
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
File: 1gwwsan1nJWa1JZ_L21XKst1KZw.mft (raw, json)
Hash identifier: STuv/FgUPp815sKxBt8HcOauI+0yGPlbAl1puRQ355g=
Subject key identifier: EB:D0:8A:28:9F:12:00:FE:D2:A8:C1:16:53:57:3F:29:AC:1E:A0:73
Authority key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C
Certificate issuer: /CN=A91E5EEA/serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
Manifest number: 0158
Signing time: Thu 29 Oct 2026 05:58:43 +0000
Manifest this update: Thu 29 Oct 2026 05:58:42 +0000
Manifest next update: Thu 05 Nov 2026 05:58:42 +0000
Files and hashes: 1: 1gwwsan1nJWa1JZ_L21XKst1KZw.crl (hash: 7DyBs0iCPsEpR0i0n/ckA1PshHLRy8Sl66EK90mnBEU=)
2: 2B6A4C480CDC11F0BAA65183C4F9AE02.roa (hash: RIBR6Aq7qG+43hv6ewZdSAx3b9VUtHjFxXtxd32vcIM=)
3: 14B5D8CEC4D611F1A168CFE76811F970.roa (hash: Cwr36ZTdrXGOFgQi5Ql2vu09j7tS+37OTzos3CAJEvo=)
4: A7C0D96E0CDD11F0A8463D28C4F9AE02.roa (hash: tJM1vGo1elqnkueYKqo//TvJdFjq9C9IRU+57/dBaoA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl
rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 05:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5EEA, serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
Validity
Not Before: Oct 29 05:58:42 2026 GMT
Not After : Nov 5 05:58:42 2026 GMT
Subject: CN=6ae2e093-28cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:96:37:2a:96:3f:36:57:71:78:f1:24:a0:
b6:ff:10:e9:8e:99:64:19:2e:46:78:bf:fb:35:b0:
bc:28:d6:99:5e:cd:36:18:44:90:85:50:15:0e:6e:
e1:bf:4c:d7:2b:3e:18:9d:aa:94:a7:7f:cb:71:1a:
56:f9:f6:1c:6a:d2:da:ca:b8:6b:ad:e3:17:65:cc:
69:1c:d3:72:07:93:55:43:a3:e4:6c:9a:0f:6c:82:
75:15:b4:5c:85:06:4a:51:9d:a5:42:12:fc:bf:ac:
84:f0:28:c3:51:b0:54:cb:77:4f:4d:43:5e:d7:13:
02:15:e9:3f:d3:d6:aa:6a:1c:77:6e:31:d3:57:3e:
3e:2f:cc:9e:e0:e7:4e:4e:c2:e5:e1:5d:91:96:71:
fc:2d:41:57:8b:d8:96:b4:dd:85:9e:c4:ee:25:0f:
34:de:44:d5:c7:bb:65:92:3f:a2:3c:8c:a9:49:c8:
bd:7b:7e:f8:9b:54:9e:b6:93:a5:a3:1b:21:a9:20:
1f:7a:d2:7a:b4:38:d2:15:b6:58:ca:d8:74:36:b8:
38:43:b8:2d:b8:4b:d4:1c:24:31:c7:c9:e7:16:08:
dc:c6:dd:c0:68:85:bc:33:2a:79:79:65:7a:85:e7:
a6:17:08:bd:30:c1:8d:61:b9:b5:f1:68:a9:11:cc:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D0:8A:28:9F:12:00:FE:D2:A8:C1:16:53:57:3F:29:AC:1E:A0:73
X509v3 Authority Key Identifier:
keyid:D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9f:31:fe:b7:f3:b9:29:0e:cf:18:9e:35:99:44:69:56:74:
cb:3f:9f:d9:b0:ad:73:bf:0b:a7:99:5f:ba:19:7e:23:9c:db:
85:84:ed:e9:5b:ee:6c:aa:a9:51:3e:8c:28:a1:6e:b0:bf:c9:
d9:19:c1:1e:63:1a:7e:5f:97:15:43:1f:5f:91:0f:f6:4d:cc:
22:8d:5a:93:6d:88:a1:65:f2:04:79:1f:e6:fa:93:c0:88:28:
62:49:71:10:93:37:e2:ae:53:3a:13:3c:2c:10:cd:71:44:aa:
5d:c0:ed:4c:78:a5:04:1d:49:dc:c7:70:e1:2d:e4:7b:56:61:
cc:a1:4f:be:54:1c:1d:ca:10:ea:3b:e9:fc:fd:8d:d0:d9:54:
60:8f:85:71:93:20:f3:51:7a:e7:f5:be:ac:d0:0a:28:3d:24:
4c:e8:df:6f:17:6e:f3:72:58:9c:46:e6:30:91:76:f3:5a:09:
99:cf:c3:89:05:df:8b:3a:86:00:12:21:47:ac:aa:0f:09:15:
0d:6a:ec:47:4c:5e:5f:68:a0:bd:17:15:46:67:c6:bb:78:d6:
e9:89:2c:28:68:ae:99:fa:36:c0:ad:84:8b:b2:ce:b0:c0:be:
05:49:8c:63:38:33:1c:53:dc:86:55:cf:d5:1e:95:c9:2b:af:
6c:48:0d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:55:57 2026 by rpki-client