
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
File: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft (raw, json)
Hash identifier: 8qDS+/Qj0QhfQUIqvH7ux1JFwEifwMnyJrjJzGNefPk=
Subject key identifier: C3:6A:05:13:31:C8:74:91:6C:71:E4:A8:F6:87:42:44:37:C5:2E:42
Authority key identifier: D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F
Certificate issuer: /CN=A91CFFBE/serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F
Certificate serial: 0682
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
Manifest number: 067B
Signing time: Thu 24 Sep 2026 22:26:43 +0000
Manifest this update: Thu 24 Sep 2026 22:26:42 +0000
Manifest next update: Thu 01 Oct 2026 22:26:42 +0000
Files and hashes: 1: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl (hash: kRARQg+JeDZPLGBEMI0wE2WmaB0zxzdYt2TLYCS6ew8=)
2: C23617A8581011F1A51D608BA0833773.roa (hash: sCsgKLK+hoKhomlVo1jhxD2dTFhjbsrP7RzMdHZeDKE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl
rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1666 (0x682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFBE, serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F
Validity
Not Before: Sep 24 22:26:42 2026 GMT
Not After : Oct 1 22:26:42 2026 GMT
Subject: CN=6ab5a3a3-8e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:6f:d0:bc:0a:3c:a2:7d:e3:ab:cb:dc:8c:
5a:1d:34:1a:9c:4f:fb:67:3c:b7:af:b6:24:b6:1f:
02:36:4b:99:92:0f:93:fb:4f:e7:d8:b7:75:53:17:
be:e5:be:05:bf:8c:56:b8:fa:98:2e:60:79:b7:90:
b7:6f:7f:a1:0b:9c:c2:7d:fa:6d:7b:28:d2:8d:e2:
0d:a7:0c:2a:85:5d:e8:be:4d:0b:ba:fc:70:9a:6c:
b6:93:29:ca:49:34:90:13:ed:04:14:eb:bb:93:3b:
ad:26:9a:7c:15:4c:e9:7a:40:c9:1e:e2:9e:cc:80:
30:4c:66:0f:c0:8e:94:10:49:6e:6b:72:4f:f9:5e:
11:2d:78:ae:2b:86:06:84:bf:45:a4:df:c7:62:3d:
7d:49:25:79:6d:01:44:b8:e0:87:63:6b:72:85:a0:
23:47:1b:1e:e8:0c:48:90:ed:37:09:4d:4d:55:3c:
db:6c:d7:17:ea:51:2d:4a:38:2b:90:8e:36:be:b4:
be:73:6e:7d:b5:15:4c:d5:77:3b:16:26:5f:48:18:
45:91:77:fb:1b:34:19:08:82:a1:bd:21:eb:fa:3b:
51:e3:c9:5b:36:f6:f0:ad:ea:4b:ab:ab:17:5c:a0:
0d:ec:e4:e2:95:61:65:ec:aa:04:a8:d4:08:b3:99:
b8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6A:05:13:31:C8:74:91:6C:71:E4:A8:F6:87:42:44:37:C5:2E:42
X509v3 Authority Key Identifier:
keyid:D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d4:55:be:6d:61:39:af:c1:7e:98:72:59:37:a8:d5:38:ef:
58:af:cb:16:d8:95:a8:64:15:1a:df:7e:23:e7:af:f5:ee:d2:
aa:36:6e:94:fb:65:c9:d7:a4:3a:1e:56:68:36:06:86:57:9e:
ff:e3:ac:86:e8:e0:26:7a:98:8e:8d:b2:54:a7:1e:00:5a:92:
3b:2f:30:31:d1:60:4a:a2:a8:71:58:bf:eb:39:77:cf:f8:bd:
99:2c:85:ba:2a:72:5a:8a:7f:82:79:fc:4c:0b:6a:68:e4:5d:
3e:05:81:2d:67:d9:db:13:d1:99:6c:a3:a9:bd:c3:48:b3:2f:
15:23:19:61:0c:f6:c1:ad:46:66:06:21:1a:7a:86:f0:53:7b:
05:a8:87:d6:d5:90:47:b9:a5:17:31:2f:e1:3f:59:ff:f6:cf:
23:87:0c:ed:c2:00:f6:b4:54:6d:db:20:bb:81:81:b5:3a:63:
72:8f:54:c3:56:1b:9b:92:67:db:12:01:21:19:5e:f4:c9:71:
4d:29:5f:43:7c:c1:53:d7:8d:a4:f9:35:b5:0a:f4:41:79:6a:
eb:e6:cd:5b:a3:d7:74:51:b0:47:e0:c3:b1:d0:84:1c:a1:25:
88:0f:f9:b7:8f:02:d4:fa:76:71:d7:b4:32:06:d3:69:7b:62:
00:28:e4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:45:45 2026 by rpki-client