
$ rpki-client -vvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
File: 1WeS1ZfpzdAr_BbQtJLaParggPw.mft (raw, json)
Hash identifier: E9FtiObhSx+VedmurHpT5fywbunvn5x1UU8gFDUgjW0=
Subject key identifier: 59:02:7B:10:25:1A:50:3B:04:88:3A:9C:C5:A3:35:30:C1:61:3A:0F
Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC
Certificate issuer: /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
Certificate serial: 1FDB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
Manifest number: 1FAF
Signing time: Tue 12 May 2026 15:59:59 +0000
Manifest this update: Tue 12 May 2026 15:59:58 +0000
Manifest next update: Tue 19 May 2026 15:59:58 +0000
Files and hashes: 1: 1WeS1ZfpzdAr_BbQtJLaParggPw.crl (hash: DYzcsxjsyya8hw7OPSM9wHGDtUwtUcd9Clgj0zS3skY=)
2: 317CF2A634E811EFA8BEA738C4F9AE02.roa (hash: +mfxCLFmT0kAngWE0QR8njelgu56dCQ+gYLAva7jY7M=)
3: 500DFDA8578611EA8CC3B124C4F9AE02.roa (hash: 5LNSq5pdKybofu1UpxkFVG9Ohf/hU7Yt5u2ontP0MD0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl
rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8155 (0x1fdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91731EA, serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
Validity
Not Before: May 12 15:59:58 2026 GMT
Not After : May 19 15:59:58 2026 GMT
Subject: CN=6a034e7f-625b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:23:f2:31:dd:43:ed:86:21:39:20:fa:ac:
a5:85:7d:6c:7b:b7:f5:fb:a0:db:f3:b5:9d:b5:57:
6a:56:94:fa:4e:2a:9a:5c:bc:67:46:87:5b:01:c6:
9d:ec:32:08:04:9b:f1:e1:7b:8e:d7:f3:13:fd:a7:
7a:98:9a:0a:cb:35:bc:05:66:6b:23:5a:95:39:89:
79:3f:36:8c:9f:4d:67:62:26:82:87:3b:21:96:c0:
c0:2d:6d:d7:38:f9:5a:84:60:07:a7:23:e6:fe:1a:
b4:72:46:54:d9:2f:c9:a1:a3:b0:3a:9f:5e:ce:c0:
a6:f0:35:17:17:75:79:b5:d2:a1:2c:fa:00:cd:1f:
c5:c4:74:fc:43:87:20:63:e8:b3:66:43:ca:d7:38:
8d:7c:ba:e0:c7:85:72:38:1c:28:16:b2:7f:95:a3:
f6:98:a1:92:11:81:6d:30:43:27:18:25:c3:df:f4:
c6:74:55:63:f2:8f:48:27:d5:1f:90:62:c8:77:df:
ff:00:e8:90:14:ae:e4:af:98:07:58:a1:b2:6d:06:
38:a8:08:66:74:3e:09:32:be:53:ef:2a:e6:1a:bb:
05:d2:d0:e8:80:62:37:2d:4b:4b:ae:5a:c1:df:e5:
07:39:58:09:37:df:c1:22:64:eb:ac:0f:1b:2c:3d:
35:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:02:7B:10:25:1A:50:3B:04:88:3A:9C:C5:A3:35:30:C1:61:3A:0F
X509v3 Authority Key Identifier:
keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:5b:ac:8d:43:47:55:dd:b5:67:b4:f0:6d:4d:db:ff:47:d7:
9b:b0:c6:84:43:31:e4:6c:4e:49:a6:de:3b:c0:bf:85:89:f3:
04:c9:01:b5:55:d5:30:87:c8:1e:63:12:0c:96:cd:fa:ef:48:
09:61:54:b8:2b:0d:15:0d:cc:e2:ba:96:86:b1:16:fc:b6:27:
0a:fe:eb:9a:85:98:14:02:70:e3:ef:76:76:d4:c1:09:0c:f1:
dd:d3:28:06:d5:ed:3a:ac:e6:f9:ef:d0:80:c7:ea:aa:86:f9:
ba:2c:8f:99:c9:79:89:03:49:92:c3:6b:42:f1:d2:3a:a8:75:
01:3d:31:4c:a2:29:0b:46:a1:60:fb:67:8c:6e:04:a6:be:3a:
79:80:ed:df:df:e8:8b:6d:b8:50:98:fb:d7:50:76:7b:fa:06:
8e:bd:42:87:c8:e2:3b:5a:44:ca:1c:2f:a7:c4:f6:ff:b4:c7:
57:39:7e:26:5e:9c:1b:35:ad:f7:57:f5:90:a7:6d:0a:69:b7:
7a:c0:fb:0f:66:7d:fa:24:35:cd:bd:74:1d:33:b3:ab:83:3a:
e7:37:59:db:4a:f0:8e:b4:1c:f2:7c:f2:77:2a:98:33:43:3b:
5c:ba:98:cb:5b:25:4d:1e:71:a5:11:4c:c9:d4:b3:06:06:29:
20:f3:db:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:29:10 2026 by rpki-client