
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
File: 1Sj61Lh2q_twrziSIg8pPheRtrw.mft (raw, json)
Hash identifier: viRe3K0OuEavn5t78M/trZQOc2/JSe5UlxlZY07S8Jk=
Subject key identifier: D6:E0:78:CC:F6:A8:8A:BC:B1:E0:A3:02:F5:52:5E:20:CA:D2:FF:99
Authority key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
Certificate issuer: /CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Certificate serial: 043B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
Manifest number: 0429
Signing time: Mon 21 Sep 2026 00:07:25 +0000
Manifest this update: Mon 21 Sep 2026 00:07:24 +0000
Manifest next update: Mon 28 Sep 2026 00:07:24 +0000
Files and hashes: 1: 1Sj61Lh2q_twrziSIg8pPheRtrw.crl (hash: ALEbDcVCdLuGbizmS0mau5U6lXM+QdmIiONUj44j6Ls=)
2: A0841A68D0D511EC81001E73C4F9AE02.roa (hash: JU2R1iWegqyOEY3wh1qfZrk7NhgHNN+31mJpziiTlZc=)
3: C0E56FB2D56B11EFB540FB53C4F9AE02.roa (hash: wKVvfJXDJ+GEw46MkJTvDGmaoIKWVTsB347F+vgLfNU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1083 (0x43b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE6C5, serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Validity
Not Before: Sep 21 00:07:24 2026 GMT
Not After : Sep 28 00:07:24 2026 GMT
Subject: CN=6ab0753d-5652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:d5:25:80:8f:2a:f6:77:d3:9f:5f:1e:b2:
de:54:7e:92:5b:a9:bb:1a:ce:ad:91:83:5c:1f:6d:
0a:49:07:16:58:15:81:40:d8:92:4a:16:eb:fd:d4:
43:b8:00:c6:43:41:80:d8:ce:47:36:94:6d:11:03:
5e:fc:8a:f2:0b:71:36:12:92:c2:17:94:67:9b:64:
07:73:1c:1f:cc:0a:2d:2e:24:50:e2:30:93:d7:7f:
38:fd:98:f2:27:ca:51:49:ac:3f:0a:41:fe:60:08:
59:0d:e1:f4:dc:d2:8f:9f:ee:22:0e:ed:8e:4a:dc:
ce:01:4c:cb:bb:b9:b7:ae:df:3b:63:a8:6b:ce:e0:
53:54:9c:a3:95:f9:39:1e:20:5c:70:29:c0:de:04:
fc:a3:c3:19:8b:2a:66:38:be:f5:32:5d:c4:89:e2:
e4:60:50:63:df:ac:4a:10:4c:3c:09:aa:0a:e9:98:
a2:92:74:e6:03:a2:f5:6c:86:7c:8c:58:fe:dc:d5:
3d:4e:cb:fc:c1:c2:7f:93:3a:8f:ac:66:ee:12:73:
78:cb:77:5f:60:1b:ac:a4:63:2e:b8:ba:59:9a:0a:
de:d2:b4:6d:f7:7f:5e:80:a0:79:6b:22:07:f5:fb:
06:ef:48:c1:50:99:f1:88:71:f1:a2:c3:5a:6e:fb:
b7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E0:78:CC:F6:A8:8A:BC:B1:E0:A3:02:F5:52:5E:20:CA:D2:FF:99
X509v3 Authority Key Identifier:
keyid:D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:92:8f:3e:6f:92:80:e9:c5:37:c6:fe:02:2c:26:58:b9:2d:
2b:88:91:de:2d:b9:13:c2:65:24:87:d1:72:dc:58:94:74:d4:
06:29:8e:05:3b:23:0d:3e:f0:60:79:55:1d:b6:5d:84:f6:6d:
48:b2:a0:48:81:ef:fd:c2:9b:d7:ca:0f:4d:af:dd:aa:68:9a:
6a:b4:f0:88:0e:53:5e:0c:c7:52:c8:46:92:2e:8a:d8:6e:85:
ad:d4:15:31:1c:94:18:e1:99:0f:59:86:3f:ec:5f:62:4f:74:
ee:c1:d6:e0:54:1a:e0:ae:26:b1:fa:97:d7:b8:d5:ec:74:69:
4a:82:e2:05:32:45:8d:38:4e:f3:27:e2:75:9d:f6:e9:bb:5b:
49:fb:9c:d6:28:42:3a:79:fb:d5:d3:02:5f:53:9c:79:7f:90:
f1:9b:99:cc:c9:1b:1f:9c:c5:90:9c:dd:63:cf:ee:0f:67:9a:
15:c4:82:93:ef:d0:24:38:0c:02:91:45:9d:49:5d:fb:c7:8a:
19:d5:02:f8:cd:26:03:7d:89:9f:fd:4d:2a:9a:ad:bd:3a:d0:
2e:31:75:fa:d3:21:71:38:4d:80:0c:f5:8c:0f:88:d2:9b:4c:
52:60:7e:19:5a:6f:72:0e:ba:2a:3b:06:de:9d:e3:f2:3a:8d:
23:17:2c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:32:40 2026 by rpki-client