
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
File: 1Sj61Lh2q_twrziSIg8pPheRtrw.mft (raw, json)
Hash identifier: +50+qwU4WZFwSuxJVfP1HlNzZEdeTGS3hDMtjL/XaWo=
Subject key identifier: EB:02:BA:7B:C6:BB:68:23:4F:88:9C:26:47:EC:BE:FE:3A:09:AA:05
Authority key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
Certificate issuer: /CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Certificate serial: 041F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
Manifest number: 040D
Signing time: Wed 29 Jul 2026 01:09:45 +0000
Manifest this update: Wed 29 Jul 2026 01:09:45 +0000
Manifest next update: Wed 05 Aug 2026 01:09:45 +0000
Files and hashes: 1: 1Sj61Lh2q_twrziSIg8pPheRtrw.crl (hash: 0CbqSdFi7rGseafxemQgBEvgcYqnZVPxcE+s4QU4Xvk=)
2: C0E56FB2D56B11EFB540FB53C4F9AE02.roa (hash: wKVvfJXDJ+GEw46MkJTvDGmaoIKWVTsB347F+vgLfNU=)
3: A0841A68D0D511EC81001E73C4F9AE02.roa (hash: JU2R1iWegqyOEY3wh1qfZrk7NhgHNN+31mJpziiTlZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:09:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1055 (0x41f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE6C5, serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Validity
Not Before: Jul 29 01:09:45 2026 GMT
Not After : Aug 5 01:09:45 2026 GMT
Subject: CN=6a6952d9-a16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:8d:f9:71:6d:c5:8c:17:10:4c:d2:15:1d:
91:19:d5:ba:ba:cc:3b:bb:3e:d6:b7:ea:7b:a2:ff:
0d:c0:aa:bb:5d:29:de:1b:82:e3:2d:cb:61:71:93:
34:a0:d5:3b:a5:89:cf:0c:e0:90:c8:bd:15:83:98:
b3:da:ee:97:66:f2:63:d0:16:67:db:de:7a:b1:86:
31:a7:ab:ef:35:12:c1:64:16:40:4a:57:19:00:0a:
c4:dc:b9:3a:a9:b0:e7:fe:aa:02:63:6e:12:04:07:
ab:16:10:37:1a:bd:c5:84:13:48:7e:64:95:9d:13:
ab:94:f4:bf:9b:50:48:da:74:4c:88:93:5d:11:ae:
96:af:fa:ed:35:9c:71:c6:d0:20:94:3c:89:1c:60:
c2:6a:80:ae:13:f5:63:b2:97:20:5d:2d:d0:75:bf:
11:1c:f8:8a:62:bf:26:27:b8:1b:d1:95:5d:70:dd:
07:9f:b0:3c:25:cb:76:bc:6e:c1:13:e7:a3:5d:5d:
e9:28:0e:0b:14:89:a7:9f:44:10:2e:db:00:26:fa:
cb:41:e5:6c:27:70:a9:04:ad:dd:b9:c3:00:b5:ad:
2a:fb:e9:a6:9e:c4:e1:f2:ea:49:0a:04:ff:c0:8e:
0f:31:f8:e8:52:65:c0:94:d2:aa:e9:66:7b:e5:a9:
01:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:02:BA:7B:C6:BB:68:23:4F:88:9C:26:47:EC:BE:FE:3A:09:AA:05
X509v3 Authority Key Identifier:
keyid:D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:fe:25:f6:91:72:eb:2b:5e:be:ff:8d:23:95:99:c9:a3:3d:
c5:9e:98:bc:c7:51:04:67:27:09:b1:86:b9:2c:b2:48:cb:7b:
bf:f6:ca:31:d9:7d:22:b5:0c:0d:c5:7b:33:ef:14:3f:88:9c:
4e:55:9b:07:23:1b:39:3e:21:ad:08:b5:f6:a7:d7:d6:db:6a:
08:2d:0d:32:d5:3d:82:02:1e:34:97:b4:c7:3b:0e:ad:40:0e:
38:21:1f:59:22:89:22:9b:8f:ff:4a:2b:7c:05:06:0f:48:22:
a4:35:7a:bc:fc:af:db:f9:63:7d:eb:4f:9d:43:da:90:9c:9c:
45:d1:2e:db:75:45:70:5e:c3:26:fe:4b:88:d9:27:cd:5e:cf:
e5:10:1c:71:cf:f5:c4:f3:9a:cb:71:d6:2a:ce:ff:81:93:75:
b1:cb:af:98:65:0c:fe:15:f3:9a:96:07:ed:0c:eb:82:3a:a5:
3a:0d:5e:e4:09:d1:4c:bd:92:77:51:92:ef:a9:72:e2:d6:4e:
e6:b7:bc:45:79:bf:1d:8c:5a:37:f0:aa:71:e9:cd:d7:b7:1a:
5a:24:a4:2c:01:de:ef:ec:a6:f6:ac:26:c7:82:b6:a3:81:f7:
64:8c:18:8e:20:83:f7:f1:ec:af:3d:e6:6a:dd:c3:6f:ab:5b:
83:3a:8a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:53:01 2026 by rpki-client