
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
File: W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft (raw, json)
Hash identifier: xgCaWNmVXH1dTvCa4d7nol20CamtqCS1U+h4TXKPAWk=
Subject key identifier: 4D:E6:59:AF:7A:F4:57:BA:C6:37:0A:2D:14:26:75:D1:F6:1F:B8:09
Authority key identifier: 5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41
Certificate issuer: /CN=A91E1936/serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041
Certificate serial: 01AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
Manifest number: 019C
Signing time: Wed 15 Apr 2026 03:54:23 +0000
Manifest this update: Wed 15 Apr 2026 03:54:23 +0000
Manifest next update: Wed 22 Apr 2026 03:54:23 +0000
Files and hashes: 1: W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl (hash: mDu9rRsmfSnRBC2rtcrZ1+ziyEbzLOEs5gmYp6z7j00=)
2: CE88A98AC63611EEA0C70259C4F9AE02.roa (hash: qcHwawytQ/8AG7cdx5hu0AuGvZCgLwDCZXBXxMtoIVk=)
3: CF6BED9EC63611EEA0C70259C4F9AE02.roa (hash: a3vM/Ppf0GxiRLmbleY13cfOquo7BmGPzlHgh28TyyE=)
4: 0423873AD9C511EEA944FA80C4F9AE02.roa (hash: vrmDfWTNDEfAAGTB6RMWU6c9oOq8iON07z3iMp7YpRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl
rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 03:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1936, serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041
Validity
Not Before: Apr 15 03:54:23 2026 GMT
Not After : Apr 22 03:54:23 2026 GMT
Subject: CN=69df0bef-1c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0c:0d:35:44:71:9e:2b:90:aa:b0:48:e0:78:
f3:4c:dc:9d:02:10:8d:bb:73:90:04:50:bc:f5:b2:
88:ca:a3:85:51:3f:84:3f:5b:29:93:68:16:59:ac:
bd:7c:8b:ec:c8:7b:4e:c3:fc:2c:a1:bc:74:b3:8d:
d0:88:6d:4d:08:ba:e8:91:ea:15:c7:7c:84:36:3b:
e6:ef:f5:3a:d9:0a:11:31:86:c7:c1:fb:23:47:1b:
94:c6:90:13:62:1c:13:2a:4e:f6:fa:0b:56:33:f4:
4b:17:b0:00:b7:dd:7e:29:ab:84:e8:f0:4d:14:57:
d5:a6:9b:7b:4f:0c:e5:8e:8f:67:bb:05:fa:c5:46:
e0:e6:f4:2e:df:9a:75:8e:e1:15:f7:a7:93:3e:27:
a9:5a:8d:94:24:e6:c3:b2:eb:b2:56:ef:4e:2b:86:
79:58:43:87:a0:20:84:51:9e:55:94:2c:5d:d3:e8:
e0:cc:ec:6e:66:6e:1c:c7:65:32:ae:fe:be:eb:08:
b3:0f:57:d6:21:d9:37:64:d7:94:d0:0f:a2:86:6a:
d1:e8:38:d2:8b:0b:24:e4:db:95:1c:32:a8:61:64:
b6:c6:3f:83:b2:45:86:c7:d8:2a:2f:91:4b:da:2f:
4e:5c:48:13:e4:00:be:c5:99:2d:c0:87:85:30:18:
7c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E6:59:AF:7A:F4:57:BA:C6:37:0A:2D:14:26:75:D1:F6:1F:B8:09
X509v3 Authority Key Identifier:
keyid:5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:86:a4:a1:36:86:07:04:41:64:df:d0:32:45:cf:f2:a6:a8:
73:a8:8f:f9:65:91:1e:22:ce:94:66:26:dc:a7:e0:dd:7a:6c:
22:c6:17:20:ee:5e:f5:97:37:e9:7c:74:ef:5c:e4:4e:9c:b1:
35:55:d8:74:b3:fa:80:2d:7d:23:9b:28:da:c7:77:71:af:0c:
4a:de:00:c1:67:a0:5b:7e:53:64:b2:b6:cc:cb:c5:f8:13:ff:
3b:39:d2:e6:a5:a2:fc:7a:02:b6:88:7a:39:e4:e5:3d:9d:2f:
62:a8:49:9a:48:97:90:81:cf:32:59:d9:2f:f7:93:93:31:41:
19:ad:65:70:b0:3f:70:78:88:15:c5:75:c4:fb:76:4d:26:3e:
ed:16:c5:6d:ea:c1:61:b8:99:9f:f5:82:51:a3:a0:d2:be:41:
4a:b8:d8:47:e2:b6:aa:37:5f:60:47:a7:9a:21:0d:c4:d7:97:
4a:e7:66:5b:7c:6a:11:cf:b8:5a:bd:7b:ef:14:f8:d6:e5:57:
45:56:96:03:92:0e:fd:bd:0c:5d:fe:16:98:d9:66:91:6f:9c:
0f:9b:de:b1:fd:a2:34:7d:0e:94:ce:a1:c3:61:81:00:39:7a:
48:55:c7:c3:2c:4f:43:8a:84:8f:05:68:dd:c9:3b:42:70:03:
26:6c:c7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:44:24 2026 by rpki-client