
$ rpki-client -vvf rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.mft
File: Hwqez8yog84ajHjPFa9I2e-VQWo.mft (raw, json)
Hash identifier: vjGRz7lk8IKbG7MUtbWe5NbcP7t4H6cLYs4vlbwzAqw=
Subject key identifier: E3:F9:00:6A:9E:1A:0D:E4:A1:61:51:72:6F:4E:F5:DB:BF:FE:AD:D7
Authority key identifier: 1F:0A:9E:CF:CC:A8:83:CE:1A:8C:78:CF:15:AF:48:D9:EF:95:41:6A
Certificate issuer: /CN=A917286F/serialNumber=1F0A9ECFCCA883CE1A8C78CF15AF48D9EF95416A
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Hwqez8yog84ajHjPFa9I2e-VQWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.mft
Manifest number: 22
Signing time: Thu 23 Jul 2026 10:56:14 +0000
Manifest this update: Thu 23 Jul 2026 10:56:13 +0000
Manifest next update: Thu 30 Jul 2026 10:56:13 +0000
Files and hashes: 1: Hwqez8yog84ajHjPFa9I2e-VQWo.crl (hash: +oNOY9T43szbvP4pO67GyjvPnoMlVNF56grReFT6btg=)
2: 427F4E6653C011F1A527BD9DBA833773.roa (hash: eG5S+GARzWRbVnPna51fSv5pLFPdQ2BwMOqn8Rq4jV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.crl
rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Hwqez8yog84ajHjPFa9I2e-VQWo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:56:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917286F, serialNumber=1F0A9ECFCCA883CE1A8C78CF15AF48D9EF95416A
Validity
Not Before: Jul 23 10:56:13 2026 GMT
Not After : Jul 30 10:56:13 2026 GMT
Subject: CN=6a61f34e-adef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:06:0f:9f:0e:71:18:fd:da:78:41:a0:1c:
93:4b:71:bc:84:4c:15:39:c1:15:1f:97:b5:75:2b:
55:86:54:e6:d6:76:af:64:ea:99:7a:c9:5d:9b:fa:
72:82:4e:3e:ba:ca:83:fe:28:3c:0f:31:88:e8:c9:
df:75:28:91:96:67:70:15:87:5e:f3:e5:b0:7f:df:
5b:2e:c4:67:ce:12:4c:8e:f0:90:b6:0e:d3:d1:e2:
97:f3:86:61:03:26:44:cb:1f:4b:24:f4:34:e8:59:
4e:2d:98:36:d0:79:a1:02:d7:91:ec:cc:0b:28:46:
94:6d:38:4e:c9:f0:63:1f:44:15:0e:75:5a:2f:ac:
94:3c:c8:c3:90:81:29:84:2a:64:31:b9:52:c9:3f:
46:cc:48:58:76:24:e3:1c:32:d6:50:62:1f:e4:b8:
0b:3b:f4:6a:b2:99:31:b9:21:7d:b8:37:2a:fc:e7:
a7:3d:4a:05:e2:e7:05:b9:4a:a0:8f:83:28:4a:6b:
ef:72:7d:31:15:27:f7:2e:e1:c2:c4:61:ac:01:dd:
6a:4b:f4:47:c2:3a:bd:ba:ba:c7:c0:7b:2b:5b:ea:
c9:46:4d:97:fa:9d:42:1b:1b:ae:fd:5c:e3:d8:ab:
c0:28:03:d3:06:a4:0d:18:0c:bc:58:66:06:9e:59:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F9:00:6A:9E:1A:0D:E4:A1:61:51:72:6F:4E:F5:DB:BF:FE:AD:D7
X509v3 Authority Key Identifier:
keyid:1F:0A:9E:CF:CC:A8:83:CE:1A:8C:78:CF:15:AF:48:D9:EF:95:41:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Hwqez8yog84ajHjPFa9I2e-VQWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:fe:c2:0b:01:3f:d5:75:e1:b1:d1:11:77:e0:bc:5a:ec:06:
66:8b:e8:07:47:be:cb:8d:59:3f:e3:d5:53:4f:9b:5d:27:39:
a0:61:b8:85:e5:4c:e9:2f:32:60:f9:4b:f6:81:38:de:3c:04:
5d:ce:bc:81:f7:bf:68:a0:da:15:4e:7c:fe:5f:65:68:50:41:
7c:1a:e1:b5:d5:80:38:de:fe:01:39:62:a6:0f:ae:01:c1:6a:
d1:c7:1d:1d:83:63:ec:21:4d:b7:b2:96:7e:d7:0b:73:bc:09:
3f:1d:4a:90:39:ff:94:fe:d3:88:79:65:dd:b2:24:dd:63:f2:
38:35:55:d7:1c:5a:12:1e:16:07:89:43:a2:bc:12:f8:5a:d3:
94:70:3d:fe:73:11:bc:32:db:bd:7a:96:92:be:14:13:6a:ff:
a1:73:8e:2f:d0:44:df:30:e4:4b:8b:5e:50:24:48:ac:0c:3e:
a8:d2:20:f6:18:ca:cf:31:93:95:fb:01:a7:35:6b:b8:30:60:
f0:f7:b4:4a:82:cf:c0:9a:97:e7:9b:82:78:32:3a:66:36:36:
fc:fd:e5:be:76:90:67:70:0a:a5:a8:78:de:b8:5a:e1:ad:80:
d6:72:31:1a:da:b4:3f:c8:f2:f1:9c:5e:1f:1a:c6:41:11:b1:
fc:be:4f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:51 2026 by rpki-client