
$ rpki-client -vvf rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
File: HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft (raw, json)
Hash identifier: u+xFHTUauR1dpQrK7JxOB/VF7zzTobto7fpM0cIQpxw=
Subject key identifier: 53:E3:78:02:BC:57:40:55:AE:7F:C0:70:83:C2:54:63:8C:F4:71:97
Authority key identifier: 1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A
Certificate issuer: /CN=A91707D0/serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A
Certificate serial: CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
Manifest number: CF
Signing time: Wed 15 Apr 2026 06:22:57 +0000
Manifest this update: Wed 15 Apr 2026 06:22:56 +0000
Manifest next update: Wed 22 Apr 2026 06:22:56 +0000
Files and hashes: 1: HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl (hash: NqB5ccl/2Gt+/51Uh6WFh+PGX7nbiFT9f0ND8BsYVpM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl
rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91707D0, serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A
Validity
Not Before: Apr 15 06:22:56 2026 GMT
Not After : Apr 22 06:22:56 2026 GMT
Subject: CN=69df2ec1-84f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:25:41:c0:18:cf:e9:45:2d:6a:c3:59:06:
ef:c1:6f:f6:4f:24:d9:8b:63:22:f9:ec:72:26:46:
35:b1:0b:da:8d:e2:b1:72:83:ea:f1:1c:57:5e:d7:
90:f0:cb:1a:40:2a:1f:0e:13:40:a3:8a:be:a8:eb:
20:ea:52:1d:1e:c9:a7:e3:a0:ec:3d:12:fc:99:42:
01:f0:cd:6e:ef:0d:96:ce:82:c7:e9:cb:96:f8:d4:
af:ef:b5:ef:6b:bf:e3:6c:cc:af:62:e9:1f:e4:3b:
5a:3b:63:8d:e5:ae:f1:f9:58:c3:7b:bb:8f:fb:c6:
f1:8c:90:50:d8:01:2a:8d:ad:38:e9:ff:f1:c4:7b:
6c:1b:6a:a2:6e:7c:30:9d:da:8e:24:09:3c:ce:ac:
f1:0a:e0:f8:95:d0:db:ee:2f:d6:27:07:85:40:f1:
6b:a8:4f:03:ae:35:9f:4e:6e:71:79:4a:b8:88:80:
0d:15:fb:5c:ce:69:ee:be:52:28:55:7f:49:9a:e6:
3b:41:e8:f0:6e:d2:13:8b:ba:3b:b5:89:06:a1:58:
59:14:be:af:74:77:b5:8a:b3:4e:a4:b7:00:e3:a0:
f0:3e:56:3d:c2:70:bb:6b:a4:05:4b:6b:0c:80:98:
b9:86:96:32:ec:0b:72:2d:10:c7:8b:81:ed:66:69:
dc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E3:78:02:BC:57:40:55:AE:7F:C0:70:83:C2:54:63:8C:F4:71:97
X509v3 Authority Key Identifier:
keyid:1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:23:23:27:4d:26:eb:c5:ca:b3:c3:99:52:3e:13:e8:59:e4:
0d:f6:2f:e4:76:e2:91:4a:f5:ab:ab:d7:2e:79:d9:88:a2:19:
c2:b2:73:79:d1:28:45:3f:46:71:11:77:41:07:3a:7e:84:df:
f2:de:d9:6f:1f:4a:c5:62:f2:6d:4b:a2:f1:0e:63:c2:f9:fd:
33:dd:e1:f0:63:45:d8:d3:c3:7d:76:5d:35:86:33:33:b1:5d:
6c:ef:79:96:a9:de:8d:4e:aa:d2:a7:3a:10:1b:65:59:4b:c0:
b4:46:3c:17:58:f5:ff:33:a7:4a:25:c7:55:7b:cd:e7:81:1f:
61:49:3f:5e:af:25:fd:48:3e:6c:cb:c6:34:16:c8:da:c8:13:
db:c9:ef:46:60:14:25:37:89:4f:f1:35:45:0c:c2:10:b9:61:
c7:02:06:a9:a0:1a:cf:0b:a7:df:79:4d:ae:d8:dc:dc:c0:5a:
e2:cc:be:c1:a4:c3:71:71:e7:77:5d:f3:a2:a1:b8:04:38:98:
58:02:0c:b6:5e:5e:38:af:41:e0:b4:1b:b7:da:3c:16:f3:0f:
79:63:d5:09:de:ba:19:ea:aa:71:f6:fd:ee:be:fc:ba:08:0b:
f5:5d:74:a3:66:13:6a:c4:ec:f0:97:e3:a4:f7:74:f6:da:9d:
f0:d0:c8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:46 2026 by rpki-client