
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
File: hwGGtlfRGymKhLAkIO504fu1woI.mft (raw, json)
Hash identifier: NlR7f82SHAaNQ+lKYN0yqN8hYnWV7WS5Y6dtmd7PEJQ=
Subject key identifier: F0:50:61:F2:2F:D9:B5:F0:BB:91:CB:46:D1:6B:24:6E:4B:55:C1:67
Authority key identifier: 87:01:86:B6:57:D1:1B:29:8A:84:B0:24:20:EE:74:E1:FB:B5:C2:82
Certificate issuer: /CN=A9191885/serialNumber=870186B657D11B298A84B02420EE74E1FBB5C282
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
Manifest number: 01A4
Signing time: Mon 11 May 2026 04:11:51 +0000
Manifest this update: Mon 11 May 2026 04:11:50 +0000
Manifest next update: Mon 18 May 2026 04:11:50 +0000
Files and hashes: 1: hwGGtlfRGymKhLAkIO504fu1woI.crl (hash: qoL7vsTFKy8FN7l1DGR3LBWZP1X2MuHb5b+u91mvW9U=)
2: 8E31656CC9FF11EEA53CA25CC4F9AE02.roa (hash: nklLe8rD44I5yJJy7aHPD+A/b+2jYTeXcDSJkM8vc6I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.crl
rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191885, serialNumber=870186B657D11B298A84B02420EE74E1FBB5C282
Validity
Not Before: May 11 04:11:50 2026 GMT
Not After : May 18 04:11:50 2026 GMT
Subject: CN=6a015707-9c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:5d:be:90:8d:08:36:f8:af:a5:82:ff:9b:
98:1f:37:d4:c2:d3:e4:a3:f9:b2:6a:d3:55:77:b7:
9e:75:82:88:fd:14:e2:f5:b8:0f:41:00:c9:ee:24:
b0:35:e0:ed:be:b5:b5:ae:65:a1:b9:63:de:8a:d5:
b5:9e:f6:30:3a:27:5c:cb:8c:a2:86:a0:97:9b:e1:
d1:46:73:68:c7:d0:f3:fc:27:db:eb:ce:a8:bc:4e:
9e:a8:86:86:40:24:17:b9:b8:7a:c1:21:0a:52:5c:
e8:32:fd:a3:9b:92:5d:8a:07:aa:fc:e3:41:94:52:
0d:76:02:87:48:73:c9:03:12:e0:76:11:25:5a:e6:
ea:a8:4d:8f:a2:e6:5a:f3:54:9e:80:44:c5:58:45:
6b:c5:a8:a1:52:2a:06:06:29:6b:10:a3:5c:ac:f3:
1b:73:aa:86:a6:9c:08:fd:02:ae:ae:4c:25:f0:66:
2d:ce:ed:47:73:e4:43:d8:ab:bb:b4:0b:6c:a3:b3:
15:dc:0d:36:e3:f2:a2:57:ac:e2:65:a6:ab:82:1e:
f5:1f:ac:55:eb:3f:35:21:6e:57:c9:df:4e:51:29:
d4:dc:44:0c:0f:8d:e7:74:ea:a2:3c:52:3d:f4:09:
83:a6:b8:a6:78:b8:41:12:c2:d6:4c:75:eb:39:5f:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:50:61:F2:2F:D9:B5:F0:BB:91:CB:46:D1:6B:24:6E:4B:55:C1:67
X509v3 Authority Key Identifier:
keyid:87:01:86:B6:57:D1:1B:29:8A:84:B0:24:20:EE:74:E1:FB:B5:C2:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:81:c2:3e:e6:19:d4:00:3c:cb:85:56:c5:13:84:bb:0c:9c:
6d:b9:91:cd:20:dd:c9:17:d7:6f:56:3f:90:a0:3a:36:e5:ca:
