
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
File: HWw-nEchLuSN-fVOZJCpphbUEYk.mft (raw, json)
Hash identifier: gElB2QSTjDOmqdT/Wu5NpIfmZYfpy5DdNrrcboNCT0Y=
Subject key identifier: 50:77:84:6B:ED:2F:A7:C2:1E:87:43:C6:C2:E6:28:80:23:4D:64:92
Authority key identifier: 1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89
Certificate issuer: /CN=A91B6AEE/serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189
Certificate serial: 0272
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
Manifest number: 026B
Signing time: Sun 01 Mar 2026 23:36:08 +0000
Manifest this update: Sun 01 Mar 2026 23:36:06 +0000
Manifest next update: Sun 08 Mar 2026 23:36:06 +0000
Files and hashes: 1: HWw-nEchLuSN-fVOZJCpphbUEYk.crl (hash: sjNAD6Yi4b/+c+J/1wistnAtBwe5UmvGgJLCXb4CsfQ=)
2: 3B7794D2664A11EDB095B812C4F9AE02.roa (hash: Iimyc3Pw8e+jVyrMv/gbC063P+WqofRd4H1VyiZ+JmI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl
rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 626 (0x272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6AEE, serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189
Validity
Not Before: Mar 1 23:36:06 2026 GMT
Not After : Mar 8 23:36:06 2026 GMT
Subject: CN=69a4cd68-b4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:a4:b1:2f:7a:64:21:93:a7:2c:b1:a3:78:
d0:8e:60:4c:46:7f:26:27:4e:2c:a3:40:b9:b3:81:
ff:c8:a2:eb:79:da:03:c1:19:db:17:89:cd:94:fd:
74:e4:8d:1d:fa:ae:8f:e1:fe:75:c2:9d:be:af:66:
30:5b:cd:8a:61:6e:be:81:f5:ed:27:09:f0:cd:88:
d0:a1:db:64:0e:2e:13:7e:66:a5:5e:d6:78:7a:30:
fd:05:8b:4c:97:e6:20:78:e4:34:44:f8:4c:cd:6c:
fe:e0:bf:8b:6f:5a:8f:7f:9e:96:3b:37:94:bf:37:
c0:8e:d6:42:6a:9d:2d:90:5b:74:68:77:10:02:d9:
eb:23:8f:33:a7:f8:25:2a:0a:a5:f8:d4:82:49:ad:
d9:cd:63:ff:ce:b1:8d:7c:40:a4:b3:19:25:8a:46:
90:89:9d:ba:cd:18:b9:71:59:4a:1f:e4:24:85:22:
04:44:d1:11:5c:20:26:93:92:12:08:a6:37:6d:3c:
3b:04:d9:61:2b:51:79:45:f1:47:3b:14:b3:66:8d:
b6:9b:dd:61:dc:da:5c:82:1f:00:9c:81:01:2a:6e:
41:29:1a:ae:d7:fb:91:d1:ac:56:b0:4a:c2:73:06:
69:9a:9e:84:fe:4d:37:a2:59:0b:0f:59:db:30:9e:
75:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:77:84:6B:ED:2F:A7:C2:1E:87:43:C6:C2:E6:28:80:23:4D:64:92
X509v3 Authority Key Identifier:
keyid:1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a9:80:a7:72:26:2f:ef:c7:7a:2e:0d:c7:60:1c:1c:db:48:
de:c2:65:f1:ce:22:80:8e:47:1d:3c:88:8f:4a:fe:b2:d3:20:
e6:f9:60:6b:4f:c0:60:52:14:ee:d6:75:6b:41:8f:d9:87:cc:
0f:2d:07:2f:b3:87:f1:d7:8b:8c:2a:1c:c3:2d:9b:1a:97:59:
58:91:b4:ff:40:78:d2:9b:d4:33:06:a4:b2:3d:41:9e:83:5a:
a1:59:08:3d:fb:56:ce:ad:d0:ff:4d:d1:ba:88:3b:1c:74:97:
a9:85:3c:3b:60:4c:1a:f6:be:fb:fb:54:d4:5c:97:59:ce:a0:
bb:25:28:67:f8:d7:a8:c8:0d:dd:0d:61:99:f3:8a:61:41:38:
8e:6d:a7:cf:07:23:a5:05:07:74:86:e3:d5:33:07:87:8e:fc:
49:af:3d:d3:38:0b:f1:58:54:38:fd:46:e3:df:73:d1:e4:73:
6a:6f:c5:9d:df:f5:d5:47:ec:d7:4c:20:d4:3f:94:fa:99:01:
8c:b8:25:6d:ab:82:72:6e:9d:f9:90:29:42:62:0d:a7:43:69:
03:6f:0e:d8:96:a7:de:72:71:4d:7d:f9:3a:71:c1:f7:d3:69:
aa:14:ac:79:87:49:0a:16:56:47:2d:ca:b9:8e:6e:11:b7:a8:
0c:fb:03:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZBRUUxMTAvBgNVBAUTKDFENkMzRTlDNDcyMTJFRTQ4REY5RjU0RTY0OTBBOUE2
MTZENDExODkwHhcNMjYwMzAxMjMzNjA2WhcNMjYwMzA4MjMzNjA2WjAYMRYwFAYD
VQQDEw02OWE0Y2Q2OC1iNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArW+ksS96ZCGTpyyxo3jQjmBMRn8mJ04so0C5s4H/yKLredoDwRnbF4nNlP10
5I0d+q6P4f51wp2+r2YwW82KYW6+gfXtJwnwzYjQodtkDi4TfmalXtZ4ejD9BYtM
l+YgeOQ0RPhMzWz+4L+Lb1qPf56WOzeUvzfAjtZCap0tkFt0aHcQAtnrI48zp/gl
Kgql+NSCSa3ZzWP/zrGNfECksxklikaQiZ26zRi5cVlKH+QkhSIERNERXCAmk5IS
CKY3bTw7BNlhK1F5RfFHOxSzZo22m91h3Npcgh8AnIEBKm5BKRqu1/uR0axWsErC
cwZpmp6E/k03olkLD1nbMJ51YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFB3hGvt
L6fCHodDxsLmKIAjTWSSMB8GA1UdIwQYMBaAFB1sPpxHIS7kjfn1TmSQqaYW1BGJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkFFRS80RjMzMjg4MjY2
NDYxMUVEOEQyQzc1MEZDNEY5QUUwMi9IV3ctbkVjaEx1U04tZlZPWkpDcHBoYlVF
WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hXdy1uRWNoTHVTTi1mVk9aSkNwcGhiVUVZay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkFFRS80RjMzMjg4MjY2NDYxMUVEOEQyQzc1MEZDNEY5QUUwMi9IV3ctbkVjaEx1
U04tZlZPWkpDcHBoYlVFWWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS6mAp3ImL+/Hei4Nx2AcHNtI3sJl8c4igI5HHTyIj0r+stMg5vlga0/AYFIU
7tZ1a0GP2YfMDy0HL7OH8deLjCocwy2bGpdZWJG0/0B40pvUMwaksj1BnoNaoVkI
PftWzq3Q/03Ruog7HHSXqYU8O2BMGva++/tU1FyXWc6guyUoZ/jXqMgN3Q1hmfOK
YUE4jm2nzwcjpQUHdIbj1TMHh478Sa890zgL8VhUOP1G499z0eRzam/Fnd/11Ufs
10wg1D+U+pkBjLglbauCcm6d+ZApQmINp0NpA28O2Jan3nJxTX35OnHB99NpqhSs
eYdJChZWRy3KuY5uEbeoDPsDyA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:45:02 2026 by rpki-client