
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
File: W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft (raw, json)
Hash identifier: gSWkeR3GdAwzlkvgx5RnS8L1bD7Mf1gYSuCi1r8uD9I=
Subject key identifier: E9:24:A1:80:32:4A:3F:5F:D6:40:48:D8:02:9C:F3:A6:D4:A9:E3:86
Authority key identifier: 5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41
Certificate issuer: /CN=A91E1936/serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
Manifest number: 01F9
Signing time: Sat 17 Oct 2026 03:52:24 +0000
Manifest this update: Sat 17 Oct 2026 03:52:23 +0000
Manifest next update: Sat 24 Oct 2026 03:52:23 +0000
Files and hashes: 1: W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl (hash: 5UBaZOquKjMHlNjKqpy/fc68ps1hACXdLutkda3BcEg=)
2: CF6BED9EC63611EEA0C70259C4F9AE02.roa (hash: a3vM/Ppf0GxiRLmbleY13cfOquo7BmGPzlHgh28TyyE=)
3: CE88A98AC63611EEA0C70259C4F9AE02.roa (hash: qcHwawytQ/8AG7cdx5hu0AuGvZCgLwDCZXBXxMtoIVk=)
4: 0423873AD9C511EEA944FA80C4F9AE02.roa (hash: vrmDfWTNDEfAAGTB6RMWU6c9oOq8iON07z3iMp7YpRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl
rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 03:52:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1936, serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041
Validity
Not Before: Oct 17 03:52:23 2026 GMT
Not After : Oct 24 03:52:23 2026 GMT
Subject: CN=6ad2f0f8-ee3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:07:02:31:79:29:7b:5d:c7:86:45:53:4c:68:
78:e2:53:d4:6f:50:37:c5:0f:0b:90:fb:82:d4:45:
3f:f9:2f:d4:b9:a3:a0:c5:63:7b:07:9a:e7:50:29:
98:7d:fb:41:45:1f:47:45:21:d0:44:35:8a:47:80:
00:59:1a:d3:47:86:c6:02:62:30:7f:72:08:50:a3:
a2:50:b4:c9:3d:48:67:5b:58:1f:17:2e:6a:02:70:
74:e1:22:03:f2:e5:0f:b5:2a:cb:7f:e6:71:2f:2c:
68:86:4c:2f:eb:32:b1:08:dc:f8:27:31:84:8d:fa:
66:dd:53:04:f6:cb:83:78:01:12:1e:2f:cd:2b:52:
9a:80:57:92:5e:c0:65:9c:11:b1:54:71:ac:94:47:
19:9d:69:d0:50:43:e7:c0:8c:d4:ce:70:93:3d:c0:
89:0a:47:d4:37:01:66:05:b0:3a:2e:4b:a1:1c:d5:
e9:78:71:b0:25:a4:3f:45:8e:be:3c:08:36:bd:81:
52:a2:fd:4c:f5:e6:b0:2f:fe:a3:a2:59:d7:bc:03:
38:1e:17:c1:b8:cb:36:71:0e:95:96:ea:d4:1c:cc:
0f:6c:b2:79:19:d8:ae:d5:8b:2c:dd:fa:03:9a:a8:
ac:d4:1d:07:23:95:3d:fe:99:a0:2f:2a:3c:0f:43:
15:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:24:A1:80:32:4A:3F:5F:D6:40:48:D8:02:9C:F3:A6:D4:A9:E3:86
X509v3 Authority Key Identifier:
keyid:5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:30:96:b4:6f:36:ce:29:21:2f:97:2a:fb:81:4f:41:7b:c6:
de:49:61:a6:91:db:c2:b2:49:15:75:8a:8a:7b:a5:5d:72:5f:
64:af:de:ea:df:e2:6b:4b:62:f1:e0:da:4d:a8:28:44:9b:f5:
ad:a0:83:ba:c9:09:5d:41:a8:3f:e9:18:2f:ec:51:c3:40:0c:
64:14:a3:fc:b3:1d:33:1f:10:88:77:15:20:82:50:01:19:1f:
72:ac:c6:e1:17:f9:c9:69:eb:f6:ea:04:a3:38:b5:06:47:7e:
70:0f:d8:b8:70:b6:78:4f:b5:bd:67:2b:1d:cb:9b:08:bd:fe:
72:42:43:48:85:89:83:50:0e:8d:dd:9e:23:66:b6:5c:5b:44:
e6:38:db:07:d1:50:a1:75:ab:30:d7:90:66:26:45:22:56:2d:
a5:a9:f7:36:6f:8f:13:a6:eb:7f:4d:de:3a:60:84:c7:6e:a0:
4a:bf:05:0a:71:d4:3b:73:00:df:26:cd:20:93:a8:3f:f6:dc:
0e:31:79:9e:34:00:32:9c:97:ca:27:69:2c:35:76:f5:eb:57:
ea:c8:ec:a8:90:88:b9:ff:7a:ff:0f:28:03:07:b6:a9:11:b0:
6f:94:f3:0c:ed:8d:fe:ce:98:73:74:64:64:c1:6a:83:ba:ea:
91:20:2e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:07:43 2026 by rpki-client