
$ rpki-client -vvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
File: 1WeS1ZfpzdAr_BbQtJLaParggPw.mft (raw, json)
Hash identifier: gXE74sD3N6lis8Xd1MkVIcKiRY75INIdKuo7C3nMfS0=
Subject key identifier: F1:03:6D:4E:80:9E:70:C4:21:FE:66:B2:01:88:6B:C8:12:A9:52:95
Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC
Certificate issuer: /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
Certificate serial: 1FFC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
Manifest number: 1FD0
Signing time: Thu 16 Jul 2026 16:01:59 +0000
Manifest this update: Thu 16 Jul 2026 16:01:58 +0000
Manifest next update: Thu 23 Jul 2026 16:01:58 +0000
Files and hashes: 1: 1WeS1ZfpzdAr_BbQtJLaParggPw.crl (hash: bqg+/kkSmwxhG7/+J8rkRKlo1xjlZrP/gbs3CIEQZqI=)
2: 500DFDA8578611EA8CC3B124C4F9AE02.roa (hash: 5LNSq5pdKybofu1UpxkFVG9Ohf/hU7Yt5u2ontP0MD0=)
3: 317CF2A634E811EFA8BEA738C4F9AE02.roa (hash: +mfxCLFmT0kAngWE0QR8njelgu56dCQ+gYLAva7jY7M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl
rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 16:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8188 (0x1ffc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91731EA, serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
Validity
Not Before: Jul 16 16:01:58 2026 GMT
Not After : Jul 23 16:01:58 2026 GMT
Subject: CN=6a590076-398c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:77:d3:78:16:4d:18:f7:18:66:9f:24:ec:e9:
f0:cf:80:ff:94:2b:63:42:83:f8:8f:2e:3e:84:0c:
07:64:28:6e:b8:4d:fa:35:4c:63:48:21:01:5d:e7:
e3:bd:af:b1:88:b8:19:6d:b7:34:70:c3:7e:34:a3:
90:39:15:75:da:0e:5b:8d:1e:34:8e:57:f1:af:a0:
72:c8:0c:60:92:e9:a4:71:e1:5a:dc:c1:ba:0f:b0:
95:79:c3:b8:25:8a:64:1d:96:06:f6:8d:27:7d:e0:
f4:08:57:e7:53:bb:8a:fa:3c:f5:c8:7a:f6:a5:b2:
3a:f4:e4:01:99:6b:be:11:b7:a4:df:28:67:5d:36:
82:13:6d:31:fd:db:32:53:c4:40:de:eb:f3:94:87:
a3:d5:94:04:6a:d7:68:b9:c3:56:02:bb:65:9b:f3:
e6:7b:08:8f:9d:6b:e8:5e:4d:ef:1b:9a:c7:6a:82:
f7:a3:a1:d0:77:63:26:8a:2c:99:cc:e7:76:4b:7e:
79:25:78:ea:d5:27:5c:97:b0:ef:a7:81:19:b9:5c:
98:e4:36:e2:0f:1d:19:06:df:e8:3e:43:e9:7c:24:
72:e1:78:88:ff:05:df:8b:a8:4c:15:99:e9:bb:e7:
97:fb:42:98:7b:a1:cb:e0:1e:1b:50:eb:1f:e6:4d:
ab:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:03:6D:4E:80:9E:70:C4:21:FE:66:B2:01:88:6B:C8:12:A9:52:95
X509v3 Authority Key Identifier:
keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:95:a3:84:ef:49:90:b2:a4:3b:1f:5a:ec:56:b9:68:b4:2c:
55:2b:57:96:7f:99:dd:bf:32:69:e4:13:16:e1:6b:d0:15:a7:
a6:a5:e9:53:2e:58:4e:48:a4:39:59:15:f9:4d:a0:3c:ea:fb:
dc:bd:6b:07:28:50:76:59:f4:0e:26:76:6b:98:6e:06:dd:84:
f6:08:a2:2d:67:ef:93:89:36:0d:6f:23:ed:ca:c7:ab:b3:08:
c8:ee:fd:a9:57:7a:d7:4e:5d:69:9d:ff:53:c3:23:e2:3c:20:
2e:d1:fc:5f:21:d6:6a:c3:0f:0a:e4:81:eb:df:86:72:2e:8a:
76:55:f3:64:54:66:d7:2b:66:bb:a7:20:91:c1:1a:70:e1:9c:
12:0b:0f:1a:d6:3d:60:6a:ff:70:25:96:48:88:34:95:6e:0e:
14:52:d9:51:b6:81:4a:ad:ae:24:22:a5:a9:ee:d1:c7:09:f4:
60:3b:1c:52:9f:85:08:0c:2e:13:99:da:f7:2d:30:56:4c:1f:
93:c5:1c:8a:6e:d7:09:55:2e:95:36:27:1a:eb:97:8a:f2:e4:
7b:c2:57:69:0a:88:ee:ab:92:65:ae:52:f4:5d:b2:bc:d4:a7:
32:e7:ee:56:cc:48:7c:e6:85:96:8e:cb:bb:db:36:b7:b1:10:
fb:b9:32:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:26:43 2026 by rpki-client