
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
File: 1WeS1ZfpzdAr_BbQtJLaParggPw.mft (raw, json)
Hash identifier: XtPGWnCdlx1zW4DD57TT6SmMnPD5UdJ20NJBMUrMGTs=
Subject key identifier: 79:4F:B4:E8:8E:13:D4:CA:B9:C8:A2:75:B3:FE:96:E7:01:9B:2B:FF
Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC
Certificate issuer: /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
Certificate serial: 2037
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
Manifest number: 2007
Signing time: Sat 24 Oct 2026 15:56:57 +0000
Manifest this update: Sat 24 Oct 2026 15:56:56 +0000
Manifest next update: Sat 31 Oct 2026 15:56:56 +0000
Files and hashes: 1: 1WeS1ZfpzdAr_BbQtJLaParggPw.crl (hash: JoxhSzzfwSmyNDgylk5zmB9UiFa1oJ4JFDFzcalSXDQ=)
2: 500DFDA8578611EA8CC3B124C4F9AE02.roa (hash: zSpovKpU002aRj0qY0zdZXg1dWaqo+y8NB7/DtI+3e8=)
3: WZWvvFy7Z0qolLRV3uN605sl_PU.asa (hash: 7qt/VQR0S3yFw8dH5d+8OVxwduYoPfIdx4d+vJsM0SQ=)
4: 317CF2A634E811EFA8BEA738C4F9AE02.roa (hash: eMc+uVzb1BxMClQI5wUnSI6PJ9bDKFNnj/I/GYdK2hk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl
rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 15:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8247 (0x2037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91731EA, serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
Validity
Not Before: Oct 24 15:56:56 2026 GMT
Not After : Oct 31 15:56:56 2026 GMT
Subject: CN=6adcd549-93ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:01:57:cc:0e:c8:56:44:d2:6c:1d:63:de:b7:
84:f1:15:45:49:4a:8f:8f:b6:ce:7b:63:45:89:d2:
3a:03:63:01:6d:71:d4:68:13:93:66:c5:53:0d:7f:
a5:14:a8:ea:9c:01:c2:d9:70:4d:01:5c:54:86:a6:
83:17:67:4b:85:27:71:b0:9c:82:a0:d1:33:f3:f2:
c6:02:b6:08:10:0f:f4:25:c4:8b:8b:e5:c5:e7:d0:
9c:73:e3:76:b8:1b:a9:b4:10:64:0a:81:cb:89:fe:
27:00:4a:08:bc:2a:e8:35:3a:29:b0:3a:6e:fd:a6:
55:f1:c9:a6:68:82:4b:4c:07:42:d2:bf:23:48:38:
76:87:fa:7f:a6:68:f2:d8:07:0e:a6:a6:5c:68:18:
ab:5f:ab:7a:e0:91:93:68:73:c3:b4:5d:50:69:a6:
f2:36:fe:bd:d3:aa:96:b7:09:e5:b3:0c:29:ec:84:
b2:62:1e:3d:9a:e5:0a:bf:eb:42:9a:36:d8:67:7d:
b5:70:07:95:09:68:2c:c1:4e:07:c9:25:60:ae:6e:
26:c1:1e:74:2b:fa:cb:76:c3:6a:ee:aa:f9:22:b3:
52:97:89:d3:3a:1f:a2:c5:32:f9:6f:79:43:f3:12:
c4:6a:26:0b:da:9c:81:91:4c:98:74:86:90:09:a4:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4F:B4:E8:8E:13:D4:CA:B9:C8:A2:75:B3:FE:96:E7:01:9B:2B:FF
X509v3 Authority Key Identifier:
keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:dd:9e:27:6d:39:95:22:6a:ce:8c:d8:65:0e:ef:9d:3f:fa:
93:5d:3e:fb:08:c3:7f:3e:e0:dc:4b:3a:5a:30:a7:10:af:f9:
52:eb:69:32:94:df:97:02:39:0b:3a:5a:b2:fa:29:9c:b6:d1:
ae:c0:f3:84:73:7b:9b:73:f8:f9:5d:27:0e:80:fc:5c:12:89:
c8:d8:fa:b8:90:94:6b:57:c9:6a:26:7c:44:dd:1e:25:a5:66:
73:9d:f5:fd:47:d6:07:18:d2:18:f7:e0:f4:ef:b5:b6:3e:b8:
69:46:14:c4:7c:80:6c:61:56:e0:74:8c:9f:e9:a8:25:8c:ca:
9b:1f:42:dd:ed:dc:8d:91:53:f0:ad:ed:aa:bc:6b:53:f7:8e:
31:09:26:97:cb:57:35:eb:2c:dc:c1:7d:18:02:d9:43:99:ea:
16:b5:03:92:ae:69:52:9e:79:7b:b7:8e:56:4a:76:2b:53:95:
8e:28:bb:85:a3:c2:2b:61:51:a0:d7:6d:30:2d:7f:28:69:13:
e4:21:bb:83:f1:a7:39:3a:47:01:6e:7a:c2:47:2a:9e:31:06:
3a:ad:16:83:e1:0b:7a:34:04:f9:c3:cb:59:64:64:04:de:bc:
f3:9a:f6:9c:62:e6:e8:a4:c0:f4:b0:78:8a:05:2b:7f:aa:82:
d2:5d:a7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:18:50 2026 by rpki-client