
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
File: HWGssMZyy01A7T6U08CbIMdFJa4.mft (raw, json)
Hash identifier: AlSZWXjwSXooWx6xOSG2+ELpQKUCnqCLaDww+B0XL3I=
Subject key identifier: 87:B1:8D:B4:39:14:77:47:18:90:18:53:9F:C8:44:A2:DD:40:E4:96
Authority key identifier: 1D:61:AC:B0:C6:72:CB:4D:40:ED:3E:94:D3:C0:9B:20:C7:45:25:AE
Certificate issuer: /CN=A9176BDB/serialNumber=1D61ACB0C672CB4D40ED3E94D3C09B20C74525AE
Certificate serial: 0419
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
Manifest number: 040B
Signing time: Wed 23 Sep 2026 00:02:29 +0000
Manifest this update: Wed 23 Sep 2026 00:02:29 +0000
Manifest next update: Wed 30 Sep 2026 00:02:29 +0000
Files and hashes: 1: HWGssMZyy01A7T6U08CbIMdFJa4.crl (hash: aEhayeyFP17UNVM95NyO8nNrqOrtC1fHRXxrts36O8Y=)
2: 72AFB32C559211F1B22C82B592833773.roa (hash: TMbP6L3Em89acCRjO434FFkbgmcYoUU8SeaJFFKDkHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.crl
rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1049 (0x419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176BDB, serialNumber=1D61ACB0C672CB4D40ED3E94D3C09B20C74525AE
Validity
Not Before: Sep 23 00:02:29 2026 GMT
Not After : Sep 30 00:02:29 2026 GMT
Subject: CN=6ab31715-14a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:b0:75:52:ea:80:df:3b:22:97:8b:f8:e2:
5c:02:1d:31:45:80:51:95:7a:14:cc:4e:e6:81:20:
1a:41:fd:87:92:4b:84:84:bc:7e:0d:fb:54:b4:90:
a9:21:df:21:f9:d5:67:03:b5:86:b5:d9:ce:85:8e:
5f:05:b1:55:49:66:6e:ae:79:31:5f:a8:68:3f:10:
ae:6e:75:53:3a:32:a4:ac:3e:1a:89:48:47:8b:c9:
2b:c9:22:d1:ff:98:9e:d5:25:71:1b:38:ba:30:0e:
77:62:ab:bf:40:6a:e6:71:93:18:a9:1a:e0:c9:ed:
b0:e9:b9:ae:41:72:3e:6c:ea:0c:be:34:b3:8d:ae:
2b:ac:53:6f:e6:2b:bd:34:53:3f:7d:66:aa:fe:c5:
d7:37:7d:f8:be:15:37:da:ce:25:07:19:ee:b7:19:
a8:e7:e8:46:54:f1:67:f9:35:e2:80:fe:64:f3:70:
66:cc:cc:d9:90:b2:17:74:8c:72:81:4a:57:f4:77:
ba:97:75:67:34:d0:58:9f:f9:ea:b1:2e:a7:28:87:
03:5e:ed:4b:aa:53:40:2f:75:b2:66:fc:85:1d:93:
b1:9f:84:e1:b2:8b:ee:fc:97:e7:69:f6:e0:22:dc:
42:c7:64:d0:dc:a0:85:29:da:ec:9a:87:29:1d:82:
fb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B1:8D:B4:39:14:77:47:18:90:18:53:9F:C8:44:A2:DD:40:E4:96
X509v3 Authority Key Identifier:
keyid:1D:61:AC:B0:C6:72:CB:4D:40:ED:3E:94:D3:C0:9B:20:C7:45:25:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HWGssMZyy01A7T6U08CbIMdFJa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176BDB/657E0F34D64B11ECAB20E36BC4F9AE02/HWGssMZyy01A7T6U08CbIMdFJa4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:1e:05:69:58:72:23:2d:99:8e:dd:a1:5a:d6:a3:c1:56:40:
ad:7a:df:6e:38:1d:93:f2:c3:40:2a:40:01:d0:b6:9f:bb:5f:
ea:d7:6d:f7:6d:52:7a:53:22:17:c7:98:2e:1e:0a:c8:c6:a9:
fc:d4:07:fc:8d:f0:18:11:dc:3c:15:36:4c:2b:42:b0:b0:b5:
de:3c:f6:5b:d9:d1:5c:8c:78:dc:57:bd:1c:55:81:7b:c7:e5:
3b:94:3e:e7:fc:c3:01:fe:be:25:8a:b6:98:11:60:72:28:98:
1a:a9:f7:47:07:63:a3:35:c5:9e:9c:60:91:3f:03:f8:0d:29:
4a:da:61:b9:75:34:c5:c5:9e:82:94:8c:1e:24:c8:d8:82:aa:
6a:4b:f3:87:93:a2:4d:e6:e8:e2:ce:5e:76:05:fb:80:22:2c:
0c:7c:91:59:b0:3d:82:96:10:3d:90:3f:e3:f8:38:58:80:28:
be:1d:00:68:99:e4:c2:e2:51:0c:d9:1e:a9:63:17:fa:5b:34:
64:92:6e:7f:3f:e6:88:28:9c:f8:29:a2:15:03:f5:a5:a1:7a:
ab:52:b0:57:b0:29:0c:4d:87:de:5f:86:bb:c1:06:0f:5e:69:
c1:89:36:05:80:23:00:0c:58:43:38:41:8f:4c:d6:7c:ec:9c:
08:dc:60:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:14:08 2026 by rpki-client