
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
File: W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft (raw, json)
Hash identifier: u50nDe/mAjmgoOAUQHhhDPSgb6GPYqpusxkEHUAXyB0=
Subject key identifier: ED:72:07:7E:F3:E6:0F:0B:EE:B8:09:AD:80:B3:DF:12:38:95:00:3F
Authority key identifier: 5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41
Certificate issuer: /CN=A91E1936/serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
Manifest number: 0208
Signing time: Sun 15 Nov 2026 03:18:34 +0000
Manifest this update: Sun 15 Nov 2026 03:18:33 +0000
Manifest next update: Sun 22 Nov 2026 03:18:33 +0000
Files and hashes: 1: W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl (hash: 4xO0FPQsyo10zeKMCpSAnVFlHcV7I4dagT+kEsmO+w8=)
2: CF6BED9EC63611EEA0C70259C4F9AE02.roa (hash: a3vM/Ppf0GxiRLmbleY13cfOquo7BmGPzlHgh28TyyE=)
3: 0423873AD9C511EEA944FA80C4F9AE02.roa (hash: vrmDfWTNDEfAAGTB6RMWU6c9oOq8iON07z3iMp7YpRs=)
4: CE88A98AC63611EEA0C70259C4F9AE02.roa (hash: qcHwawytQ/8AG7cdx5hu0AuGvZCgLwDCZXBXxMtoIVk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl
rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 03:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1936, serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041
Validity
Not Before: Nov 15 03:18:33 2026 GMT
Not After : Nov 22 03:18:33 2026 GMT
Subject: CN=6af92489-4b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0b:46:1f:64:70:77:e8:cb:6f:54:34:35:2c:
0e:e4:7c:22:20:4f:9c:40:01:64:b0:50:eb:f5:76:
1d:12:1d:62:39:f2:01:56:97:8c:40:e4:4f:63:c3:
2d:8a:0c:a6:0d:58:3c:ba:b5:a4:9e:1e:1d:a2:69:
32:e2:29:09:de:71:19:b4:b7:46:38:3b:d8:10:b7:
f9:6e:bb:8d:af:5c:7c:30:39:2e:b1:44:bb:c6:6f:
56:dc:37:04:53:49:90:f9:cd:ef:1e:b0:cd:2b:49:
c8:d4:59:82:84:1e:44:35:14:c1:73:47:b5:10:56:
6d:52:ae:60:df:78:1c:67:54:12:0d:1b:bf:d7:d4:
7b:d5:20:eb:33:73:ac:af:17:92:38:9c:23:10:28:
7f:c4:01:92:44:c0:a0:5a:c6:a2:f7:45:0a:15:1a:
30:4b:94:09:e8:7b:71:69:05:dc:32:c2:73:b0:42:
f5:79:88:4b:e8:05:8b:d0:92:04:c7:4d:5a:8a:f1:
9a:b4:b5:14:a2:03:14:38:97:a8:3f:84:6a:e5:a5:
32:51:cd:73:4a:e3:a2:df:ac:67:ee:52:dc:16:3e:
20:31:95:b4:42:77:02:6e:0f:0f:9a:2f:3f:fb:e0:
7c:d5:51:97:b8:4a:e4:72:3b:08:b0:03:35:6b:7f:
bb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:72:07:7E:F3:E6:0F:0B:EE:B8:09:AD:80:B3:DF:12:38:95:00:3F
X509v3 Authority Key Identifier:
keyid:5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:20:20:43:bd:7d:56:cd:c0:00:e0:5a:50:01:a2:9c:a9:c5:
0b:1d:28:41:a6:54:c8:d1:6f:64:42:d6:59:b9:44:cd:7e:34:
ed:ba:d7:fa:a9:5a:35:ed:8b:88:d7:f0:30:85:d1:18:ad:7a:
cd:9d:a5:28:ff:7f:e9:8d:cc:bb:e5:aa:37:70:88:ae:4d:73:
51:2f:95:fe:a9:c3:2b:d4:0c:49:a9:0e:49:ca:fa:1e:ce:6c:
d7:dc:df:fb:b1:ba:42:5b:41:6a:87:86:78:81:a4:22:09:bd:
f7:38:ae:a0:20:0f:5c:d3:f6:74:27:a7:7a:e7:f1:88:d1:f4:
b5:f1:6a:ba:4e:5b:8c:be:e2:77:13:1f:26:6c:26:4f:46:47:
78:a2:52:ca:19:b8:8e:e7:6e:54:12:05:77:bc:2e:c7:e7:57:
ec:8c:e8:27:79:60:d0:30:1c:13:1b:4d:c1:86:2e:21:a1:de:
3b:1c:1e:99:33:49:3f:92:dc:d0:d7:7a:f1:25:9b:32:5d:c9:
5a:77:43:0c:1f:0a:af:f0:73:a3:d6:e2:fa:16:3b:70:9e:41:
32:56:d8:75:4b:9a:02:38:c9:6d:92:6e:eb:c6:92:37:8d:d4:
de:d9:3c:87:53:af:39:89:d3:8d:be:08:43:f0:35:14:f0:24:
96:ab:24:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:37:05 2026 by rpki-client