
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
File: 1Sj61Lh2q_twrziSIg8pPheRtrw.mft (raw, json)
Hash identifier: X58aBc+tSFC+/6fy0yFnvBxVJxhxcr2/XcR0xNm9n30=
Subject key identifier: E6:DB:83:68:83:4A:71:DC:44:20:EF:F3:5E:79:0E:12:0E:3B:C3:BC
Authority key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
Certificate issuer: /CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Certificate serial: 03FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
Manifest number: 03EA
Signing time: Thu 21 May 2026 00:37:50 +0000
Manifest this update: Thu 21 May 2026 00:37:49 +0000
Manifest next update: Thu 28 May 2026 00:37:49 +0000
Files and hashes: 1: 1Sj61Lh2q_twrziSIg8pPheRtrw.crl (hash: Sit6g+0/fBixdpKdOlCMZF+Ga610fjq2varGmg7nYjs=)
2: A0841A68D0D511EC81001E73C4F9AE02.roa (hash: JU2R1iWegqyOEY3wh1qfZrk7NhgHNN+31mJpziiTlZc=)
3: C0E56FB2D56B11EFB540FB53C4F9AE02.roa (hash: wKVvfJXDJ+GEw46MkJTvDGmaoIKWVTsB347F+vgLfNU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 00:37:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1020 (0x3fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE6C5, serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Validity
Not Before: May 21 00:37:49 2026 GMT
Not After : May 28 00:37:49 2026 GMT
Subject: CN=6a0e53de-5d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:98:c1:ad:66:bd:85:21:79:17:7c:9a:88:e6:
9a:26:8f:50:4b:e7:a3:d3:57:c7:06:fe:80:ce:5e:
7d:98:bb:2e:22:00:0e:9f:a3:97:f5:54:83:5a:13:
ff:fe:a7:e6:53:46:dc:64:35:41:d8:f9:a4:55:9d:
f6:8d:0a:da:fc:db:99:06:9c:bd:2f:1c:be:3a:5a:
3d:96:21:3b:b9:35:69:1f:79:10:3c:ee:ac:c3:4f:
b2:82:fc:24:46:46:dd:f0:88:91:ae:80:4d:b1:1c:
8a:0c:1b:6c:07:a1:2b:58:ff:88:31:9a:01:cc:25:
1a:78:8a:92:fb:73:51:be:61:1f:ed:c0:e6:ac:c7:
aa:c3:b5:2d:ce:7f:57:ef:d8:bf:38:81:d3:10:1c:
1f:93:b6:d7:5b:e4:ce:aa:85:c1:3f:6f:a7:7a:70:
54:cd:0d:93:57:06:ba:05:c6:f8:86:bf:40:f8:7b:
f5:94:ee:bd:a6:44:9c:6f:78:15:17:39:18:d9:ad:
38:fe:0a:91:2b:b2:d0:b3:81:a0:01:0d:b4:5d:81:
d8:8c:60:ed:d4:fe:ba:84:57:80:17:88:ee:27:ec:
9b:41:e3:f8:bb:5f:dc:3c:7a:e8:9e:fe:05:42:66:
3b:fd:54:8a:9a:89:1c:10:79:7f:5b:e9:d7:3a:4b:
c2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DB:83:68:83:4A:71:DC:44:20:EF:F3:5E:79:0E:12:0E:3B:C3:BC
X509v3 Authority Key Identifier:
keyid:D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:95:0c:ad:58:07:06:c9:75:cf:e3:20:83:89:46:c0:66:24:
ed:4b:4d:ea:f7:91:c5:89:06:ef:10:dc:09:55:f2:63:dc:8c:
9c:6d:2e:d6:bf:a2:02:28:98:51:fc:7a:58:e6:61:e5:88:05:
5b:5e:6d:fe:68:e6:21:3e:c6:3b:92:58:31:76:49:05:ee:f0:
ad:6e:4b:72:76:c1:ac:39:c1:99:1f:31:c2:31:ad:b6:fe:03:
55:ab:1f:fd:d8:36:99:f8:fd:9c:69:b6:d2:5a:14:ec:36:49:
75:21:ff:e3:f5:d0:5e:9c:f5:60:3e:2c:e2:44:f2:7b:fd:ce:
3f:71:d1:38:60:cb:0f:4e:d8:0b:e4:ec:e7:c1:02:81:2d:39:
fd:27:d4:e9:9c:4f:0b:2e:1a:62:8f:dd:fc:a9:d5:e8:71:be:
12:d0:ff:c4:50:aa:7f:da:24:18:f5:71:1d:8d:1d:ba:69:28:
21:fe:b2:7a:a1:0b:1a:70:7e:b1:e2:1e:76:33:07:a2:37:18:
76:62:f0:6a:35:1c:e7:3e:10:17:7d:2c:c9:84:c2:d7:c0:e2:
8a:4c:57:a6:2c:be:6f:dc:99:91:42:3f:c2:1e:36:64:53:92:
5d:82:f3:41:ae:5e:04:d7:d6:a5:7b:4e:ba:b7:c7:31:b7:f3:
a5:46:a3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:07 2026 by rpki-client