
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
File: hwrlmks42vxqMavjKcz4eP33Kow.mft (raw, json)
Hash identifier: hQZ4tqAvEvhI+fK9AYVs3bX86bS6C7w9yCMf3m1J6xk=
Subject key identifier: A4:46:89:5F:4A:6D:EF:89:E0:AE:B6:63:3E:2A:D2:24:6B:7E:91:02
Authority key identifier: 87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C
Certificate issuer: /CN=A9110795/serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
Certificate serial: 17ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
Manifest number: 17CE
Signing time: Tue 12 May 2026 16:34:25 +0000
Manifest this update: Tue 12 May 2026 16:34:24 +0000
Manifest next update: Tue 19 May 2026 16:34:24 +0000
Files and hashes: 1: hwrlmks42vxqMavjKcz4eP33Kow.crl (hash: yrr7cJu9yJzQWoTKNGy389B5VvIokmt3DsatqGGaqLc=)
2: E734D3DE6E7F11ECB1C0E439C4F9AE02.roa (hash: AFiKhGrkmVBF+Lxuf7SnPeEL4/ohAC6TsxVBzmwIG0M=)
3: F439D662AAAE11E8B3984735C4F9AE02.roa (hash: trynK1wLeS7SLenEVjxu6KuwoiTckqP52hJXG4iHXr0=)
4: 5F94C5B814A311EDA489B80DC4F9AE02.roa (hash: cKQ+GalQu9XNt/5RvNMkJ98r6wqBmv6X34kALjzsemM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl
rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:34:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6125 (0x17ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110795, serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
Validity
Not Before: May 12 16:34:24 2026 GMT
Not After : May 19 16:34:24 2026 GMT
Subject: CN=6a035691-982f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:58:ef:ac:85:9c:a5:06:23:e7:2d:83:9f:3c:
41:64:3a:07:2d:8f:b7:1f:aa:c3:f0:ad:35:c7:30:
a8:24:3b:0c:12:46:62:21:2f:ce:e2:ad:53:3d:36:
79:bc:02:17:7e:2b:c1:de:76:35:b1:65:92:cb:c3:
82:0e:39:83:c2:95:9f:d1:0a:cd:d6:6c:fb:13:07:
c8:b2:2a:90:2e:65:9a:66:e8:b9:8e:88:23:3c:2a:
c0:bf:81:8c:2f:4e:07:39:c1:50:72:bf:2b:fd:b5:
ce:6a:df:31:be:96:76:24:04:85:1d:f3:27:c3:da:
3d:6b:fa:82:ae:da:26:da:14:34:0b:2b:15:60:3e:
e8:1d:39:80:72:cd:9e:82:13:0e:24:7a:94:d4:c0:
a6:09:db:d0:26:f7:a4:b6:91:2d:73:b2:24:c3:4f:
19:90:7e:f3:a6:b3:3a:7d:62:07:11:a4:ba:09:f6:
dc:77:b9:cb:c3:18:01:ad:4d:91:b0:ba:bb:65:43:
c0:92:f9:08:e1:95:fd:85:fd:53:bc:3f:5a:9a:7c:
41:fd:11:07:bd:f4:65:57:c3:bb:48:54:4c:f5:c8:
35:57:92:92:0a:6b:fb:61:84:2d:73:db:6f:80:62:
b5:80:dd:3d:1a:91:de:6e:e7:e6:b2:e0:24:02:3e:
aa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:46:89:5F:4A:6D:EF:89:E0:AE:B6:63:3E:2A:D2:24:6B:7E:91:02
X509v3 Authority Key Identifier:
keyid:87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:3e:e9:57:dc:f5:24:cb:7d:9f:bb:0e:4c:f6:38:20:81:84:
df:ff:42:f6:ad:18:55:b8:df:8c:eb:45:53:b2:1e:7e:ba:66:
c0:18:27:7a:47:9c:dc:8d:f4:59:a0:53:3c:d2:60:ba:b2:19:
13:51:a3:ff:c0:30:23:b5:1a:9b:b3:27:78:9b:b2:7b:64:17:
51:b5:75:56:ed:b8:1e:81:98:e5:e6:17:1b:0a:40:57:52:ee:
37:31:6c:43:00:a4:41:b4:00:2b:37:d9:b1:83:0d:75:f8:04:
2e:2b:7a:d8:d8:08:07:1f:ec:f2:85:69:94:23:80:53:36:c4:
ac:d5:fe:44:c0:db:ec:32:ca:73:a7:4c:11:56:37:ef:cb:d6:
70:87:ca:0f:e6:a9:56:b4:da:9d:c0:e7:3c:40:d0:8a:08:dd:
cc:a6:eb:06:39:f3:83:d8:33:48:68:83:72:cc:db:c4:bf:8b:
fc:77:a2:cc:fc:8c:f0:ab:9a:24:67:da:6c:40:58:70:a1:49:
9f:78:e8:10:ca:b4:96:1b:80:89:be:b8:12:a5:a0:00:59:05:
44:55:a0:78:67:67:ca:75:c3:b1:fc:4e:df:60:b2:af:3a:41:
92:a6:40:9e:08:9f:33:7f:74:de:cc:a2:f3:f6:15:93:bf:46:
25:da:7b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:22:45 2026 by rpki-client