
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft
File: 1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft (raw, json)
Hash identifier: LP6690iEgpOWKIx3lHxMhji+t3tm6mDtUCklkfUFuWY=
Subject key identifier: B4:1F:82:1B:D1:F5:F4:08:68:64:AC:9B:9C:72:32:16:BB:7F:AD:28
Authority key identifier: D5:6C:F6:4D:6D:CA:F9:10:C7:B1:2C:89:B2:10:38:07:74:6B:A6:E1
Certificate issuer: /CN=A91FBC9F/serialNumber=D56CF64D6DCAF910C7B12C89B2103807746BA6E1
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Wz2TW3K-RDHsSyJshA4B3RrpuE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft
Manifest number: 20
Signing time: Sun 05 Apr 2026 08:16:40 +0000
Manifest this update: Sun 05 Apr 2026 08:16:40 +0000
Manifest next update: Sun 12 Apr 2026 08:16:40 +0000
Files and hashes: 1: 1Wz2TW3K-RDHsSyJshA4B3RrpuE.crl (hash: TzIvVxLSCITOU58gucsfke7NhG+6SkT7b9N8Dqu5xCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.crl
rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Wz2TW3K-RDHsSyJshA4B3RrpuE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:16:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBC9F, serialNumber=D56CF64D6DCAF910C7B12C89B2103807746BA6E1
Validity
Not Before: Apr 5 08:16:40 2026 GMT
Not After : Apr 12 08:16:40 2026 GMT
Subject: CN=69d21a68-c417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:61:01:18:02:4f:9a:17:4a:45:68:2f:54:
d7:07:d2:31:0d:32:dd:02:cc:b4:22:d2:81:41:95:
54:87:2a:ce:fb:b1:d9:f4:69:07:30:6c:5f:5d:f4:
aa:b5:ca:be:d9:3f:f6:c9:a3:e1:27:40:d3:1f:79:
c0:8a:c6:c5:2c:6d:80:60:d4:9d:77:80:dd:f1:e4:
e7:4c:70:0a:6e:5d:96:46:e3:72:cc:0c:73:9d:7c:
4a:cc:dd:85:63:4b:24:8a:0f:cc:ed:2f:1e:1e:39:
2d:c9:16:5d:15:4c:58:03:87:2a:c5:17:11:47:3f:
ec:9b:7a:dd:e7:2a:62:5b:47:34:f6:f8:d3:09:05:
d7:ac:c5:c1:26:bb:1a:75:16:f3:6a:73:dd:33:1b:
b6:81:0d:40:1a:18:76:38:85:43:4e:34:79:65:24:
28:13:41:49:36:7d:be:42:63:c7:23:30:de:49:0a:
b3:e0:e8:ad:b4:2e:ed:7b:bd:22:ff:8d:5d:be:6f:
8f:62:62:40:e4:cc:0c:fb:45:0f:2b:8a:0f:f0:a5:
b5:85:fc:26:a3:7d:12:c1:41:b8:1a:00:ae:67:5d:
31:87:ac:c1:8e:97:f2:a4:f7:9c:91:f7:ac:18:6b:
9b:72:9e:31:f8:b3:08:50:59:a6:e6:02:4d:c4:e4:
f3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1F:82:1B:D1:F5:F4:08:68:64:AC:9B:9C:72:32:16:BB:7F:AD:28
X509v3 Authority Key Identifier:
keyid:D5:6C:F6:4D:6D:CA:F9:10:C7:B1:2C:89:B2:10:38:07:74:6B:A6:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Wz2TW3K-RDHsSyJshA4B3RrpuE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:09:7f:46:39:23:ba:2c:01:39:a9:5a:9c:23:52:bf:3d:98:
6a:ea:61:3d:3c:1f:8c:ea:a5:8d:a5:dd:d5:1c:74:2a:dc:ab:
dd:3a:9f:04:e5:59:8e:7c:0b:13:da:47:da:d1:ec:fa:d9:0e:
b9:22:ae:91:a1:eb:88:a0:db:f7:e1:19:76:4e:e0:da:0f:9c:
19:72:68:64:f8:ef:d2:ba:df:77:e0:ec:ac:16:ad:e3:c0:41:
38:83:fe:9a:34:81:2f:9c:2a:fe:f4:da:eb:82:db:23:f2:c6:
4c:e8:53:99:95:eb:85:c1:b8:cc:b6:81:ca:24:2e:d4:d2:b4:
01:0d:a4:67:5f:19:bc:f7:da:40:14:33:73:6c:62:79:86:36:
6b:c1:9f:49:23:34:31:ba:44:20:57:0f:0c:30:1a:0a:c2:67:
dc:5a:fb:99:24:dc:d0:43:55:76:ef:d0:88:be:23:cb:09:48:
07:a4:21:a9:fa:47:72:9e:83:02:ca:25:b4:f4:2f:0f:aa:28:
3c:b3:bc:8c:0b:71:47:c7:22:7c:3e:ce:c7:8e:74:ff:b4:a0:
e7:dc:db:16:bf:42:e7:b2:53:5d:17:48:d4:25:22:01:d1:3a:
80:52:cb:f2:ea:4b:2f:26:67:be:a3:be:cc:ab:40:c0:ab:df:
e5:45:13:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:06 2026 by rpki-client