
$ rpki-client -vvf rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
File: HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft (raw, json)
Hash identifier: Rphnpid6EzBJMxnFR20ki/BAOnKqn29+X+YlSOBAbdw=
Subject key identifier: 81:74:76:44:F0:58:58:0D:BC:90:30:DA:32:15:D7:08:1E:D9:DB:82
Authority key identifier: 1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A
Certificate issuer: /CN=A91707D0/serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
Manifest number: 0102
Signing time: Mon 27 Jul 2026 08:14:36 +0000
Manifest this update: Mon 27 Jul 2026 08:14:35 +0000
Manifest next update: Mon 03 Aug 2026 08:14:35 +0000
Files and hashes: 1: HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl (hash: WznmSEEuHNbbZQFZp6oF9+G/zMM5QREcsWq3VuJ6USo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl
rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91707D0, serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A
Validity
Not Before: Jul 27 08:14:35 2026 GMT
Not After : Aug 3 08:14:35 2026 GMT
Subject: CN=6a67136c-67fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:04:d3:5c:d1:48:7e:65:1b:ca:ed:42:f1:34:
b2:18:3b:1d:5e:7a:96:6f:6b:50:1a:bc:62:c2:df:
49:fe:73:a9:52:46:eb:2c:d0:2c:97:29:49:06:77:
d3:20:20:b6:68:68:32:6c:f6:81:50:87:e8:bd:47:
ad:27:c2:5e:53:ad:12:1b:1d:43:da:52:0d:f1:60:
dd:07:5f:82:07:da:b9:6f:c5:e5:63:6f:aa:80:b3:
49:b6:c7:64:31:df:ae:a8:9a:f6:4e:bd:e8:7f:80:
07:ed:8e:1d:7d:94:51:8f:c8:b6:47:77:48:90:0c:
4e:58:f0:7f:9a:8d:4e:b7:87:e7:ac:ca:bd:82:17:
11:89:c8:22:63:fd:f6:ac:1d:65:8e:ee:8d:5c:9a:
ad:f9:e6:5d:6a:84:42:90:c8:dc:ed:4f:03:57:75:
df:a3:c9:7e:c8:d5:4f:5c:83:2a:ea:91:ee:ff:60:
ec:b6:a8:f4:07:b5:7a:47:a8:67:f3:9b:b1:0c:51:
4b:99:dd:12:c8:49:b4:52:5a:ea:20:c9:4c:d7:f3:
87:f8:e6:1b:70:56:5b:62:46:44:1b:46:89:42:3e:
34:fc:77:2c:d9:fd:cd:2f:aa:08:20:86:04:ed:c1:
16:d5:30:80:1e:af:76:d0:4f:2c:1e:73:a8:42:f8:
63:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:74:76:44:F0:58:58:0D:BC:90:30:DA:32:15:D7:08:1E:D9:DB:82
X509v3 Authority Key Identifier:
keyid:1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:13:59:26:38:a9:bf:28:4f:c6:3e:c1:60:9d:f2:ed:ee:ab:
1c:3e:a6:1f:b4:c9:6e:62:ef:91:ee:d1:f1:a4:42:64:c5:38:
8e:09:71:70:e1:e3:43:5c:95:41:29:93:22:0f:46:e3:f4:c7:
94:bc:d7:ff:0c:ae:d8:c7:8d:0a:65:12:d9:05:f8:d7:69:f5:
3d:09:f9:da:87:be:c4:26:55:f5:7a:55:66:c0:ce:fa:8a:00:
4d:11:9f:c5:8a:02:c8:cb:b2:74:68:c1:08:61:cb:20:55:a9:
aa:98:d3:d8:15:9e:19:bc:ba:15:4d:2b:76:b0:c7:17:2a:b7:
e1:f1:74:d4:08:cf:e9:eb:e6:46:0b:8e:51:b3:ba:91:55:fc:
c2:77:27:ea:3a:55:68:cf:ec:8d:c7:5f:2b:a3:9e:41:a7:a6:
80:61:94:2d:9d:65:36:47:6d:65:3d:64:93:bb:d2:a9:99:b2:
d6:bd:d2:b3:6a:b3:5c:1c:3e:03:5b:43:3b:85:c3:76:c7:73:
da:36:65:4f:8d:86:f8:e5:db:ab:f0:67:fb:b4:b3:ca:ed:d5:
a3:0d:01:d5:b2:5f:d6:6b:a6:01:81:07:6f:13:a5:19:df:84:
70:cf:49:34:eb:b3:94:f6:ef:ce:bf:c2:46:77:d0:76:2f:b4:
c8:c1:a3:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA3RDAxMTAvBgNVBAUTKDFENjM0MTZDNDczQjBDMDkxMkJEQUIzNzEwMjcwMTA5
NUZDNkMzNUEwHhcNMjYwNzI3MDgxNDM1WhcNMjYwODAzMDgxNDM1WjAYMRYwFAYD
VQQDEw02YTY3MTM2Yy02N2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzgTTXNFIfmUbyu1C8TSyGDsdXnqWb2tQGrxiwt9J/nOpUkbrLNAslylJBnfT
ICC2aGgybPaBUIfovUetJ8JeU60SGx1D2lIN8WDdB1+CB9q5b8XlY2+qgLNJtsdk
Md+uqJr2Tr3of4AH7Y4dfZRRj8i2R3dIkAxOWPB/mo1Ot4fnrMq9ghcRicgiY/32
rB1lju6NXJqt+eZdaoRCkMjc7U8DV3Xfo8l+yNVPXIMq6pHu/2Dstqj0B7V6R6hn
85uxDFFLmd0SyEm0UlrqIMlM1/OH+OYbcFZbYkZEG0aJQj40/Hcs2f3NL6oIIIYE
7cEW1TCAHq920E8sHnOoQvhjfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIF0dkTw
WFgNvJAw2jIV1wge2duCMB8GA1UdIwQYMBaAFB1jQWxHOwwJEr2rNxAnAQlfxsNa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDdEMC82NUI2OEU5NjAw
NzIxMUYwQjM2M0RGNUVDNEY5QUUwMi9IV05CYkVjN0RBa1N2YXMzRUNjQkNWX0d3
MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hXTkJiRWM3REFrU3ZhczNFQ2NCQ1ZfR3cxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDdEMC82NUI2OEU5NjAwNzIxMUYwQjM2M0RGNUVDNEY5QUUwMi9IV05CYkVjN0RB
a1N2YXMzRUNjQkNWX0d3MW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfhNZJjipvyhPxj7BYJ3y7e6rHD6mH7TJbmLvke7R8aRCZMU4jglxcOHjQ1yV
QSmTIg9G4/THlLzX/wyu2MeNCmUS2QX412n1PQn52oe+xCZV9XpVZsDO+ooATRGf
xYoCyMuydGjBCGHLIFWpqpjT2BWeGby6FU0rdrDHFyq34fF01AjP6evmRguOUbO6
kVX8wncn6jpVaM/sjcdfK6OeQaemgGGULZ1lNkdtZT1kk7vSqZmy1r3Ss2qzXBw+
A1tDO4XDdsdz2jZlT42G+OXbq/Bn+7Szyu3Vow0B1bJf1mumAYEHbxOlGd+EcM9J
NOuzlPbvzr/CRnfQdi+0yMGjFg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:35:11 2026 by rpki-client