
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
File: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json)
Hash identifier: 5I+B9FXOTAqszWclM8CfnhQrJpxc8J/dLvbcXjzP+jI=
Subject key identifier: 27:7A:4E:48:B8:AC:CF:5E:91:1B:DF:BF:9E:BA:13:B9:11:CA:EF:14
Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Certificate serial: 3631
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
Manifest number: 35DC
Signing time: Sun 04 Oct 2026 14:39:33 +0000
Manifest this update: Sun 04 Oct 2026 14:39:33 +0000
Manifest next update: Sun 11 Oct 2026 14:39:33 +0000
Files and hashes: 1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: 7pce1Vcxs9bekybUJbJZdSj67m9f+HtFo92ZBePzUSU=)
2: 2B622E1282F511EF9090F681C4F9AE02.roa (hash: JS+c9sL3L+WCOEhTvnP+XpOyBuJ/6R/u9Qm2AM/cHpk=)
3: C2DFDA20DE0611EF9DC6A135C4F9AE02.roa (hash: vKe+s1AjVTC2tWxyer0iCi6sE34mb63o5/xf7YiZBp8=)
4: B403FEF04F7A11F1B793142BCC833773.roa (hash: IKEvB9HOIvcPiPrVCDKQordv8ZQb5XOZI7Vg1pWDv1I=)
5: 7BC92742ADA611F18F55423F6E11F970.roa (hash: ai7pgQHXoz7YgQfjtoOzeruV6ucLwGuomU9kU9c7KlM=)
6: 0FCDEA68113B11F09E3A4157C4F9AE02.roa (hash: t4/ezhxy8Yfpe9cG1UobV4ijgY6RGmsFly/MX9OY10A=)
7: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: 4K+Xr5cEWGU3CtoxwVoZf3ocwZzyt3Pe/yTV1VWV7A0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl
rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 14:39:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13873 (0x3631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Validity
Not Before: Oct 4 14:39:33 2026 GMT
Not After : Oct 11 14:39:33 2026 GMT
Subject: CN=6ac26525-a8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:45:3b:93:f3:99:c9:0e:2d:d5:43:b8:d9:
88:da:d3:92:a2:e6:68:42:e6:1b:3a:01:94:67:96:
38:ff:af:e1:3f:5e:05:ce:f8:99:4a:c1:cf:c8:cb:
a1:a8:72:a6:7c:0a:57:76:47:58:96:0e:af:42:e6:
4c:33:37:2d:af:0a:52:83:c2:f3:ba:94:51:fd:16:
af:37:54:2b:c4:cd:5f:7d:9a:67:1c:0e:03:70:4d:
f3:3a:d4:89:27:b5:fd:ce:db:2a:ba:62:f6:91:71:
d1:f0:c9:20:37:e1:27:ba:79:d1:43:4b:8f:b9:6e:
50:6a:f3:1b:e7:8f:69:b5:21:9e:a6:ce:8d:0a:00:
9d:7d:e2:f0:34:cb:58:6e:7c:13:69:d0:21:f4:58:
5f:a9:64:f0:3d:79:dd:35:32:16:eb:c3:de:fe:2a:
da:2d:2d:f0:c3:20:8b:d8:97:d0:41:85:ee:0a:67:
38:ae:37:ed:47:f4:81:6e:0f:43:7d:00:e7:e1:ec:
8a:54:8e:e8:7d:52:d2:d6:94:32:85:95:e8:4b:43:
ca:46:2d:46:c3:d4:5c:ac:34:b0:4f:38:21:51:af:
bd:ec:25:9e:1c:d8:19:2c:f8:bd:f0:1c:83:9f:b9:
cf:11:a4:38:cc:7c:9c:78:99:7e:fd:09:d0:bf:20:
98:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7A:4E:48:B8:AC:CF:5E:91:1B:DF:BF:9E:BA:13:B9:11:CA:EF:14
X509v3 Authority Key Identifier:
keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:cc:ab:ca:5c:a7:02:20:d4:49:ac:bd:9f:ae:bb:dc:eb:4f:
6d:06:d4:c2:94:22:45:89:8b:69:2f:6c:af:0d:eb:c7:54:e8:
5d:7b:35:52:c5:69:bf:c0:26:63:33:a5:a5:df:9c:66:59:c2:
17:32:c6:f9:4f:52:1f:92:5b:f4:ed:df:e7:5a:40:e1:2c:d6:
5a:40:1b:d1:a4:51:6a:b5:4c:7c:de:3f:a9:d0:fa:9a:c4:f0:
c0:47:6f:d3:29:70:7f:98:7a:d7:42:74:03:b7:2d:f1:66:19:
3a:94:8b:9c:41:49:a1:22:99:96:f2:c6:1e:11:11:02:74:ee:
02:db:eb:8a:d7:ef:b4:d6:92:e0:3f:fc:f3:60:a7:92:89:50:
a1:81:01:ce:1e:2c:b8:0f:14:94:4e:5c:38:21:59:77:61:5e:
c5:2a:61:63:96:b9:e0:9e:34:f5:f2:bc:20:3d:f6:15:68:fc:
43:76:59:f8:56:a2:e5:a7:a9:e9:ca:5e:b7:a9:c9:d2:c9:f7:
fc:66:d7:41:68:ec:b3:18:2e:79:5c:2c:93:03:6a:03:e8:a6:
95:e3:17:f8:d4:66:4e:da:92:47:91:71:5c:eb:0a:e0:d7:4e:
f1:2f:b3:47:80:3f:65:c2:f6:62:25:49:0b:d1:2d:47:1c:de:
31:71:ec:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:45:46 2026 by rpki-client