
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft
File: 1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft (raw, json)
Hash identifier: /4euF7Yf8bZDFFNdw/ppO4FRg/7vpm1c95gc4ph8o/I=
Subject key identifier: 36:53:E1:C2:07:D1:89:34:78:78:27:DB:1E:DC:73:7B:1C:94:56:67
Authority key identifier: D5:6C:F6:4D:6D:CA:F9:10:C7:B1:2C:89:B2:10:38:07:74:6B:A6:E1
Certificate issuer: /CN=A91FBC9F/serialNumber=D56CF64D6DCAF910C7B12C89B2103807746BA6E1
Certificate serial: 7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Wz2TW3K-RDHsSyJshA4B3RrpuE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft
Manifest number: 7B
Signing time: Sat 03 Oct 2026 08:32:55 +0000
Manifest this update: Sat 03 Oct 2026 08:32:54 +0000
Manifest next update: Sat 10 Oct 2026 08:32:54 +0000
Files and hashes: 1: 1Wz2TW3K-RDHsSyJshA4B3RrpuE.crl (hash: dl68Ncde/5w1RiBPU97WsU/1R6XPZ0zGMgJ84Wt9yy0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.crl
rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Wz2TW3K-RDHsSyJshA4B3RrpuE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:32:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBC9F, serialNumber=D56CF64D6DCAF910C7B12C89B2103807746BA6E1
Validity
Not Before: Oct 3 08:32:54 2026 GMT
Not After : Oct 10 08:32:54 2026 GMT
Subject: CN=6ac0bdb6-8f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:15:9e:a2:67:a9:b7:89:0d:fb:4f:9c:06:
16:c3:35:a0:3f:43:bb:11:ea:01:35:7d:5e:8a:1c:
90:8a:81:e2:5e:79:dc:2d:8b:b8:93:d2:03:43:15:
a6:e6:e6:ed:a1:fd:ce:8b:2c:b6:9f:c6:4b:8a:53:
c9:2d:45:68:07:00:c4:20:b8:56:9e:55:f2:fe:e7:
ef:d5:5f:2e:ab:7c:a8:8e:0e:71:11:60:bc:c0:23:
50:5b:69:00:cc:76:ed:87:7b:5e:d2:1b:2c:1a:02:
54:dc:35:b5:8c:af:09:9a:0d:48:04:19:ca:f4:f6:
d7:f2:63:74:7b:a7:bb:b7:cf:4d:4e:9d:5f:5b:e7:
bd:4e:00:ac:18:96:6d:a5:75:67:ad:95:1c:b9:f3:
1f:d6:d6:76:77:63:67:bc:fc:00:77:8e:4f:0a:99:
ff:66:ea:5f:9e:a6:44:05:16:f7:57:79:d0:56:52:
35:f6:ea:27:92:75:aa:ce:46:82:f5:fe:57:a0:3e:
7b:9b:a5:e0:a1:ac:4b:29:19:88:40:d0:71:60:c0:
2b:00:8d:91:de:35:9e:cd:7a:cb:8e:e2:ac:7a:45:
5c:08:f6:ec:2e:05:1e:42:72:d6:ab:ce:68:3c:3c:
5e:8f:88:2b:e4:cd:df:5c:27:f0:0d:33:fc:04:91:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:53:E1:C2:07:D1:89:34:78:78:27:DB:1E:DC:73:7B:1C:94:56:67
X509v3 Authority Key Identifier:
keyid:D5:6C:F6:4D:6D:CA:F9:10:C7:B1:2C:89:B2:10:38:07:74:6B:A6:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Wz2TW3K-RDHsSyJshA4B3RrpuE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f4:02:9b:ce:c2:43:88:c2:96:d1:6c:a6:85:3f:7f:c0:47:
e8:5e:f5:27:20:2b:8f:7c:a6:38:ca:28:94:ea:bc:47:c1:db:
63:cb:2f:86:91:cd:3c:3a:69:bf:1f:fb:bf:3c:4c:4a:c7:9b:
58:a7:04:8c:01:f2:0f:28:81:27:80:f1:2a:15:71:86:ac:7d:
f4:bc:56:a0:f6:15:9d:94:f0:b8:7f:ba:fb:bb:ac:82:0c:c2:
94:64:0e:e5:05:20:1a:3a:2e:d1:8b:a0:b5:cf:db:ee:51:59:
c0:cb:c7:83:b6:dc:03:a6:d3:b3:39:e5:4a:27:40:ed:48:dc:
13:23:65:23:9f:42:fb:e1:ac:f5:82:2e:dc:cc:13:de:62:ac:
c7:c6:3f:87:e4:88:23:da:e4:e8:20:61:2b:35:d1:4b:f9:ef:
f2:57:9d:4e:65:9a:a8:ab:eb:03:71:65:9b:4e:13:73:29:e2:
9b:d1:ef:90:0d:7a:a9:a9:05:67:9a:64:96:d7:05:e4:4a:b3:
1e:16:0a:72:2c:4b:1c:5b:fd:06:ac:83:34:9b:53:60:48:2a:
b0:ad:3e:bc:15:04:3e:dc:8d:ce:35:7d:bf:32:a2:1a:8a:0c:
c0:f2:34:a2:0b:be:6a:a2:49:aa:b9:72:27:b8:3f:08:12:0a:
f2:66:a8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:33:36 2026 by rpki-client