
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
File: E1-CL_RWQDka60bEN1QQAmBpOlc.mft (raw, json)
Hash identifier: oA+o2ji6PbvbpI5YiFuu7nWEnq3++JY96xERceuMWGE=
Subject key identifier: 21:59:48:87:D0:E7:E6:D4:57:C1:FF:6E:BA:CE:50:8B:70:AB:6C:AF
Authority key identifier: 13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57
Certificate issuer: /CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57
Certificate serial: 25DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
Manifest number: 25DE
Signing time: Wed 22 Jul 2026 14:49:18 +0000
Manifest this update: Wed 22 Jul 2026 14:49:18 +0000
Manifest next update: Wed 29 Jul 2026 14:49:18 +0000
Files and hashes: 1: E1-CL_RWQDka60bEN1QQAmBpOlc.crl (hash: bHx9DVZsTUEJGzLhnXDmBpNUngqxzbfbJilFXOophaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl
rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9694 (0x25de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9484, serialNumber=135F822FF45640391AEB46C43754100260693A57
Validity
Not Before: Jul 22 14:49:18 2026 GMT
Not After : Jul 29 14:49:18 2026 GMT
Subject: CN=6a60d86e-2e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1b:e9:a2:a0:d2:f1:88:51:5c:49:60:7a:85:
d4:6b:36:48:97:56:de:f8:8c:8a:2b:4b:d8:de:6e:
67:7b:55:c8:a4:75:a7:5f:d7:dd:ed:72:06:fc:78:
1c:c9:33:bf:0a:fb:e3:c4:69:4c:7d:1d:f1:03:92:
77:3c:b7:15:df:18:d8:75:04:45:46:22:80:0f:31:
04:02:8d:c0:40:ac:0a:3d:0b:70:11:c3:01:b8:35:
ad:b6:7c:bf:96:c9:f5:e7:f9:4a:0f:6a:90:52:80:
c0:39:f3:65:9c:6e:5b:b9:59:b4:fa:ea:d0:58:4c:
db:34:1e:35:9b:8f:37:38:50:a3:4d:2f:89:c3:90:
7c:b9:de:f1:2a:45:fa:11:5b:d4:0f:f4:3b:6e:93:
c5:58:fb:6d:50:08:4d:29:81:75:7a:96:09:18:d5:
0c:6e:1d:d5:19:e1:d8:bf:ae:ee:94:57:37:0f:72:
d1:2e:be:30:10:63:f5:a7:34:5b:00:b3:ed:a3:f7:
39:06:63:a6:67:3b:ca:4c:58:b5:00:7d:23:e6:bc:
b6:e9:d9:ce:9e:33:52:55:96:87:51:59:ca:ac:1d:
09:c7:5a:25:a4:bc:48:cd:7c:c0:cb:70:01:25:ca:
c6:e0:a4:4a:eb:e2:3a:0a:8d:6d:2f:95:cd:c1:d7:
7c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:59:48:87:D0:E7:E6:D4:57:C1:FF:6E:BA:CE:50:8B:70:AB:6C:AF
X509v3 Authority Key Identifier:
keyid:13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:02:13:42:65:c3:6e:7a:6b:4c:13:15:a5:f6:f3:fa:59:ca:
74:a4:cc:6d:c4:2d:5b:2c:b1:2c:7c:37:a8:4b:95:07:59:af:
ce:4f:a5:0a:e5:79:d7:98:51:83:c8:18:42:4b:eb:b0:41:a6:
af:37:8a:f1:cd:03:b6:3c:cd:5c:30:34:4c:b0:3e:ec:7c:c6:
7f:4d:7d:9e:64:42:d4:ca:c4:e4:63:e7:9c:2d:93:7e:29:66:
96:b6:62:0f:42:bc:ff:16:c5:34:1c:8d:81:4b:31:5f:32:0b:
1d:93:26:26:81:f1:83:ec:74:c7:c1:c9:e3:8c:fc:b5:3f:57:
97:c8:48:f1:4e:29:1c:5e:0c:75:80:89:df:43:29:f9:a7:9b:
1e:44:b9:44:5b:89:8a:30:cd:13:f4:50:de:7b:2e:fd:d9:99:
9c:00:fc:af:68:30:a0:b4:85:26:88:be:20:11:b2:81:18:45:
7d:90:10:6d:a2:43:6d:bb:72:72:aa:8e:52:ad:c0:d7:55:6f:
f0:3b:bf:9e:5c:ac:41:9e:a9:40:86:e8:12:b3:f1:77:60:5b:
6c:eb:74:bc:4b:72:41:a8:9b:9d:5e:c3:b6:36:4c:e7:0b:bd:
ce:56:6f:b0:d7:19:89:09:3b:29:14:35:85:fa:4e:1c:bb:2a:
dc:a9:f9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:49 2026 by rpki-client