a1:2b:f1:53:94:2f:77:d8:4c:6e:fe:12:62:11:10:ee:6d:6e:
16:4d:f9:8d:54:a4:bf:c5:6e:65:6b:23:0f:b1:c0:dc:55:03:
99:24:53:2c:e1:ea:a6:71:c0:42:70:c3:31:93:55:29:a8:7b:
96:76:b2:a2:dd:3e:9e:28:9b:63:47:12:d2:0a:3d:2d:e9:f7:
a2:45:dd:93:f8:e3:6e:33:0b:59:2e:d0:4c:55:26:14:41:01:
5d:1e:bb:d4:a1:c0:dd:ea:ad:42:c5:c6:85:44:99:ee:e9:48:
5d:61:77:92:b0:5f:57:da:1b:61:4c:18:0d:78:90:c2:98:aa:
ae:e9:63:38:2f:04:1e:09:47:70:44:c3:d0:a7:f1:43:e3:33:
bc:6c:da:e9:23:ea:7a:f5:b8:a4:84:c0:64:d3:fe:4e:3b:d2:
bf:89:59:c4:01:20:51:3e:24:43:a5:b2:0d:ea:14:ef:39:55:
e7:d0:ec:e1:92:74:da:88:08:4a:a2:d5:be:c8:55:5f:1e:8d:
de:09:d2:46:dd:70:0c:15:a1:28:92:b2:02:1f:c5:38:ff:d7:
86:cf:73:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTE4ODUxMTAvBgNVBAUTKDg3MDE4NkI2NTdEMTFCMjk4QTg0QjAyNDIwRUU3NEUx
RkJCNUMyODIwHhcNMjYwNTExMDQxMTUwWhcNMjYwNTE4MDQxMTUwWjAYMRYwFAYD
VQQDEw02YTAxNTcwNy05YzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw8JdvpCNCDb4r6WC/5uYHzfUwtPko/myatNVd7eedYKI/RTi9bgPQQDJ7iSw
NeDtvrW1rmWhuWPeitW1nvYwOidcy4yihqCXm+HRRnNox9Dz/Cfb686ovE6eqIaG
QCQXubh6wSEKUlzoMv2jm5Jdigeq/ONBlFINdgKHSHPJAxLgdhElWubqqE2PouZa
81SegETFWEVrxaihUioGBilrEKNcrPMbc6qGppwI/QKurkwl8GYtzu1Hc+RD2Ku7
tAtso7MV3A024/KiV6ziZaargh71H6xV6z81IW5Xyd9OUSnU3EQMD43ndOqiPFI9
9AmDprimeLhBEsLWTHXrOV++/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPBQYfIv
2bXwu5HLRtFrJG5LVcFnMB8GA1UdIwQYMBaAFIcBhrZX0RspioSwJCDudOH7tcKC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTg4NS9ENUZFQTNERUM5
RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9od0dHdGxmUkd5bUtoTEFrSU81MDRmdTF3
b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2h3R0d0bGZSR3ltS2hMQWtJTzUwNGZ1MXdvSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTg4NS9ENUZFQTNERUM5RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9od0dHdGxmUkd5
bUtoTEFrSU81MDRmdTF3b0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwIHCPuYZ1AA8y4VWxROEuwycbbmRzSDdyRfXb1Y/kKA6NuXKoSvxU5Qvd9hM
bv4SYhEQ7m1uFk35jVSkv8VuZWsjD7HA3FUDmSRTLOHqpnHAQnDDMZNVKah7lnay
ot0+niibY0cS0go9Len3okXdk/jjbjMLWS7QTFUmFEEBXR671KHA3eqtQsXGhUSZ
7ulIXWF3krBfV9obYUwYDXiQwpiqruljOC8EHglHcETD0KfxQ+MzvGza6SPqevW4
pITAZNP+TjvSv4lZxAEgUT4kQ6WyDeoU7zlV59Ds4ZJ02ogISqLVvshVXx6N3gnS
Rt1wDBWhKJKyAh/FOP/Xhs9zTA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:33:52 2026 by rpki-client