
$ rpki-client -vvf rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
File: HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft (raw, json)
Hash identifier: uqQTFp+AHUDAOoacUMCJJq5c7LOhrhzaJt8VkYyWr7c=
Subject key identifier: 19:F7:00:6F:7F:FB:5F:C7:93:C2:C8:C9:99:B3:9E:C4:B1:6E:64:1E
Authority key identifier: 1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A
Certificate issuer: /CN=A91707D0/serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
Manifest number: B7
Signing time: Sun 01 Mar 2026 08:20:10 +0000
Manifest this update: Sun 01 Mar 2026 08:20:09 +0000
Manifest next update: Sun 08 Mar 2026 08:20:09 +0000
Files and hashes: 1: HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl (hash: IIfuxPTpAcMv4oes8ndFCrOPh5d09hpzX9tIOvznoSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl
rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:20:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91707D0, serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A
Validity
Not Before: Mar 1 08:20:09 2026 GMT
Not After : Mar 8 08:20:09 2026 GMT
Subject: CN=69a3f6ba-9a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:80:77:b8:25:4c:30:a0:47:ed:63:51:d9:3b:
b3:0d:68:64:86:ec:91:de:54:c7:18:93:9d:24:f7:
bb:ea:60:2b:57:e1:fb:7d:dd:b9:19:9c:9d:34:6c:
66:cb:c4:67:45:78:31:38:ec:39:d4:eb:58:1b:57:
20:36:38:47:1a:ab:fe:a3:24:d9:43:47:5b:c8:cb:
81:0c:a1:2d:10:b7:99:30:98:70:5f:8d:1b:80:20:
fe:ff:0a:73:4a:b1:ea:a0:1c:a2:4b:da:7d:c4:38:
88:69:76:9f:23:f6:65:88:dc:86:d3:60:38:05:f4:
6b:58:e4:a7:58:6d:2f:0b:f9:da:e6:98:90:b1:8d:
60:b3:56:d2:fb:6f:07:7c:83:4e:f1:a3:28:2b:cb:
24:11:d0:5e:bb:db:d3:57:33:ba:68:52:76:24:5d:
15:eb:b4:14:84:74:6b:75:1a:e3:1a:2c:ee:7b:1f:
bd:b1:65:8d:f0:b3:80:22:13:6e:9c:da:5c:31:d2:
00:f6:9a:89:8a:ea:4f:f2:2e:8c:f0:35:a5:6f:c8:
4b:f2:aa:d3:5b:41:60:2b:84:f2:d8:25:f8:a5:00:
91:31:a3:f7:d4:97:42:02:30:23:61:96:cd:ed:f5:
27:df:ba:d1:26:84:5c:9d:77:ba:86:e5:c1:6a:75:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F7:00:6F:7F:FB:5F:C7:93:C2:C8:C9:99:B3:9E:C4:B1:6E:64:1E
X509v3 Authority Key Identifier:
keyid:1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:6d:73:de:a9:24:11:06:ec:f8:35:62:b3:01:40:89:a8:db:
e7:c5:15:94:0a:43:28:dd:ca:da:b1:2e:8c:22:8d:65:9a:17:
5b:5b:3b:92:2d:d2:d2:f7:a0:0c:11:65:a8:b1:34:0b:03:b8:
ec:74:ae:99:a9:0a:c6:ba:5e:9e:ae:71:b4:72:fa:19:e7:c5:
7b:3b:b4:e2:23:e3:6d:c3:ab:80:1a:1d:01:c8:e9:68:d7:5c:
12:1e:3c:63:83:bd:41:b2:f2:41:33:51:49:09:d6:d0:12:16:
da:e9:b3:56:d5:93:b8:d2:bf:79:a6:9e:d1:df:9a:14:60:12:
56:28:3b:86:43:3a:60:7c:fd:38:c0:19:a8:b5:36:a4:39:9e:
73:20:03:17:22:49:cf:27:31:29:25:dc:99:a9:f8:d0:e5:e6:
20:66:1b:2f:95:9b:56:f9:16:43:b9:64:0a:cd:52:ac:e0:47:
96:1c:eb:8a:1c:25:b6:f1:0d:e6:46:a8:13:a9:fc:77:56:b5:
95:16:e4:b4:ea:8c:14:e5:3a:b4:7c:60:e0:f3:36:41:a4:8b:
15:09:80:a5:89:bd:93:3f:a1:ac:82:11:b9:0c:09:b2:0a:cc:
c6:ff:86:d4:16:05:68:90:39:cb:bf:c1:2c:b0:71:10:30:48:
af:2b:5e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:30:36 2026 by rpki-client