
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
File: HWw-nEchLuSN-fVOZJCpphbUEYk.mft (raw, json)
Hash identifier: weFb0GYyUqCLW/PNz2RQlJaAvRVd9YK+fLqJwHkkZSU=
Subject key identifier: C3:46:58:42:B3:5A:6C:D9:44:41:90:7D:18:37:ED:92:B1:98:6B:B0
Authority key identifier: 1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89
Certificate issuer: /CN=A91B6AEE/serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189
Certificate serial: 028A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
Manifest number: 0283
Signing time: Fri 17 Apr 2026 01:37:00 +0000
Manifest this update: Fri 17 Apr 2026 01:36:59 +0000
Manifest next update: Fri 24 Apr 2026 01:36:59 +0000
Files and hashes: 1: HWw-nEchLuSN-fVOZJCpphbUEYk.crl (hash: DiyFmI1zu5O9oYpqLPAOlnuq8w3OYMCKc4x9eOEIrNs=)
2: 3B7794D2664A11EDB095B812C4F9AE02.roa (hash: Iimyc3Pw8e+jVyrMv/gbC063P+WqofRd4H1VyiZ+JmI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl
rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 650 (0x28a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6AEE, serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189
Validity
Not Before: Apr 17 01:36:59 2026 GMT
Not After : Apr 24 01:36:59 2026 GMT
Subject: CN=69e18ebc-44bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:d6:58:dd:53:0c:77:ec:c5:4f:6f:07:62:
6f:74:a2:32:7f:dd:98:11:5a:25:33:45:8b:ed:19:
ef:01:c6:2c:66:be:1b:09:ad:65:a1:2b:3b:60:7b:
b3:fd:f8:e3:ea:22:fc:30:65:0d:f0:9c:9f:61:1f:
4b:f3:0d:61:9d:06:ac:ef:58:68:0f:73:7a:40:76:
01:76:85:9e:fd:11:17:cd:03:25:3d:db:92:a8:64:
e2:9b:da:b2:b8:31:8d:18:ce:8a:a5:0e:06:1e:41:
42:73:a9:30:58:c8:32:cf:ab:d0:d4:61:53:92:e7:
9a:2d:07:e2:28:47:19:63:4a:8d:5c:59:5d:72:c5:
77:9b:d7:e9:54:b5:e4:f9:8f:a3:a7:4e:c1:d3:33:
ac:99:fb:b9:fe:af:31:c1:40:17:7c:50:16:3b:f3:
8b:96:dc:36:80:9a:00:5a:31:dd:01:e1:b6:6b:a7:
a4:02:59:45:31:0c:21:16:f5:6e:94:60:b5:ec:c0:
cf:5f:74:6a:2a:86:57:47:7b:f3:cd:e7:d2:97:75:
45:e8:c0:f7:ef:b7:7d:0e:99:ab:a8:0c:4c:e1:26:
0b:41:45:cf:05:0f:dd:a3:95:3f:f0:9d:6d:fa:25:
4b:bf:06:19:18:4a:d3:e4:02:a2:27:6a:43:b0:d4:
56:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:46:58:42:B3:5A:6C:D9:44:41:90:7D:18:37:ED:92:B1:98:6B:B0
X509v3 Authority Key Identifier:
keyid:1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:aa:b7:3f:36:ab:00:f4:52:e7:ac:bb:f1:02:d2:64:d4:79:
5a:22:e5:07:f9:00:96:4d:82:ce:7b:59:4a:51:72:e3:6a:ee:
1f:3f:6b:2d:24:b6:c2:ab:3e:69:35:4b:0d:69:34:9f:4a:b5:
50:d8:ea:cc:d0:90:54:72:ff:a9:62:b5:5e:91:41:68:93:cf:
68:5e:cf:ec:35:f9:ee:6c:06:ec:53:71:b4:ce:e5:6d:0b:45:
67:99:c2:3b:9d:22:03:86:15:5f:ac:07:3e:4d:ea:93:cc:5c:
fd:2e:8e:53:42:be:9e:58:4e:bb:a0:e9:80:b4:45:b3:6b:eb:
84:19:07:dd:38:5e:53:f4:16:20:3e:4a:0a:64:39:4e:65:68:
40:a1:fa:79:da:8b:27:b5:b8:ff:82:94:57:c6:44:24:7d:d5:
88:1a:46:78:3c:97:84:58:72:82:c8:28:19:1e:5d:25:e4:0c:
f4:6e:df:2a:d8:50:35:96:ab:3e:89:94:4c:52:df:a1:e9:38:
57:b3:05:82:a6:83:5a:8c:5c:fe:46:b5:10:a3:48:74:7b:50:
e2:9e:4d:b0:ae:2b:ed:ca:d6:03:41:e3:f2:f0:56:89:15:9c:
d4:c1:19:a5:09:5e:71:00:19:f6:18:d7:8a:b0:b8:23:94:70:
76:c1:74:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:31:30 2026 by rpki-client