
$ rpki-client -vvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
File: 1WeS1ZfpzdAr_BbQtJLaParggPw.mft (raw, json)
Hash identifier: CjbTiv4oUw641iZdOScaoU3Q8exfnOMai5+RkbvPnWE=
Subject key identifier: E0:80:68:94:57:D8:86:A2:C9:76:B2:11:10:AE:BD:0E:14:18:4E:5C
Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC
Certificate issuer: /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
Certificate serial: 2002
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
Manifest number: 1FD6
Signing time: Tue 28 Jul 2026 16:04:46 +0000
Manifest this update: Tue 28 Jul 2026 16:04:46 +0000
Manifest next update: Tue 04 Aug 2026 16:04:46 +0000
Files and hashes: 1: 1WeS1ZfpzdAr_BbQtJLaParggPw.crl (hash: RCqHxfWynaGNfoahZZcQLffeFpgdwJpdWAz60NOlTQA=)
2: 500DFDA8578611EA8CC3B124C4F9AE02.roa (hash: 5LNSq5pdKybofu1UpxkFVG9Ohf/hU7Yt5u2ontP0MD0=)
3: 317CF2A634E811EFA8BEA738C4F9AE02.roa (hash: +mfxCLFmT0kAngWE0QR8njelgu56dCQ+gYLAva7jY7M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl
rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8194 (0x2002)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91731EA, serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
Validity
Not Before: Jul 28 16:04:46 2026 GMT
Not After : Aug 4 16:04:46 2026 GMT
Subject: CN=6a68d31e-9216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b2:a2:06:fd:9e:d9:aa:61:e7:29:99:c8:81:
c9:a0:6c:59:32:28:88:f2:b4:eb:f6:67:31:57:ec:
7b:a2:78:6d:05:f8:b3:c1:70:53:54:4f:f2:9b:4f:
65:69:81:c1:2e:e6:9d:26:1e:da:59:2a:34:38:4e:
02:94:c7:4d:2e:d8:80:c9:e0:e6:61:55:32:b8:9e:
20:f3:ff:93:e6:58:a2:f9:fc:b8:96:88:a7:64:14:
a2:9f:fa:ae:40:a8:1c:5e:1c:f2:b1:8b:8f:85:6a:
46:5b:8d:33:b6:bf:4b:b9:85:65:1d:d8:5b:15:6e:
cf:70:ea:d8:cf:37:1d:df:43:e2:e5:a1:d1:fd:dd:
aa:eb:d2:7c:7f:68:7d:61:dd:fd:56:ec:11:b7:5a:
40:87:ff:db:0d:08:f4:f7:eb:7b:ab:9e:ab:c7:5a:
2c:f2:7b:20:86:9c:3e:81:1e:be:e9:2f:ac:dc:92:
c1:1a:7c:9a:c4:6c:aa:9c:f1:95:49:e2:f0:c0:7f:
cf:94:ce:62:36:54:3f:9c:97:e8:a3:76:46:64:d5:
97:41:6c:3b:cc:d9:2b:55:aa:7d:89:7e:98:f6:a6:
ce:dd:5e:57:24:e8:e7:94:67:60:a9:b5:04:6c:e8:
7a:fa:cd:f3:81:9a:44:5e:a1:5c:bd:dc:fd:9e:4a:
21:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:80:68:94:57:D8:86:A2:C9:76:B2:11:10:AE:BD:0E:14:18:4E:5C
X509v3 Authority Key Identifier:
keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a1:03:02:95:a2:18:b0:07:c1:00:d5:72:7b:4f:c9:fe:59:
f4:52:bb:fc:26:2f:7b:87:6e:81:5e:b7:db:e7:c1:8d:ab:7e:
fd:63:bf:1c:4a:1a:47:66:c3:ef:dd:96:ed:0c:9e:07:7a:3f:
b8:ef:0d:cf:4e:a1:0e:01:57:0c:83:a4:47:e3:ff:c3:ec:10:
85:43:12:4a:94:ba:1a:41:01:f4:64:93:27:3f:03:00:21:b5:
e8:73:43:9d:aa:3c:63:2d:2d:46:c6:bd:6f:9d:ad:62:3e:49:
c2:1b:58:97:36:73:a3:e2:13:1a:28:4a:19:70:34:98:73:8d:
d0:25:6a:d3:6e:e8:9f:71:d0:bd:e8:be:a3:8a:0a:d4:0f:57:
70:6d:93:4b:73:1c:3e:eb:9f:42:68:73:6c:d2:25:d1:08:7a:
74:69:43:8c:46:15:11:a2:1b:c1:89:ff:c3:fb:30:01:d1:ef:
03:fa:a7:1f:47:38:74:15:f7:12:06:e3:65:bd:23:ac:b2:fa:
82:61:f3:d4:cb:86:2c:db:14:be:ce:37:0e:bf:95:e3:d5:1e:
72:00:4b:4c:d9:4a:66:12:6c:14:3c:3f:69:15:4d:5d:ee:d2:
3f:ad:ba:e4:15:4d:88:56:fa:9f:e9:01:38:4d:60:ef:54:7c:
ba:27:31:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMxRUExMTAvBgNVBAUTKEQ1Njc5MkQ1OTdFOUNERDAyQkZDMTZEMEI0OTJEQTNE
QUFFMDgwRkMwHhcNMjYwNzI4MTYwNDQ2WhcNMjYwODA0MTYwNDQ2WjAYMRYwFAYD
VQQDEw02YTY4ZDMxZS05MjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6LKiBv2e2aph5ymZyIHJoGxZMiiI8rTr9mcxV+x7onhtBfizwXBTVE/ym09l
aYHBLuadJh7aWSo0OE4ClMdNLtiAyeDmYVUyuJ4g8/+T5lii+fy4loinZBSin/qu
QKgcXhzysYuPhWpGW40ztr9LuYVlHdhbFW7PcOrYzzcd30Pi5aHR/d2q69J8f2h9
Yd39VuwRt1pAh//bDQj09+t7q56rx1os8nsghpw+gR6+6S+s3JLBGnyaxGyqnPGV
SeLwwH/PlM5iNlQ/nJfoo3ZGZNWXQWw7zNkrVap9iX6Y9qbO3V5XJOjnlGdgqbUE
bOh6+s3zgZpEXqFcvdz9nkoh/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOCAaJRX
2IaiyXayERCuvQ4UGE5cMB8GA1UdIwQYMBaAFNVnktWX6c3QK/wW0LSS2j2q4ID8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzFFQS85QUYzRUQyODVF
RUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpkQXJfQmJRdEpMYVBhcmdn
UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFXZVMxWmZwemRBcl9CYlF0SkxhUGFyZ2dQdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzFFQS85QUYzRUQyODVFRUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpk
QXJfQmJRdEpMYVBhcmdnUHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtaEDApWiGLAHwQDVcntPyf5Z9FK7/CYve4dugV632+fBjat+/WO/HEoaR2bD
792W7QyeB3o/uO8Nz06hDgFXDIOkR+P/w+wQhUMSSpS6GkEB9GSTJz8DACG16HND
nao8Yy0tRsa9b52tYj5JwhtYlzZzo+ITGihKGXA0mHON0CVq027on3HQvei+o4oK
1A9XcG2TS3McPuufQmhzbNIl0Qh6dGlDjEYVEaIbwYn/w/swAdHvA/qnH0c4dBX3
EgbjZb0jrLL6gmHz1MuGLNsUvs43Dr+V49UecgBLTNlKZhJsFDw/aRVNXe7SP626
5BVNiFb6n+kBOE1g71R8uicx4Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:30:07 2026 by rpki-client