
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
File: W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft (raw, json)
Hash identifier: FBfjO49jAuf3tBMeWJzg8nDnWQW0kkV5RUeiOOWw7Rk=
Subject key identifier: 47:A9:26:2B:3B:B8:D7:5C:5D:B4:09:C6:41:DE:AE:0F:C6:36:E7:6D
Authority key identifier: 5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41
Certificate issuer: /CN=A91E1936/serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041
Certificate serial: 0214
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
Manifest number: 0205
Signing time: Mon 09 Nov 2026 03:17:36 +0000
Manifest this update: Mon 09 Nov 2026 03:17:36 +0000
Manifest next update: Mon 16 Nov 2026 03:17:36 +0000
Files and hashes: 1: W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl (hash: djDJCeoR2xD33kjIALc04HyX9w1SfatYqYrqS+CrpDg=)
2: CE88A98AC63611EEA0C70259C4F9AE02.roa (hash: qcHwawytQ/8AG7cdx5hu0AuGvZCgLwDCZXBXxMtoIVk=)
3: 0423873AD9C511EEA944FA80C4F9AE02.roa (hash: vrmDfWTNDEfAAGTB6RMWU6c9oOq8iON07z3iMp7YpRs=)
4: CF6BED9EC63611EEA0C70259C4F9AE02.roa (hash: a3vM/Ppf0GxiRLmbleY13cfOquo7BmGPzlHgh28TyyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl
rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 03:17:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532 (0x214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1936, serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041
Validity
Not Before: Nov 9 03:17:36 2026 GMT
Not After : Nov 16 03:17:36 2026 GMT
Subject: CN=6af13b50-e67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:e9:ba:cc:a0:22:cb:12:02:db:42:3a:f9:
23:d2:6e:a4:16:82:9f:fb:3e:8e:89:b2:97:2a:90:
ca:dd:37:1b:8b:c8:92:d8:5c:9f:26:58:86:af:ed:
58:db:40:78:13:28:88:19:a3:67:8e:b3:3e:b7:ff:
00:0e:7c:16:8f:dc:68:b2:38:67:b9:91:a7:d5:71:
a5:c9:d2:4e:b2:b2:ec:9c:3c:a5:98:64:fd:5a:33:
2d:f4:02:39:44:d9:58:9e:20:78:62:d6:e1:dd:0b:
a8:2e:47:56:a2:0e:b3:3a:ee:da:96:49:26:4c:24:
e1:d1:ed:64:c6:29:79:c1:59:31:06:9d:09:ff:d3:
4f:63:c5:fa:00:34:6a:8b:cf:b3:eb:70:bc:93:04:
00:8e:c0:7b:7f:f3:15:47:a1:17:ea:91:49:d4:e3:
8b:80:a5:7e:4a:27:ae:c6:8c:fe:41:30:9f:f5:09:
5d:c3:57:b8:6c:67:2f:77:97:85:7b:35:50:4f:28:
4a:2b:60:7a:f4:da:13:9b:96:77:0d:1c:3d:aa:e6:
f0:81:12:9b:fc:10:90:35:d5:27:77:21:4e:b0:cb:
ec:65:de:ea:b2:08:ac:f1:e1:cf:cd:a3:88:cb:a6:
b7:08:b7:ab:f8:67:5d:fe:2e:9f:ef:35:6f:0f:50:
d1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A9:26:2B:3B:B8:D7:5C:5D:B4:09:C6:41:DE:AE:0F:C6:36:E7:6D
X509v3 Authority Key Identifier:
keyid:5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:10:95:9d:d9:e7:53:98:06:89:67:bb:a2:fe:d9:1c:6e:11:
89:8f:eb:f4:9a:0a:5e:60:0e:db:28:40:ea:25:e9:46:ce:b8:
0b:44:7b:e4:18:c8:ad:96:06:10:6e:0b:de:cd:7d:db:c6:ac:
b8:0a:75:f9:64:39:00:ad:ba:80:2c:b9:3f:2a:47:e7:5c:d8:
60:72:c9:2f:a7:60:de:7d:6d:ae:ee:bf:5c:da:a5:93:5d:54:
9e:76:82:9e:91:d1:22:96:00:76:52:2d:87:1a:fe:35:24:c6:
4f:8e:0b:84:cc:5e:15:7a:5a:c8:b8:25:40:f7:b8:ba:09:73:
96:83:81:8e:9b:8a:89:67:51:18:a4:21:fd:ce:6f:50:7c:fc:
76:3d:ef:b4:a7:3a:48:42:af:0f:ac:59:9b:e5:ec:76:6b:e2:
12:d5:65:64:e9:01:b4:e3:31:e5:f6:26:4f:4c:4b:0d:ac:cf:
a7:61:75:72:39:5b:9d:88:3b:e3:1f:88:3e:d9:d6:71:83:14:
85:43:62:82:81:ff:79:14:10:3d:23:94:ac:dc:2e:69:12:ec:
12:a4:15:c8:8c:69:d6:7e:80:67:c3:f2:b3:e9:42:96:3f:0c:
fa:54:c6:3e:7e:c1:20:38:26:67:08:89:b9:87:72:88:ca:66:
09:bb:0a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 06:37:30 2026 by rpki-client