
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
File: hwGGtlfRGymKhLAkIO504fu1woI.mft (raw, json)
Hash identifier: qgsE118dXUmbh2o/msEjky59sgFS2M3UsNeAzuD/M3s=
Subject key identifier: BA:3A:1A:77:14:5A:50:83:E2:C5:34:66:E3:DD:1F:5A:E4:13:1D:47
Authority key identifier: 87:01:86:B6:57:D1:1B:29:8A:84:B0:24:20:EE:74:E1:FB:B5:C2:82
Certificate issuer: /CN=A9191885/serialNumber=870186B657D11B298A84B02420EE74E1FBB5C282
Certificate serial: 01F2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
Manifest number: 01E9
Signing time: Fri 25 Sep 2026 03:28:10 +0000
Manifest this update: Fri 25 Sep 2026 03:28:10 +0000
Manifest next update: Fri 02 Oct 2026 03:28:10 +0000
Files and hashes: 1: hwGGtlfRGymKhLAkIO504fu1woI.crl (hash: e9E+p3xVbXAI0lyjOkc5CdouJ7rX1rhiZ1mOoyg5z0k=)
2: 8E31656CC9FF11EEA53CA25CC4F9AE02.roa (hash: nklLe8rD44I5yJJy7aHPD+A/b+2jYTeXcDSJkM8vc6I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.crl
rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191885, serialNumber=870186B657D11B298A84B02420EE74E1FBB5C282
Validity
Not Before: Sep 25 03:28:10 2026 GMT
Not After : Oct 2 03:28:10 2026 GMT
Subject: CN=6ab5ea4a-5b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fb:88:bc:53:cb:80:8b:e0:78:1a:37:0f:a0:
a8:08:c8:8a:b4:96:30:62:a8:68:f4:48:65:6d:70:
58:67:e9:76:23:dc:13:93:f3:ec:6a:eb:b2:5d:85:
cb:71:ec:ba:40:ae:88:8b:11:e8:ca:8b:db:bb:d6:
bf:ac:cb:bd:8c:ce:bb:63:ff:aa:51:e6:90:91:72:
18:8d:b5:c6:4e:31:ad:d9:41:01:6b:b4:2d:93:b4:
95:7c:ca:57:3c:5c:58:ae:04:0c:da:f9:e7:8e:93:
b1:3e:83:79:6f:e7:3b:ff:95:7b:cc:83:cb:ca:99:
86:88:3d:4e:72:cc:b0:d6:89:8a:d0:7a:44:f1:95:
c9:bc:3a:d5:02:a2:be:7d:e9:c9:d9:6a:76:3b:e8:
86:cb:fb:53:7f:7d:56:d9:ce:6e:27:66:f0:d9:68:
d5:88:60:86:5e:81:24:5a:d2:9e:3e:e9:fb:d3:d7:
05:1b:fd:42:37:86:b8:93:e4:da:2a:02:ab:81:7a:
ed:b2:8c:f2:14:ee:4a:41:51:dc:40:ab:37:87:b9:
10:fd:f9:a9:4b:b7:39:d0:be:ce:39:85:46:53:d5:
9c:35:20:b3:de:27:52:a8:98:b0:83:b8:2c:4f:9a:
c8:b1:93:6f:32:87:75:00:c4:be:2f:ea:85:6a:68:
a5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3A:1A:77:14:5A:50:83:E2:C5:34:66:E3:DD:1F:5A:E4:13:1D:47
X509v3 Authority Key Identifier:
keyid:87:01:86:B6:57:D1:1B:29:8A:84:B0:24:20:EE:74:E1:FB:B5:C2:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:04:21:11:4c:7d:9a:44:b9:21:2c:53:fc:be:db:5c:54:e8:
2a:59:7c:db:ec:2e:a0:cb:13:1e:ca:67:5a:da:82:7f:6b:7d:
07:ab:7d:09:d3:60:19:95:01:2e:92:d6:d8:62:ba:06:a5:d1:
ad:02:89:5d:0d:07:c9:99:83:9f:4b:b2:ab:50:7d:ee:05:09:
01:fe:9e:13:4b:eb:ab:ec:5f:45:99:52:02:91:bd:10:ec:85:
32:f6:f2:7c:a1:9a:07:30:a2:71:75:5a:e6:4b:2c:34:99:19:
30:9c:b3:6d:e7:c2:d4:d1:42:14:d6:45:32:e7:d6:57:a2:0c:
3f:6c:ba:43:cc:e6:c7:a8:e0:2a:2a:f4:67:76:74:2d:c8:01:
97:4a:75:5b:33:a4:47:c0:02:c0:ef:ce:de:48:50:a3:2b:26:
3c:29:3e:e5:4e:ca:28:45:c8:8e:0d:3e:84:b1:f4:ba:97:0d:
4f:e1:e5:b2:ac:00:8b:59:26:c9:7b:f5:9d:e7:0d:0c:12:7d:
33:66:6a:f4:19:ce:99:e0:2f:1c:9b:d7:5d:df:50:f4:2c:b8:
a7:a7:da:ac:f7:e2:ee:dd:aa:d9:24:01:30:c9:d9:0d:ea:66:
3e:e3:ce:82:c2:5d:19:85:56:1d:a3:bc:90:01:d9:c7:38:3c:
3c:68:f2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:25:23 2026 by rpki-client