
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
File: 1gwwsan1nJWa1JZ_L21XKst1KZw.mft (raw, json)
Hash identifier: sUU4v/T6rFsWpyisTlPTtusM0fVxPlyz26S6GjdHXug=
Subject key identifier: 4E:1B:9D:3F:79:5D:2F:C7:93:07:08:B0:09:E0:9C:E2:FC:94:CF:C5
Authority key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C
Certificate issuer: /CN=A91E5EEA/serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
Manifest number: ED
Signing time: Sun 05 Apr 2026 05:53:31 +0000
Manifest this update: Sun 05 Apr 2026 05:53:31 +0000
Manifest next update: Sun 12 Apr 2026 05:53:31 +0000
Files and hashes: 1: 1gwwsan1nJWa1JZ_L21XKst1KZw.crl (hash: 4YHKBA+vkCiUTaJqR2h7GKiyhFEknYfHbLy/wyLfDiE=)
2: A7C0D96E0CDD11F0A8463D28C4F9AE02.roa (hash: WbcHkuV1KGZpUWsgSLnvoF/j0nloKO7jZjWyz2sKLc4=)
3: 2B6A4C480CDC11F0BAA65183C4F9AE02.roa (hash: GqBmWG7cp4InXGzH112fZPiBHKzEQ6yteA8i5t3EwNk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl
rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:53:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5EEA, serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
Validity
Not Before: Apr 5 05:53:31 2026 GMT
Not After : Apr 12 05:53:31 2026 GMT
Subject: CN=69d1f8db-b85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:47:12:b8:dc:d0:f3:02:d4:dd:e5:2c:03:d7:
87:41:21:a0:ba:ed:c3:ff:a1:b9:98:f0:e2:e8:87:
a6:ef:3a:37:be:87:8b:22:60:ec:73:11:e3:b6:2e:
f4:37:7e:5c:2d:32:d3:d5:fd:d1:b5:59:f9:ea:b0:
b0:e9:ff:ac:c2:9b:74:84:24:d9:15:86:f1:08:d6:
ec:10:72:a9:31:96:f1:87:6f:e3:39:c4:68:03:6e:
d5:44:18:b8:c3:b5:cb:94:2d:c8:fd:97:b0:5c:36:
83:a9:0a:2a:3b:a6:1a:7c:ff:fd:e9:c0:3a:d8:61:
b1:f9:11:d2:1e:f9:ee:d3:49:f6:1d:7f:ca:28:84:
5f:67:6e:72:e2:03:e6:fa:82:d2:45:44:e4:b0:74:
c1:18:6d:da:32:c3:5f:28:47:5a:fd:92:49:8a:94:
93:aa:a2:44:a6:bd:0f:64:e1:b9:33:a2:60:93:d8:
64:c4:ba:91:bd:3a:29:f6:08:03:49:00:03:e4:aa:
40:1a:3b:09:9e:63:a8:e4:94:e5:5f:75:42:38:f2:
6f:7c:4b:0a:97:ed:c8:f7:5c:ca:79:37:34:93:fc:
c6:e1:fa:c5:16:54:71:2b:61:72:40:59:17:36:32:
25:51:c9:c2:47:0f:94:37:98:e1:84:ea:d1:e9:7f:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1B:9D:3F:79:5D:2F:C7:93:07:08:B0:09:E0:9C:E2:FC:94:CF:C5
X509v3 Authority Key Identifier:
keyid:D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6c:52:ff:8a:7a:fb:0d:df:a0:c0:11:21:47:7f:4b:a3:63:
15:be:5e:e2:fb:6d:66:a2:bd:90:88:9a:33:35:a9:ac:da:b9:
b9:99:21:88:be:9b:85:f5:21:c0:ce:92:2b:cd:fa:82:24:96:
1e:14:a0:1b:2a:74:02:39:9b:84:de:40:b6:7a:89:0d:e6:92:
f3:b0:9d:41:a0:a4:bf:4d:78:2b:14:3f:ef:25:f9:15:c8:0b:
dc:04:67:78:05:fd:1d:f3:11:40:6b:60:d6:8e:66:57:2b:37:
ca:87:33:05:d3:17:e8:42:e6:70:cd:fc:a4:a2:ff:73:b2:b5:
3c:d0:c7:1a:23:58:7b:a8:b9:df:a8:d8:6f:89:22:85:84:8e:
17:d6:ff:ea:f9:ab:10:38:2e:55:79:97:38:8b:d9:3e:f9:9e:
75:a1:46:e6:70:5b:ad:dc:16:fb:f0:99:b9:14:83:7f:f3:09:
aa:58:a9:03:aa:9f:2a:4b:bb:f2:87:98:a1:85:f1:bb:73:68:
ae:c2:d8:94:84:2f:33:7a:57:3e:e3:f0:ba:9f:9e:6a:04:8b:
27:c2:f2:41:0a:d6:e5:3d:71:62:68:ff:77:00:54:aa:02:65:
d2:a5:6a:b9:6b:c9:85:d5:9d:9a:40:4c:c8:a9:77:ed:7c:13:
f7:bb:77:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:13:56 2026 by rpki-client