
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
File: HWw-nEchLuSN-fVOZJCpphbUEYk.mft (raw, json)
Hash identifier: 6iMY7jPLBOhSgXbEgbPE7rYaIvQiRULRGBOuGRcwvXU=
Subject key identifier: C2:F6:CC:71:C2:4D:5A:CD:D2:D3:6F:2E:5A:8A:F3:5B:74:DE:E8:F0
Authority key identifier: 1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89
Certificate issuer: /CN=A91B6AEE/serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189
Certificate serial: 027E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
Manifest number: 0277
Signing time: Wed 25 Mar 2026 01:22:21 +0000
Manifest this update: Wed 25 Mar 2026 01:22:20 +0000
Manifest next update: Wed 01 Apr 2026 01:22:20 +0000
Files and hashes: 1: HWw-nEchLuSN-fVOZJCpphbUEYk.crl (hash: erc67sq/xPeYMHYkJRPKYjF2M5c6QwZG2w2VJ4XhFZs=)
2: 3B7794D2664A11EDB095B812C4F9AE02.roa (hash: Iimyc3Pw8e+jVyrMv/gbC063P+WqofRd4H1VyiZ+JmI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl
rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 638 (0x27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6AEE, serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189
Validity
Not Before: Mar 25 01:22:20 2026 GMT
Not After : Apr 1 01:22:20 2026 GMT
Subject: CN=69c338cc-6420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:a5:41:e4:64:1d:5d:0d:71:bf:31:2d:68:
4c:96:10:62:67:f8:d2:d2:53:f5:87:43:58:3d:73:
cb:d8:5f:1c:56:83:80:9c:f0:06:3a:2b:65:cc:eb:
25:06:ac:06:97:dc:e9:9c:d5:7d:33:e3:0e:05:1d:
6e:1e:48:49:1e:3c:25:2f:b7:d9:ee:17:b8:4e:9f:
95:25:bb:7c:d8:22:4c:75:7f:c7:b2:ec:d9:8f:7c:
57:67:5a:0f:44:63:d9:49:8b:f2:cd:50:6d:0c:6f:
e7:4b:b5:e5:30:7c:d5:d5:6e:82:8c:77:1b:fb:2c:
6e:b5:14:71:df:19:e5:1e:5f:3e:7f:05:2b:4a:44:
c2:62:45:b4:86:3b:d3:60:3c:08:0d:96:75:7d:00:
69:be:97:00:f3:aa:5f:12:c5:b7:28:2c:b0:ff:b4:
3b:c9:25:43:f0:fa:0b:fe:29:9f:e1:38:4e:7b:d1:
c6:3a:9b:ec:91:1d:04:1b:04:cf:e3:10:98:f3:fc:
4e:94:f2:a0:3b:10:cf:a0:0a:21:65:4d:ba:bf:39:
c2:f9:2b:35:cd:b9:79:b8:7d:83:8f:8a:46:21:f0:
c9:75:af:40:4c:9b:73:cd:59:18:c3:82:51:5b:33:
e0:dd:56:05:1d:86:ab:ae:1d:dc:c7:29:02:bc:5f:
7e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F6:CC:71:C2:4D:5A:CD:D2:D3:6F:2E:5A:8A:F3:5B:74:DE:E8:F0
X509v3 Authority Key Identifier:
keyid:1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:f3:e7:6f:aa:dd:5d:fe:42:aa:0f:fd:58:1f:c5:a2:8c:17:
7d:b0:cc:38:9b:aa:18:c4:b0:e8:4d:15:e5:62:19:0a:a7:48:
5f:05:a9:bd:f9:3b:7a:b7:68:1b:39:a7:eb:94:e9:93:79:6b:
8e:a6:07:16:20:2e:34:de:8d:12:f2:12:b1:dd:61:28:34:02:
d5:ab:88:03:88:63:b1:87:c1:89:c9:d8:bf:62:35:0d:99:09:
30:78:c7:6e:e5:fd:dd:f2:88:c9:f0:ca:6f:f7:ba:5a:0d:25:
73:4c:08:cb:c8:84:b0:29:0a:d4:bc:86:79:fe:6d:81:a1:f5:
56:e7:26:cb:3b:58:28:07:6a:f5:26:c8:51:55:73:d6:d6:4a:
20:3f:79:00:fa:d5:0d:54:0e:a4:0e:a9:35:a1:8f:3d:8c:6c:
f9:f6:44:6b:7d:4c:9b:f9:d4:7b:46:c6:76:81:a2:56:98:a8:
31:96:95:d3:7d:74:fb:4b:b1:fe:b5:82:9e:c4:17:56:a7:ca:
ab:18:9d:09:c5:d2:c6:82:14:c8:dc:b1:af:6f:23:ce:09:5c:
05:ac:30:b5:43:bb:d2:4a:4b:66:46:e5:6b:90:d4:d2:82:7d:
c9:a7:55:ca:29:4d:1e:84:71:db:27:f4:35:56:f8:1f:94:5e:
20:53:a2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:54:02 2026 by rpki-client