
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
File: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft (raw, json)
Hash identifier: iVv4d8js6Yi6g8RG1HEV4S0fB0BVLYB9Q6DNlPYBKuQ=
Subject key identifier: 42:B0:70:D8:F6:B7:CB:E5:2D:24:41:3A:52:BB:F0:40:81:01:9C:F1
Authority key identifier: D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F
Certificate issuer: /CN=A91CFFBE/serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F
Certificate serial: 0688
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
Manifest number: 0681
Signing time: Tue 06 Oct 2026 22:40:10 +0000
Manifest this update: Tue 06 Oct 2026 22:40:09 +0000
Manifest next update: Tue 13 Oct 2026 22:40:09 +0000
Files and hashes: 1: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl (hash: Hrs7kMNN4jl7t8HLRFEGxcetq4VAAEauChWaWa0JjOM=)
2: C23617A8581011F1A51D608BA0833773.roa (hash: sCsgKLK+hoKhomlVo1jhxD2dTFhjbsrP7RzMdHZeDKE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl
rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1672 (0x688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFBE, serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F
Validity
Not Before: Oct 6 22:40:09 2026 GMT
Not After : Oct 13 22:40:09 2026 GMT
Subject: CN=6ac578ca-faef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:dc:0e:91:8c:a2:0d:81:15:b2:20:64:78:
5e:26:0f:73:48:ae:ee:68:9e:87:3d:ca:6c:74:9e:
bd:80:3d:d6:37:f0:45:e8:c4:37:bf:19:a9:d3:72:
46:12:d7:45:f8:f8:82:75:ab:87:29:27:5b:fa:b8:
fe:78:17:99:d6:9c:59:63:cf:fe:2a:94:d4:da:52:
b1:5a:bb:fc:8a:e8:c2:f2:40:0b:e5:0a:d6:9c:ee:
c9:6c:3e:69:7b:f3:49:1b:91:9d:47:ed:9f:96:7c:
e5:09:85:4a:38:29:1c:70:03:6c:be:b4:8a:24:b4:
7c:e4:8c:e9:15:46:6d:03:ee:0b:84:69:83:6d:0c:
6a:4b:7f:0f:10:7a:41:86:44:60:b7:8f:0f:a6:5a:
eb:65:bc:9f:0c:d3:41:0d:ab:e5:a4:4f:cb:9e:9f:
60:3e:90:d0:a6:b8:83:c5:a2:33:6e:03:1e:9f:7b:
91:ea:42:8d:09:5b:2b:fd:9c:fb:e7:a8:17:b7:5e:
e9:6b:83:f0:e3:03:91:6a:d0:93:cb:79:4f:cb:63:
10:e5:fd:e5:8d:36:b9:90:13:d8:97:ee:86:a8:19:
f6:3a:0c:e0:44:43:f8:4b:c0:34:06:8d:9c:83:48:
ef:cb:fa:1c:1d:e5:53:e9:c4:a1:6e:2e:17:4e:c6:
f0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B0:70:D8:F6:B7:CB:E5:2D:24:41:3A:52:BB:F0:40:81:01:9C:F1
X509v3 Authority Key Identifier:
keyid:D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:f5:4f:df:ed:20:78:15:46:56:2f:35:33:7d:aa:67:00:90:
18:ed:44:f6:81:33:9a:01:4d:da:19:0b:04:9b:c1:e3:eb:f3:
2c:4f:57:f4:16:9b:df:f3:64:72:97:9a:e3:ee:f9:ed:a6:e8:
4c:bf:99:26:d2:f4:95:d3:fb:f0:19:c1:c3:be:0f:27:81:68:
cd:99:37:10:d0:10:06:34:d9:0c:31:c6:a4:f3:bd:2b:8e:f4:
c6:bb:82:54:2f:8a:b9:3c:96:e2:37:b0:5d:14:19:a5:87:03:
c4:fd:99:d3:91:93:ba:ce:bf:ca:14:e6:46:85:f3:10:be:7f:
96:cc:49:56:4d:02:84:a0:83:b0:0c:dc:3b:20:23:a5:3f:88:
d8:26:dd:ff:df:fe:3b:cd:f2:d3:d6:c3:e0:e9:51:c0:ca:b5:
0a:12:ed:1a:ed:b0:4e:6b:7d:eb:23:ac:c4:54:13:9e:a0:96:
0d:61:50:8e:6e:ab:a5:f9:73:9c:77:ad:a1:bf:42:8c:53:03:
55:6b:15:c6:cf:57:ca:9e:b9:7d:bf:d1:da:32:18:76:6e:26:
83:9f:40:e4:da:83:5a:61:e7:d8:39:8e:41:3e:55:2f:e2:4c:
6a:40:e6:52:64:b7:b5:21:ab:ad:cb:ec:ba:c7:36:84:d4:87:
c4:ba:1a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:16:14 2026 by rpki-client