
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
File: HWGssMZyy01A7T6U08CbIMdFJa4.mft (raw, json)
Hash identifier: chxzP519XMcNzsMljcCLHvG1kNlrvUWic90pry+zLSY=
Subject key identifier: 95:50:A7:96:5E:60:59:36:2A:6A:99:55:23:04:7E:86:E8:0E:2D:5C
Authority key identifier: 1D:61:AC:B0:C6:72:CB:4D:40:ED:3E:94:D3:C0:9B:20:C7:45:25:AE
Certificate issuer: /CN=A9176BDB/serialNumber=1D61ACB0C672CB4D40ED3E94D3C09B20C74525AE
Certificate serial: 03B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
Manifest number: 03A8
Signing time: Wed 25 Mar 2026 00:24:06 +0000
Manifest this update: Wed 25 Mar 2026 00:24:06 +0000
Manifest next update: Wed 01 Apr 2026 00:24:06 +0000
Files and hashes: 1: HWGssMZyy01A7T6U08CbIMdFJa4.crl (hash: ckoVE9pMRwYf8WHNTpomSj1l7xpAhbXVhwdLwJeh16I=)
2: CBA514345AD611F0B344B779C4F9AE02.roa (hash: qaqb32QMVSNEZ3f7TtmSpmBYJSl1ZcNm9kGHql238LQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.crl
rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949 (0x3b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176BDB, serialNumber=1D61ACB0C672CB4D40ED3E94D3C09B20C74525AE
Validity
Not Before: Mar 25 00:24:06 2026 GMT
Not After : Apr 1 00:24:06 2026 GMT
Subject: CN=69c32b26-5b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:fe:3e:6a:07:d9:11:87:74:0d:6f:f5:ae:
1e:06:9d:0d:25:51:bf:8d:c0:4a:c4:26:2e:b6:32:
7c:4f:e3:19:de:e8:14:df:03:c3:8c:81:de:d0:82:
ac:05:9d:ee:2c:ec:b4:ef:1a:72:8a:66:e6:75:19:
7e:71:19:2b:68:61:f6:4c:14:95:8f:05:4b:e6:5b:
00:ff:9c:37:18:c9:57:35:59:78:35:70:0d:84:74:
cc:d6:1f:c7:8a:44:4d:59:e2:1e:cc:df:11:80:28:
4b:ad:20:7e:e2:a0:34:03:8d:5e:ea:c2:79:1d:10:
88:78:33:62:ae:99:07:a1:31:6a:05:5f:22:7e:c8:
72:d3:5b:ad:e1:90:dd:84:32:c4:a0:5b:95:b6:8a:
63:3e:97:cb:ec:74:6c:83:f7:56:a0:fd:70:37:2d:
e8:6e:13:e5:11:4a:dc:ba:4c:3f:9b:1c:7c:8e:18:
2a:54:ee:a9:28:2c:3e:bf:77:50:b7:ce:f1:3c:bd:
45:61:8a:70:df:f0:99:e4:20:ef:2f:c4:e6:6e:fc:
f3:dd:64:71:01:9d:ec:86:fe:65:2e:b7:12:1e:7a:
bd:fe:d1:e4:5e:59:80:b4:53:dc:99:42:89:b3:d7:
ca:24:fc:0d:2c:90:fb:18:19:86:1d:aa:c1:9c:3f:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:50:A7:96:5E:60:59:36:2A:6A:99:55:23:04:7E:86:E8:0E:2D:5C
X509v3 Authority Key Identifier:
keyid:1D:61:AC:B0:C6:72:CB:4D:40:ED:3E:94:D3:C0:9B:20:C7:45:25:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:a0:16:2d:9d:d0:9b:0b:bb:83:64:fe:24:73:58:d5:89:7e:
bf:dc:71:81:ac:58:f1:ec:ae:99:4d:e0:b7:a9:0a:af:24:e9:
97:6b:8e:58:a9:3d:4b:a6:11:d7:c8:7c:2b:e7:e6:f1:14:b9:
72:3a:ee:17:f3:6d:4d:83:b6:58:1f:0e:df:09:19:e1:27:2f:
4e:ea:5e:5a:2b:28:74:d7:66:42:f7:37:18:d3:31:5e:cd:a0:
80:d0:d9:95:17:9c:0c:10:87:ef:b5:4c:7a:6f:32:f5:c6:1a:
d4:e8:a3:04:a3:5d:c5:b9:7b:61:c5:07:1c:56:88:1c:75:43:
55:ab:6d:5b:7f:30:98:f3:64:5e:37:ae:ec:14:7d:93:09:b9:
7a:47:7c:10:15:03:e3:07:43:4b:44:f7:8c:57:5e:7c:d4:3a:
bf:97:09:dd:24:3e:75:5e:06:e8:d4:9d:82:33:1f:d1:0b:52:
84:9a:bc:1d:b5:5a:cf:32:0a:e7:40:7f:7e:c9:72:46:f2:25:
28:82:b3:d7:29:7c:cf:49:5d:a0:07:68:ee:76:41:c0:b0:22:
c5:36:dd:76:e9:aa:a8:c4:21:23:43:a7:42:3e:cd:96:82:65:
63:dd:92:7f:86:33:04:76:9b:bf:82:af:e8:89:e7:04:c1:5e:
9b:98:df:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:37 2026 by rpki-client