
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
File: hwGGtlfRGymKhLAkIO504fu1woI.mft (raw, json)
Hash identifier: Qu+YUtnruO1ifkqOQmhO0qJeYhsrCl8EsdjUU3BJqig=
Subject key identifier: 20:BA:DB:11:B6:FD:84:74:B7:22:A0:DD:97:34:7F:81:48:8E:1A:43
Authority key identifier: 87:01:86:B6:57:D1:1B:29:8A:84:B0:24:20:EE:74:E1:FB:B5:C2:82
Certificate issuer: /CN=A9191885/serialNumber=870186B657D11B298A84B02420EE74E1FBB5C282
Certificate serial: 01A1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
Manifest number: 0198
Signing time: Fri 17 Apr 2026 04:00:34 +0000
Manifest this update: Fri 17 Apr 2026 04:00:34 +0000
Manifest next update: Fri 24 Apr 2026 04:00:34 +0000
Files and hashes: 1: hwGGtlfRGymKhLAkIO504fu1woI.crl (hash: z6X3vNthN2X22jEPsEgTS5QGG/E5tNU/nsiCdzYJv00=)
2: 8E31656CC9FF11EEA53CA25CC4F9AE02.roa (hash: nklLe8rD44I5yJJy7aHPD+A/b+2jYTeXcDSJkM8vc6I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.crl
rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191885, serialNumber=870186B657D11B298A84B02420EE74E1FBB5C282
Validity
Not Before: Apr 17 04:00:34 2026 GMT
Not After : Apr 24 04:00:34 2026 GMT
Subject: CN=69e1b062-fac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:9a:d6:29:e9:7d:50:eb:db:68:84:a7:5b:
74:cd:50:5b:2c:5b:2a:f2:95:fc:f7:52:45:a2:75:
af:3d:c6:28:74:ab:26:63:4c:f5:1c:05:4d:9e:93:
0e:e0:4a:7d:7c:f1:76:72:fd:bd:87:f6:47:76:0e:
1f:be:7c:a8:7f:a0:41:d9:ae:2b:3b:2c:91:7a:cb:
69:fb:93:cf:e0:e1:35:f7:f6:62:30:88:6f:7c:03:
84:f3:58:e6:b5:b0:61:b2:be:ef:e0:42:19:96:5f:
06:26:31:11:f3:d1:f1:71:67:bd:d4:3a:f8:97:e5:
5c:82:d9:ba:c1:96:66:ce:29:e4:82:91:bb:f8:87:
54:88:12:5c:8a:9d:c8:54:3c:4a:24:50:50:69:21:
04:d0:25:6f:89:07:52:65:7f:4f:3a:18:92:19:0b:
dc:b4:75:ee:e6:03:3f:f0:03:4d:24:6b:5c:93:5b:
a1:29:fa:0b:d3:1a:f7:dc:02:4c:00:33:4c:5c:ab:
aa:58:dc:b1:ed:55:ca:75:d6:f4:91:6b:eb:6d:fa:
16:1b:2f:51:53:0c:7c:fb:d4:40:a4:3d:37:f2:28:
92:66:f9:13:26:21:ab:bb:d5:87:fb:8a:4a:15:0e:
9e:ad:3f:6a:b4:f7:36:56:65:6c:82:78:30:1a:be:
81:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BA:DB:11:B6:FD:84:74:B7:22:A0:DD:97:34:7F:81:48:8E:1A:43
X509v3 Authority Key Identifier:
keyid:87:01:86:B6:57:D1:1B:29:8A:84:B0:24:20:EE:74:E1:FB:B5:C2:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4a:24:c7:f2:ea:59:6a:6c:ce:09:68:40:ee:a1:b8:e5:91:
3e:05:cc:8f:f3:3c:ac:8b:d7:9a:30:28:03:8d:7d:86:ee:03:
73:9c:0e:95:41:df:d1:e4:ed:7c:43:a3:07:59:bc:50:ee:11:
72:82:42:d8:3f:dd:6b:d9:3c:6f:51:9d:ea:8a:db:12:0b:fb:
68:5e:99:6f:c4:8a:cf:e6:f0:cd:2a:dc:57:c6:34:fe:cc:97:
59:59:4b:fe:2c:93:1f:8c:38:41:ec:a3:dc:1a:50:8e:0d:29:
72:76:95:4d:55:33:3d:e7:92:5c:c6:84:92:dd:c9:07:5e:ec:
00:8e:3e:0a:f0:ce:af:8b:36:2e:57:54:58:db:2b:1e:22:93:
c8:ea:db:fc:fc:e1:e7:fa:ca:06:bb:a3:12:24:66:1d:ef:91:
f3:75:b9:de:57:d0:8e:45:37:ef:85:ba:72:13:44:ba:94:ef:
80:cc:3b:83:3c:3a:a5:9d:c0:69:e9:21:e8:4e:32:bd:09:c8:
65:2f:86:c7:5e:a9:d6:83:df:33:da:6e:40:0e:8f:25:8a:79:
63:b0:66:ed:21:cc:de:b3:14:9e:3e:e6:15:b4:8e:da:01:07:
30:1b:40:e2:37:7f:31:86:e2:26:e6:d3:2a:85:3a:ed:74:d4:
5d:5c:c3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:08 2026 by rpki-client