
$ rpki-client -vvf rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
File: HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft (raw, json)
Hash identifier: fDSoqCpZ7zux3YnmjHg5l/IuCdw82HkOPtvZ0RvMaFo=
Subject key identifier: 14:DC:79:EF:00:23:77:14:91:BA:A5:6D:5B:43:88:D7:20:F2:A6:9B
Authority key identifier: 1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A
Certificate issuer: /CN=A91707D0/serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
Manifest number: C4
Signing time: Wed 25 Mar 2026 06:08:28 +0000
Manifest this update: Wed 25 Mar 2026 06:08:28 +0000
Manifest next update: Wed 01 Apr 2026 06:08:28 +0000
Files and hashes: 1: HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl (hash: KGluqUGbo2i7FAj5Pkg7lr/jwA1XhsPXY1WIzymhrFM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl
rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91707D0, serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A
Validity
Not Before: Mar 25 06:08:28 2026 GMT
Not After : Apr 1 06:08:28 2026 GMT
Subject: CN=69c37bdc-4d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:e2:7c:81:68:80:e2:a8:3e:20:f1:08:3e:
c5:c2:7a:65:de:37:e6:e7:f5:67:84:f4:70:48:86:
29:3a:04:89:9a:20:3d:67:75:8c:79:7f:dd:72:f6:
05:00:ee:8a:2e:69:15:74:eb:3b:04:de:3a:80:8d:
be:4c:33:d5:34:35:fe:53:a5:c6:1c:4d:cc:bc:cd:
a9:bc:c0:db:ff:e9:47:3d:cb:3c:06:b3:d8:fc:f2:
34:31:01:97:6e:f0:4c:60:2e:d4:95:f3:8b:b9:a6:
e4:86:d7:2c:f5:4e:c5:f0:6d:d7:cf:81:8a:3f:1a:
1f:ca:4e:4d:9c:67:a4:a0:60:10:cf:3f:c4:ca:ad:
76:73:0c:a6:53:21:a2:e4:3d:c1:60:0a:65:65:2e:
d7:c0:78:1a:03:69:7c:4d:47:79:2d:c5:27:64:cd:
ee:63:e1:3f:ca:82:83:e1:07:fb:1d:50:a2:d2:f1:
88:cb:29:53:67:be:af:6f:49:71:71:bc:2a:31:f6:
de:6e:cc:7d:42:24:9b:45:38:ca:e2:fc:c5:3a:1a:
23:a4:f5:47:33:ad:1c:da:c8:e5:09:f8:70:58:81:
43:fa:8a:32:0c:a7:e8:d0:41:77:bf:db:1b:6a:aa:
c0:e4:ae:df:56:63:b6:0a:ea:07:c0:e6:27:a5:fd:
da:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DC:79:EF:00:23:77:14:91:BA:A5:6D:5B:43:88:D7:20:F2:A6:9B
X509v3 Authority Key Identifier:
keyid:1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:55:10:1a:44:fd:42:73:ef:e7:1b:ea:e3:6b:65:60:c3:8e:
30:2d:32:84:92:08:c9:4c:ee:6f:1f:74:e1:29:2a:3f:b8:81:
81:4d:ec:83:df:dd:66:b9:3b:22:12:62:29:bb:12:4b:04:10:
0f:8c:5d:b2:3e:59:63:fe:c1:02:aa:fb:33:9d:1d:c8:8f:04:
4a:8a:fe:29:7a:0c:1a:1f:73:b4:cf:dc:12:94:b1:4f:b0:9b:
fe:d3:0f:b9:bc:46:da:e4:47:34:d8:1c:ea:f4:c7:bd:a3:ad:
f1:f4:a3:e9:3a:01:68:fa:43:c7:1e:6c:a1:30:15:04:2b:6a:
61:7f:8b:12:7d:ce:ac:55:94:b0:a5:f6:15:3b:46:8d:58:65:
1f:8d:df:2d:ca:4c:a7:20:65:df:d0:98:6f:c4:59:4e:f7:71:
8b:a7:a2:eb:94:31:25:c1:3f:63:47:88:c4:7e:d6:3c:43:52:
9d:da:54:0b:c8:85:d1:d6:76:bc:58:ba:94:91:01:2b:dd:c9:
ec:dc:b0:ba:ce:91:55:fd:7b:5c:0e:31:a3:b8:25:7b:0b:a7:
7e:e2:2f:00:9c:d8:74:fa:c0:69:11:ca:fe:f9:a9:9d:4e:43:
5e:d0:fc:27:e6:35:be:a9:c7:74:3f:4e:fd:cd:d9:b4:70:20:
a8:08:3d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:17:22 2026 by rpki-client