
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
File: W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft (raw, json)
Hash identifier: psUctJ7U3GOIEBkO1b/OIFOVSJ2udfujgIQSw6Lx8dY=
Subject key identifier: 38:E3:68:59:1A:39:75:79:74:4C:CB:6C:C7:6B:7D:48:02:60:44:8D
Authority key identifier: 5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41
Certificate issuer: /CN=A91E1936/serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041
Certificate serial: 01FC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
Manifest number: 01ED
Signing time: Wed 23 Sep 2026 03:14:56 +0000
Manifest this update: Wed 23 Sep 2026 03:14:55 +0000
Manifest next update: Wed 30 Sep 2026 03:14:55 +0000
Files and hashes: 1: W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl (hash: TwaaJC0Xf+rH1oBe+R3AXd7gKthB37Kk4+m+PQYJjP4=)
2: CE88A98AC63611EEA0C70259C4F9AE02.roa (hash: qcHwawytQ/8AG7cdx5hu0AuGvZCgLwDCZXBXxMtoIVk=)
3: CF6BED9EC63611EEA0C70259C4F9AE02.roa (hash: a3vM/Ppf0GxiRLmbleY13cfOquo7BmGPzlHgh28TyyE=)
4: 0423873AD9C511EEA944FA80C4F9AE02.roa (hash: vrmDfWTNDEfAAGTB6RMWU6c9oOq8iON07z3iMp7YpRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl
rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1936, serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041
Validity
Not Before: Sep 23 03:14:55 2026 GMT
Not After : Sep 30 03:14:55 2026 GMT
Subject: CN=6ab34430-3a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5f:4e:f1:27:d0:25:ab:c6:3f:15:bd:1c:d6:
75:e6:eb:cb:7e:74:ab:d8:eb:26:32:92:69:b8:1f:
b6:3d:7d:d4:0c:8c:27:db:06:4c:71:75:ab:4d:2b:
f6:2c:4c:4c:31:53:39:60:f7:08:8d:3c:52:00:22:
b6:57:76:15:a2:d7:6d:2b:28:e0:8f:ef:ec:90:5c:
0f:5d:a9:a0:81:c3:41:d4:f4:9b:d0:3b:f8:93:98:
91:66:1a:7d:0d:74:ab:cb:9f:e0:f3:74:c2:74:59:
b1:b3:f2:d5:6b:c2:5f:16:e1:0b:f6:d6:67:38:be:
24:a5:89:e3:d0:b9:5e:2a:ed:9f:3c:34:87:cd:07:
72:6c:92:3d:4e:44:57:b5:b1:e9:8c:22:da:92:3f:
f6:60:a5:4a:67:a9:57:69:d3:ad:d6:96:59:10:ca:
5a:93:d7:95:4b:a7:a9:a9:5c:26:d3:91:05:11:94:
73:90:81:22:70:1b:a4:a9:7c:a8:a4:d0:94:83:df:
32:85:26:8a:7d:3e:1e:d3:c6:dd:65:04:c8:bd:1d:
da:4a:2f:53:c7:bc:77:70:63:45:34:75:fe:87:0e:
54:ac:84:6e:d1:17:a3:04:52:57:bd:23:ea:e4:1f:
a7:57:b1:d2:5b:6e:38:d3:e7:b2:b7:d9:87:12:09:
6a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E3:68:59:1A:39:75:79:74:4C:CB:6C:C7:6B:7D:48:02:60:44:8D
X509v3 Authority Key Identifier:
keyid:5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1c:ff:71:9c:4e:55:7f:ea:f9:ee:f2:f9:9a:f8:af:b9:05:
d0:8d:b1:fa:23:ea:e0:4b:a8:4b:ed:b1:94:61:40:37:f5:48:
0f:f2:5f:45:df:ed:da:96:76:c7:9e:33:49:88:0f:b2:f6:fd:
f2:7f:7f:5e:fe:db:81:e2:36:27:91:da:ee:2f:8f:b5:35:3c:
2d:22:c9:9f:78:e4:10:92:64:ee:d5:4f:e3:fe:7c:d3:f6:67:
cd:d7:50:b9:a1:7d:a0:19:bf:37:06:37:d8:00:44:eb:53:8f:
44:61:0c:04:41:da:b1:71:10:a7:c7:8f:c5:05:12:c8:93:27:
af:98:5c:cb:9e:d9:71:c2:a6:4d:04:ff:41:68:34:9c:92:bf:
c0:14:ca:4a:6c:68:ac:a7:8c:37:7a:ab:18:50:69:7b:01:e1:
11:65:b6:c6:50:02:33:41:27:c0:73:b9:c8:9c:50:09:5b:af:
46:e7:45:35:ef:52:9b:60:7a:9f:06:1a:b8:a8:ea:4c:ba:cf:
e4:ee:29:59:17:fe:87:2d:54:2d:65:14:d7:8c:3f:71:ab:86:
4d:37:98:91:90:d5:a9:b2:db:b6:f7:0a:40:34:bd:dd:e5:58:
17:6e:bb:c5:0b:f2:2e:36:c9:18:47:09:7a:61:5b:b0:cc:42:
0a:b9:fa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:28:51 2026 by rpki-client