
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
File: HWw-nEchLuSN-fVOZJCpphbUEYk.mft (raw, json)
Hash identifier: 46/Q4Mp9Z+pVe5+5sceUi1TrGF5ajhmlYNOWpQA55vM=
Subject key identifier: 4F:6A:D1:B1:72:0E:B3:2B:44:AC:FA:46:18:C6:54:AE:5A:56:54:F9
Authority key identifier: 1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89
Certificate issuer: /CN=A91B6AEE/serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189
Certificate serial: 02BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
Manifest number: 02B3
Signing time: Thu 23 Jul 2026 02:29:53 +0000
Manifest this update: Thu 23 Jul 2026 02:29:53 +0000
Manifest next update: Thu 30 Jul 2026 02:29:53 +0000
Files and hashes: 1: HWw-nEchLuSN-fVOZJCpphbUEYk.crl (hash: GoBZdsJivpB7UGfsRbf9pmoM+aPisW4WItHDwWvRAj8=)
2: 3B7794D2664A11EDB095B812C4F9AE02.roa (hash: Iimyc3Pw8e+jVyrMv/gbC063P+WqofRd4H1VyiZ+JmI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl
rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 698 (0x2ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6AEE, serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189
Validity
Not Before: Jul 23 02:29:53 2026 GMT
Not After : Jul 30 02:29:53 2026 GMT
Subject: CN=6a617ca1-74e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:25:52:63:15:43:db:74:7a:a9:56:d7:06:
80:2d:f9:c8:73:4c:a0:50:04:10:31:49:62:d8:d5:
d2:e6:e2:00:e8:21:7c:df:94:c4:f3:6a:ce:1f:30:
67:3d:3a:f9:7a:40:17:8f:8e:da:41:00:3b:b9:3d:
9a:b9:8a:f1:bc:0f:2c:01:96:2f:a5:85:ce:50:20:
31:36:73:1f:78:ff:de:1f:c4:67:3b:ac:f3:19:bb:
7f:d0:af:00:f3:56:42:af:55:b6:9c:82:93:89:6f:
7b:ae:d8:87:66:77:20:04:91:20:b5:40:df:28:39:
ee:38:f0:9a:34:c0:5e:28:01:c0:53:bd:bd:cd:05:
9e:c5:f4:6d:78:29:d3:c3:f3:d8:eb:ba:f6:6f:0c:
eb:dc:fe:8f:ef:c2:64:11:8a:40:e9:92:41:0d:e0:
27:c4:3b:3d:39:46:3c:00:88:14:f5:e3:9b:e8:a8:
be:a5:73:38:50:fb:15:81:d6:8d:07:f2:62:1a:45:
8c:c1:9b:06:af:e3:ea:b6:13:34:ba:93:f1:a5:0f:
d3:9b:a0:8b:b5:b7:d7:9c:5c:28:56:c8:ce:76:2c:
07:e4:6d:32:72:ae:76:0b:0b:4c:09:74:9c:02:d6:
03:14:68:eb:a0:12:ac:c7:f3:dd:1d:8e:56:42:ab:
b1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6A:D1:B1:72:0E:B3:2B:44:AC:FA:46:18:C6:54:AE:5A:56:54:F9
X509v3 Authority Key Identifier:
keyid:1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:89:43:ee:74:97:04:a4:f0:67:47:e6:7d:24:7d:64:89:c5:
9f:c9:6d:72:06:f9:5b:7c:a1:80:fd:56:9d:e5:3c:07:08:4a:
4d:a6:01:73:37:6a:43:9c:dc:d9:15:73:0d:97:27:3f:e6:6b:
da:b4:ce:ea:f3:c4:99:f9:aa:b6:4c:8f:67:8f:01:a7:48:ec:
48:7c:29:c3:30:a7:a5:fe:29:a2:92:ac:c8:99:ca:fb:8e:c9:
37:60:a9:0b:d2:de:91:44:98:3d:19:f3:c3:64:5c:a9:46:fb:
df:41:da:06:66:fb:0b:b9:01:44:02:e3:11:51:aa:79:3d:87:
d7:29:d9:b0:46:4b:ed:ed:96:19:97:d8:54:5f:f5:c8:d6:85:
25:90:e4:bd:7b:9e:06:d3:94:e1:72:17:29:1f:f5:4d:e9:c7:
f2:5f:d2:e9:f3:0f:32:02:f4:25:f7:10:63:15:a0:8e:c4:43:
fe:b6:c8:9d:41:d9:ab:28:5c:a0:dd:b7:aa:81:ba:09:a6:0b:
a2:70:00:30:70:6e:f8:5a:7d:fd:e2:39:14:3e:d4:6a:1f:49:
f4:a7:a4:35:34:5c:90:ed:5b:98:7c:39:f5:7d:7c:dd:fd:75:
e3:10:94:31:7c:65:91:d0:c2:6c:e4:d7:79:e2:c6:a0:76:3b:
1d:40:c3:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZBRUUxMTAvBgNVBAUTKDFENkMzRTlDNDcyMTJFRTQ4REY5RjU0RTY0OTBBOUE2
MTZENDExODkwHhcNMjYwNzIzMDIyOTUzWhcNMjYwNzMwMDIyOTUzWjAYMRYwFAYD
VQQDEw02YTYxN2NhMS03NGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwpElUmMVQ9t0eqlW1waALfnIc0ygUAQQMUli2NXS5uIA6CF835TE82rOHzBn
PTr5ekAXj47aQQA7uT2auYrxvA8sAZYvpYXOUCAxNnMfeP/eH8RnO6zzGbt/0K8A
81ZCr1W2nIKTiW97rtiHZncgBJEgtUDfKDnuOPCaNMBeKAHAU729zQWexfRteCnT
w/PY67r2bwzr3P6P78JkEYpA6ZJBDeAnxDs9OUY8AIgU9eOb6Ki+pXM4UPsVgdaN
B/JiGkWMwZsGr+PqthM0upPxpQ/Tm6CLtbfXnFwoVsjOdiwH5G0ycq52CwtMCXSc
AtYDFGjroBKsx/PdHY5WQquxNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE9q0bFy
DrMrRKz6RhjGVK5aVlT5MB8GA1UdIwQYMBaAFB1sPpxHIS7kjfn1TmSQqaYW1BGJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkFFRS80RjMzMjg4MjY2
NDYxMUVEOEQyQzc1MEZDNEY5QUUwMi9IV3ctbkVjaEx1U04tZlZPWkpDcHBoYlVF
WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hXdy1uRWNoTHVTTi1mVk9aSkNwcGhiVUVZay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkFFRS80RjMzMjg4MjY2NDYxMUVEOEQyQzc1MEZDNEY5QUUwMi9IV3ctbkVjaEx1
U04tZlZPWkpDcHBoYlVFWWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlYlD7nSXBKTwZ0fmfSR9ZInFn8ltcgb5W3yhgP1WneU8BwhKTaYBczdqQ5zc
2RVzDZcnP+Zr2rTO6vPEmfmqtkyPZ48Bp0jsSHwpwzCnpf4popKsyJnK+47JN2Cp
C9LekUSYPRnzw2RcqUb730HaBmb7C7kBRALjEVGqeT2H1ynZsEZL7e2WGZfYVF/1
yNaFJZDkvXueBtOU4XIXKR/1TenH8l/S6fMPMgL0JfcQYxWgjsRD/rbInUHZqyhc
oN23qoG6CaYLonAAMHBu+Fp9/eI5FD7Uah9J9KekNTRckO1bmHw59X183f114xCU
MXxlkdDCbOTXeeLGoHY7HUDD8g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:45 2026 by rpki-client