
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
File: 1Sj61Lh2q_twrziSIg8pPheRtrw.mft (raw, json)
Hash identifier: /bhAZXdIMCJFN0R4FdFWnwT2F630L0dxtM/Mdp3VSY8=
Subject key identifier: 52:1B:C9:66:99:D7:CE:4D:13:72:78:F6:BA:04:54:53:41:DE:2E:33
Authority key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
Certificate issuer: /CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Certificate serial: 041C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
Manifest number: 040A
Signing time: Thu 23 Jul 2026 01:18:36 +0000
Manifest this update: Thu 23 Jul 2026 01:18:35 +0000
Manifest next update: Thu 30 Jul 2026 01:18:35 +0000
Files and hashes: 1: 1Sj61Lh2q_twrziSIg8pPheRtrw.crl (hash: lnFDX4y/KHXFniJVFJSrgskHUgE4vFoujlIupTcP+j0=)
2: C0E56FB2D56B11EFB540FB53C4F9AE02.roa (hash: wKVvfJXDJ+GEw46MkJTvDGmaoIKWVTsB347F+vgLfNU=)
3: A0841A68D0D511EC81001E73C4F9AE02.roa (hash: JU2R1iWegqyOEY3wh1qfZrk7NhgHNN+31mJpziiTlZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:18:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1052 (0x41c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE6C5, serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Validity
Not Before: Jul 23 01:18:35 2026 GMT
Not After : Jul 30 01:18:35 2026 GMT
Subject: CN=6a616beb-150d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ea:66:03:73:ba:75:cf:b9:7a:12:9d:86:73:
8c:dd:77:a5:a2:05:5e:4f:fb:a5:04:ac:71:23:79:
c1:1a:e8:c4:cf:c5:37:78:23:94:bb:da:0a:d6:70:
02:4b:92:6b:9b:6f:19:38:fe:e9:b2:01:8a:e1:84:
13:5b:6a:dd:2b:83:47:ca:9f:00:ff:46:9d:5b:0d:
29:67:f3:df:72:7f:f7:0d:27:4a:03:e6:f7:22:92:
ca:e8:b6:4d:e3:9b:72:79:2c:cf:39:81:83:f9:1b:
fd:ea:2a:0d:e1:76:29:0a:62:66:80:66:7b:18:0b:
5c:f4:b7:e8:ee:4b:57:dd:f1:c7:3a:a2:a0:1e:a3:
22:61:e7:ba:b2:01:7d:36:b7:5d:d9:11:d0:6f:b4:
9e:b8:53:ab:a8:71:da:96:99:15:ee:c2:4c:d6:6a:
f8:a7:9b:22:aa:79:61:1e:36:a8:22:78:d4:f7:cd:
60:7a:61:65:eb:71:46:fe:75:16:37:47:f5:28:f8:
bb:cb:9f:04:ff:f7:6b:b3:93:4d:d6:b6:c7:95:bb:
28:69:99:fd:09:13:00:bb:a9:69:bd:3b:d8:5a:9d:
6b:b5:1b:79:b7:b1:43:c7:72:6d:b3:60:75:84:7e:
9c:de:f2:18:50:ea:54:8b:f0:a8:89:c5:c1:90:0b:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1B:C9:66:99:D7:CE:4D:13:72:78:F6:BA:04:54:53:41:DE:2E:33
X509v3 Authority Key Identifier:
keyid:D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:d2:84:25:2a:50:04:40:b4:1b:98:aa:a7:11:d6:ea:22:12:
ea:69:ea:63:1b:ad:01:2c:08:dd:8a:0b:3d:0a:64:54:e5:62:
77:bf:3e:13:84:49:3d:a3:2a:eb:12:c1:cd:42:5a:50:30:e6:
30:e2:56:cf:08:31:e7:b4:cc:4e:2f:4c:ae:d9:dd:4e:66:c3:
ac:d2:ce:5d:f3:5a:40:80:4f:59:b6:36:e4:21:d2:0c:40:f9:
5b:5f:b8:c0:ac:06:98:2b:cd:db:0f:fe:d8:eb:78:11:39:e9:
ed:4a:30:f8:51:cd:61:a9:4e:33:9b:03:8b:de:ef:a7:3c:ff:
34:28:00:cb:25:e7:57:7a:21:25:2f:1c:15:3e:e9:9b:e1:0b:
1d:97:aa:e7:27:69:ea:1f:2a:5f:94:5b:af:c4:4f:f8:a2:10:
c5:48:93:f9:a9:4a:10:3f:41:96:77:e3:dc:9b:15:e8:05:b6:
ce:d4:2e:8e:6a:1a:a4:1b:c4:92:d0:1a:b9:4c:93:b5:20:a0:
a3:ad:9d:2a:a3:df:29:ea:03:31:46:81:00:54:d2:64:3a:7a:
69:f4:4e:d2:b0:0f:d9:55:4c:70:cd:1b:b9:22:39:a6:5e:95:
69:0f:11:2e:e1:96:c2:55:bb:0d:10:60:4e:bd:51:28:23:58:
f9:0f:3d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:05 2026 by rpki-client