
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
File: hwrlmks42vxqMavjKcz4eP33Kow.mft (raw, json)
Hash identifier: Usf03r71iHUlCUIoLoZnnmep5/rtwGS2FegVRfrnp5w=
Subject key identifier: B6:F9:37:60:AD:24:E0:D7:C8:28:01:5C:8E:F0:E7:FB:06:5F:C8:2F
Authority key identifier: 87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C
Certificate issuer: /CN=A9110795/serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
Certificate serial: 17D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
Manifest number: 17B5
Signing time: Tue 24 Mar 2026 16:28:52 +0000
Manifest this update: Tue 24 Mar 2026 16:28:51 +0000
Manifest next update: Tue 31 Mar 2026 16:28:51 +0000
Files and hashes: 1: hwrlmks42vxqMavjKcz4eP33Kow.crl (hash: Ye531FwMD5RMJc1SW/FBeLmAF4VlD/Euh8p3DOdInRA=)
2: E734D3DE6E7F11ECB1C0E439C4F9AE02.roa (hash: AFiKhGrkmVBF+Lxuf7SnPeEL4/ohAC6TsxVBzmwIG0M=)
3: 5F94C5B814A311EDA489B80DC4F9AE02.roa (hash: cKQ+GalQu9XNt/5RvNMkJ98r6wqBmv6X34kALjzsemM=)
4: F439D662AAAE11E8B3984735C4F9AE02.roa (hash: trynK1wLeS7SLenEVjxu6KuwoiTckqP52hJXG4iHXr0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl
rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6100 (0x17d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110795, serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
Validity
Not Before: Mar 24 16:28:51 2026 GMT
Not After : Mar 31 16:28:51 2026 GMT
Subject: CN=69c2bbc3-7d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:2b:f8:10:3b:f1:31:8c:25:29:25:1d:c6:
c4:8e:c7:51:d4:bc:38:37:5e:fa:f5:67:f7:8b:c5:
46:0c:7c:bc:a2:a5:c7:ca:8a:62:87:19:f9:fa:db:
fa:5f:01:29:0d:85:ec:ad:44:05:b3:e7:4f:59:0d:
44:0f:f6:2e:5d:49:fe:b4:57:bd:ac:3d:60:49:d3:
f8:2b:d4:b6:58:c9:dc:5e:06:c2:63:6d:93:8b:41:
a7:38:e6:89:e9:fc:db:61:70:87:8a:c4:07:1b:14:
fc:c9:3c:ba:d1:fe:cc:2c:73:19:e9:c9:3f:b7:f7:
21:53:27:84:7c:26:5c:93:16:c5:3c:c1:09:bf:60:
3a:65:99:2d:25:64:3e:1f:68:22:80:8b:12:74:a7:
6d:38:e5:7a:34:7d:75:23:c6:f0:de:85:2f:18:44:
f7:cc:25:20:16:97:b6:26:91:15:ee:ca:c7:c2:9b:
77:fe:35:0e:d0:d0:f4:02:2a:1c:2f:4d:94:54:88:
f6:9d:ef:2c:d5:c9:2d:10:40:69:2d:ba:94:47:81:
e7:9b:66:99:fe:fe:20:08:19:6b:f4:5f:39:5c:0a:
a2:ce:19:06:05:d4:ca:13:a5:e1:bf:d0:6e:9e:dc:
a1:44:23:a9:73:dc:ac:68:a9:16:18:14:0f:99:38:
f6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F9:37:60:AD:24:E0:D7:C8:28:01:5C:8E:F0:E7:FB:06:5F:C8:2F
X509v3 Authority Key Identifier:
keyid:87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:34:42:0c:0d:ab:4d:b1:a0:33:b6:4e:af:d2:13:e8:b4:40:
17:00:a8:17:e1:44:5c:55:4d:79:74:b1:d1:e0:4e:0d:68:2d:
a2:e8:2a:e9:52:e6:73:a1:35:76:34:2b:0e:51:75:9f:b5:23:
74:d0:5c:e4:ed:2a:cf:60:92:e1:6b:d6:d3:17:ba:5f:e4:50:
bc:85:67:08:9e:de:a5:dc:79:e5:b3:62:c7:f7:02:28:85:21:
24:69:b9:85:ea:ab:7e:90:0d:fd:b7:30:b9:ab:52:85:25:2d:
48:2b:c5:16:61:9b:b3:d2:74:46:03:53:06:0b:eb:f0:3f:b7:
3b:51:7d:88:f3:a8:6f:91:e7:c9:c2:cc:86:72:55:6e:7c:35:
bc:94:c2:0b:5c:25:b6:7a:0c:55:37:d6:0a:72:a0:60:07:9b:
31:79:73:33:ad:24:19:44:5c:97:ad:bd:fd:56:5b:e7:91:77:
16:0e:a3:82:2a:43:0d:9e:ba:e3:41:84:d4:f6:66:6c:7f:d4:
a5:37:dc:86:ce:4b:df:8f:d2:0b:42:c8:c2:e2:23:d6:bc:f3:
29:88:1a:8f:d2:39:63:5c:e6:4b:2e:62:37:55:00:97:2b:b3:
66:34:1a:81:df:ed:2c:85:a1:2f:1f:51:b5:82:28:9d:a4:80:
18:a8:6e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:41:39 2026 by rpki-client