
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
File: 1Sj61Lh2q_twrziSIg8pPheRtrw.mft (raw, json)
Hash identifier: Rcuq2M20mMmy863YTzlO1+xF2BYTDlH9XdW+7wJR160=
Subject key identifier: E9:29:71:D6:37:24:3E:72:4D:07:70:75:E5:AA:74:0E:FC:9D:56:40
Authority key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
Certificate issuer: /CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Certificate serial: 042A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
Manifest number: 0418
Signing time: Wed 19 Aug 2026 00:44:13 +0000
Manifest this update: Wed 19 Aug 2026 00:44:13 +0000
Manifest next update: Wed 26 Aug 2026 00:44:13 +0000
Files and hashes: 1: 1Sj61Lh2q_twrziSIg8pPheRtrw.crl (hash: 4ztOJaIU1wAfUEf01fGau/+/6PygCb/IKuKKmDRlpV4=)
2: C0E56FB2D56B11EFB540FB53C4F9AE02.roa (hash: wKVvfJXDJ+GEw46MkJTvDGmaoIKWVTsB347F+vgLfNU=)
3: A0841A68D0D511EC81001E73C4F9AE02.roa (hash: JU2R1iWegqyOEY3wh1qfZrk7NhgHNN+31mJpziiTlZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1066 (0x42a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE6C5, serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Validity
Not Before: Aug 19 00:44:13 2026 GMT
Not After : Aug 26 00:44:13 2026 GMT
Subject: CN=6a84fc5d-4ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:02:01:cb:95:86:91:69:a1:06:de:81:b2:
66:97:5f:96:25:4a:99:06:81:86:26:33:d7:e4:2e:
f5:9c:92:fa:6d:d7:de:70:b1:31:97:a8:34:1a:65:
9e:4e:be:3a:cc:33:c8:8f:d6:f9:8b:50:01:19:d8:
de:ae:a2:c8:ed:5c:9e:cb:19:46:ed:a4:3e:27:d7:
c2:f1:a1:68:b5:cd:b1:f4:b4:58:8b:20:7f:aa:02:
9f:a2:39:19:38:7d:a6:ab:a2:db:76:ed:13:4c:da:
cb:29:fc:30:a9:a4:c6:33:71:42:e4:f2:5b:f8:cd:
85:1b:f1:41:94:dd:77:c3:98:c7:06:d7:34:5c:8a:
f6:55:5b:10:3c:5d:c5:3d:cc:62:99:46:d0:16:47:
56:f6:6e:73:8b:6d:4a:c4:9a:cb:0f:9a:ee:f8:87:
73:73:41:8e:53:6c:03:53:68:c8:c0:81:51:fd:4d:
76:d7:a7:bc:21:36:ed:3f:c6:66:fb:77:68:a8:52:
70:f2:6b:1c:25:93:bc:d1:66:6c:5a:64:94:75:7a:
31:99:01:46:96:77:ba:d8:6d:93:22:00:9b:93:ff:
d7:3d:f1:07:d7:dd:d7:44:a7:19:c3:d9:3e:43:db:
13:e9:5f:0d:60:5a:5f:b4:56:97:81:a3:30:a2:f6:
a5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:29:71:D6:37:24:3E:72:4D:07:70:75:E5:AA:74:0E:FC:9D:56:40
X509v3 Authority Key Identifier:
keyid:D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:db:33:93:ed:2e:78:54:c4:7b:43:02:48:d1:d6:c3:0b:63:
b8:f0:ff:9d:28:06:50:5a:d3:a7:4d:c7:c4:ff:a1:56:dd:9a:
e5:d7:d6:e6:b8:1d:94:02:85:56:13:af:4c:1c:d3:3c:64:81:
9d:6b:2d:e1:fe:9b:36:db:a8:95:46:69:45:bf:28:5d:fe:4f:
57:d5:e9:59:3b:1b:62:26:3b:91:6d:e8:5b:db:3c:4f:44:ff:
45:fb:e3:f5:ac:ee:79:ec:29:24:15:0e:41:43:67:1d:a8:cb:
3c:23:0d:bf:06:cd:19:04:ee:4b:60:94:07:55:98:07:16:1b:
fc:c2:d9:f8:95:5e:28:28:17:5c:7a:42:7b:92:99:92:cd:d1:
93:1e:56:50:de:8d:31:c3:cc:27:79:76:5b:6e:e2:bb:f5:3c:
9c:89:e7:da:45:f5:cc:a9:d3:84:8a:e7:05:4c:df:9c:02:21:
2a:48:c2:10:07:ae:e3:72:d9:3c:15:5c:cd:09:94:d0:ae:55:
83:91:02:f9:a7:61:76:a3:24:20:ed:09:42:4d:e1:2a:64:d4:
1e:39:72:4d:1b:f0:fd:6d:8c:5c:fc:b9:b3:61:01:69:fd:e6:
9c:33:06:bf:69:fe:33:38:50:0b:8d:b1:fd:c2:fe:7c:ce:24:
84:66:1d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:02 2026 by rpki-client