
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
File: 1gwwsan1nJWa1JZ_L21XKst1KZw.mft (raw, json)
Hash identifier: dyF0Rc4LZr+EnrCC8ppPENYwbmVwJlha/ANJLs1u1AM=
Subject key identifier: C2:91:06:11:27:EE:DF:4E:C4:BA:2E:6E:63:BB:89:BD:BA:21:45:D9
Authority key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C
Certificate issuer: /CN=A91E5EEA/serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
Manifest number: E7
Signing time: Wed 25 Mar 2026 05:46:24 +0000
Manifest this update: Wed 25 Mar 2026 05:46:23 +0000
Manifest next update: Wed 01 Apr 2026 05:46:23 +0000
Files and hashes: 1: 1gwwsan1nJWa1JZ_L21XKst1KZw.crl (hash: LUGFACoz7u3/zLFlWXdB2lUzAdJoItTjxnSqbK49NL4=)
2: A7C0D96E0CDD11F0A8463D28C4F9AE02.roa (hash: WbcHkuV1KGZpUWsgSLnvoF/j0nloKO7jZjWyz2sKLc4=)
3: 2B6A4C480CDC11F0BAA65183C4F9AE02.roa (hash: GqBmWG7cp4InXGzH112fZPiBHKzEQ6yteA8i5t3EwNk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl
rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:46:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5EEA, serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
Validity
Not Before: Mar 25 05:46:23 2026 GMT
Not After : Apr 1 05:46:23 2026 GMT
Subject: CN=69c376b0-2f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:b1:8d:6c:c1:fd:39:28:25:f0:b0:4a:09:
75:a3:70:f2:e7:8f:b1:b8:91:49:c3:51:e3:c7:ca:
30:04:c9:41:82:37:39:9f:35:f4:63:b5:2f:24:2f:
ab:2c:20:f5:c7:bd:27:ed:17:75:50:96:7c:e3:06:
3a:c6:ce:3c:09:e0:ff:f4:6e:84:cf:dc:78:7c:e9:
a6:cf:7f:dc:8b:51:e7:c6:3a:10:c9:ec:fa:2b:cd:
05:71:09:8f:8b:b6:a5:76:ca:6f:d5:c1:da:c8:98:
b0:a4:86:82:ae:dd:2f:50:6e:8b:ad:0e:fb:31:cb:
80:59:19:3c:2c:7f:0e:92:02:46:bd:99:84:3e:08:
c7:5c:72:61:65:f1:1e:45:5f:07:dd:94:cb:f4:e1:
ca:92:9f:90:47:44:97:89:76:48:90:d1:cf:46:7d:
30:4e:07:b1:24:2b:90:08:5a:fa:5e:a7:83:60:8d:
b3:0a:cd:5a:87:ab:c1:2b:86:22:94:00:1f:11:98:
04:57:b1:02:31:ae:52:01:d5:4a:7d:bc:d8:24:ac:
3a:1d:b8:f9:7f:1b:3a:c9:65:1c:78:7f:4c:aa:e4:
14:ed:fa:c0:6b:98:d8:55:01:80:96:16:3b:d3:73:
56:85:d5:4c:45:22:6a:78:b6:ad:8d:7d:93:2f:ef:
62:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:91:06:11:27:EE:DF:4E:C4:BA:2E:6E:63:BB:89:BD:BA:21:45:D9
X509v3 Authority Key Identifier:
keyid:D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:6e:21:7f:01:1c:f5:34:a6:58:53:5b:ea:70:7c:1e:48:fc:
49:2c:4a:22:e6:55:b2:cb:1c:2f:4d:0c:ec:e7:dd:76:3d:68:
7c:c8:e3:27:cd:0d:4f:73:0d:9f:23:49:18:38:0e:f4:ac:72:
3d:3a:9d:43:df:e3:cb:11:83:fa:75:cc:02:b0:cc:3e:b8:f4:
d3:8a:f7:85:fe:27:4a:6f:68:bc:19:02:98:56:69:a8:9e:f7:
22:b7:43:a4:d5:93:49:f4:16:75:28:ab:e5:77:be:26:11:fb:
eb:43:fc:18:04:37:a6:6b:83:a0:3e:ca:ee:cc:ac:cb:c9:cd:
3b:a5:4c:17:37:91:40:19:6d:b5:02:de:29:81:a6:44:85:a8:
7f:7c:1c:6f:d5:64:80:b6:4f:7c:b5:75:8f:00:a4:94:43:3e:
70:a6:ff:1e:0b:6b:ff:b2:d1:cf:5a:8e:6e:7b:a7:4a:a5:4a:
9d:b5:fd:66:c2:d7:13:8e:6d:fd:8a:09:02:c2:9c:df:de:1b:
50:15:d2:d4:03:c9:f1:ee:69:20:2a:1a:03:4d:1b:f2:91:da:
23:f3:c6:7f:37:4a:6a:ad:73:88:05:b1:6f:82:81:a1:d1:81:
a2:cf:2b:dc:f2:cf:7d:57:69:c8:a2:f6:96:dc:60:a1:cc:cd:
a9:33:3f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:45:54 2026 by rpki-client