3e:16:f4:2c:e0:1c:28:50:29:24:55:a3:a7:
2d:0d:46:a6:ce:a1:0a:00:10:87:83:45:55:28:71:
c4:7e:21:1f:85:1b:37:34:88:e3:4f:49:84:02:cf:
29:3e:39:4b:6e:34:85:1a:ea:55:33:e2:00:36:dc:
55:33:4c:52:c7:44:90:1c:16:86:8f:aa:bb:79:c0:
46:8a:69:a1:7e:d8:10:9b:81:f8:82:33:87:a6:82:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A7:B9:75:C5:E2:33:7E:0F:AC:3D:E0:FF:74:3E:6D:C5:68:13:E5
X509v3 Authority Key Identifier:
keyid:1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:ce:46:27:b8:59:da:d7:72:1a:cc:0a:d1:8a:ab:bf:0c:d2:
7b:c6:24:c6:94:f8:2e:7d:6a:be:41:9b:3d:78:bb:5e:26:e3:
70:6d:1a:ee:8f:6c:52:1f:b3:90:2a:a0:96:f1:4e:73:91:e6:
cd:34:4a:d2:40:62:f4:d8:e9:5f:73:ff:55:64:d3:f2:8c:a2:
a4:26:10:89:8c:e4:ad:6e:2c:f1:1e:77:68:78:55:6f:f6:2f:
3e:9e:2d:79:d7:ef:1c:03:d7:08:ed:25:3a:77:ba:c5:69:c9:
fc:b4:3a:35:3c:75:19:88:24:1c:f2:42:19:8a:d2:73:3e:27:
b1:50:e4:8f:77:ce:2f:bb:d6:7e:a6:60:b0:6c:2d:b9:d9:d7:
0c:d5:98:ea:87:0b:ec:02:07:ac:65:51:ff:4e:38:45:73:bc:
e2:67:69:1c:bf:29:17:f1:31:79:ce:69:d4:3e:c5:89:57:c9:
3f:a7:63:f7:13:48:8d:4d:4e:f9:5a:6b:bc:77:69:6a:7c:3b:
dc:f1:c5:61:11:d7:e9:18:e8:5b:6e:c1:c1:b6:2a:18:de:db:
f0:bb:c9:36:77:16:83:e6:79:5b:0d:26:56:d9:d3:07:a0:be:
9a:d8:11:9b:51:b3:67:09:da:12:88:0e:d7:9b:36:e3:85:27:
fa:f4:7d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 06:55:25 2026 by rpki-client