
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
File: 1gwwsan1nJWa1JZ_L21XKst1KZw.mft (raw, json)
Hash identifier: GccF0tDLqdEnX0QLD/NFhT5/4IDlSvkcllT3PQadnxc=
Subject key identifier: 13:F0:2C:89:C6:03:73:DF:4F:39:09:54:86:77:7A:77:2F:A3:4E:88
Authority key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C
Certificate issuer: /CN=A91E5EEA/serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
Manifest number: 0143
Signing time: Wed 23 Sep 2026 05:18:42 +0000
Manifest this update: Wed 23 Sep 2026 05:18:42 +0000
Manifest next update: Wed 30 Sep 2026 05:18:42 +0000
Files and hashes: 1: 1gwwsan1nJWa1JZ_L21XKst1KZw.crl (hash: ZHx9AlpdTHNCuTdFWsXKi025c5L+vQaxILswfb0xFw4=)
2: 2B6A4C480CDC11F0BAA65183C4F9AE02.roa (hash: GqBmWG7cp4InXGzH112fZPiBHKzEQ6yteA8i5t3EwNk=)
3: A7C0D96E0CDD11F0A8463D28C4F9AE02.roa (hash: WbcHkuV1KGZpUWsgSLnvoF/j0nloKO7jZjWyz2sKLc4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl
rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5EEA, serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
Validity
Not Before: Sep 23 05:18:42 2026 GMT
Not After : Sep 30 05:18:42 2026 GMT
Subject: CN=6ab36132-8c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:af:4a:28:60:cd:c6:5e:9b:32:d9:05:3b:
0c:d8:52:83:a4:0c:5d:c4:48:e0:3e:92:3b:01:6a:
cd:30:2c:89:a1:da:c0:3b:fe:dd:2b:a6:b2:98:b8:
b5:16:a2:42:76:7e:fe:85:71:c7:74:24:39:66:45:
ee:97:5d:44:04:61:1f:6e:2d:b5:ed:4e:25:98:b0:
1c:55:34:0f:40:0b:f0:f8:ed:4b:53:2d:b0:27:3f:
23:e6:23:57:5e:23:5f:ef:ac:ce:7b:2d:08:9f:43:
6c:aa:ca:06:b6:41:d7:ff:1b:89:46:40:f4:c1:a2:
32:b7:ed:18:9c:f2:9e:72:f7:a0:45:e2:14:02:c0:
49:17:af:c8:67:a6:d8:e2:b7:94:33:61:e9:69:a6:
85:e2:ce:c6:65:c8:ac:41:9c:f0:58:10:a9:9a:c4:
e6:6b:1e:ea:9b:80:6e:1b:9c:6b:58:63:ee:dd:63:
ac:25:a3:0c:82:6c:cb:5c:4b:10:0a:51:73:a1:b4:
6a:89:c4:78:b7:f7:dc:d9:4a:8e:6a:a9:1b:f5:cf:
05:f9:f6:11:21:90:d2:36:f9:41:54:dd:97:1a:ff:
21:fa:da:79:33:7e:88:9e:69:94:14:6c:e4:1b:ad:
e5:b6:c9:24:52:dd:b4:fc:68:59:bd:cc:51:7c:dd:
3c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F0:2C:89:C6:03:73:DF:4F:39:09:54:86:77:7A:77:2F:A3:4E:88
X509v3 Authority Key Identifier:
keyid:D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:57:ee:41:d4:31:4f:7b:67:dd:77:ae:b7:a9:74:36:ad:64:
a3:16:d7:8a:01:e3:fe:c0:0f:fc:1f:c3:12:94:f2:00:39:64:
ca:b8:18:98:c1:64:1b:2a:01:32:86:93:3c:54:95:3d:4b:78:
8b:53:22:b4:3f:0b:58:7f:d3:b7:a7:b0:17:0b:77:b1:24:9d:
67:46:86:6b:51:bc:5f:eb:5a:6f:8e:e3:41:1d:77:3b:84:78:
52:31:e2:3c:f4:a4:1e:71:cd:dd:05:f4:80:0e:7f:0b:7e:c6:
97:d0:71:69:cb:ba:1a:69:54:af:fd:ed:06:33:c8:70:63:41:
32:79:33:00:95:c6:c9:e4:e9:97:9a:4d:0a:7b:be:27:ef:b4:
63:32:bb:74:3d:43:0f:69:28:8c:b5:75:d3:a1:a4:d2:c3:cb:
cd:1d:c9:a6:9c:b9:be:7e:15:32:42:a4:db:16:87:ea:5d:a9:
ad:c2:43:ab:08:d9:ae:bf:17:8e:ff:3f:8c:ac:ca:c4:a9:3d:
71:74:07:aa:23:18:64:fa:59:98:cf:a3:2a:7d:cf:bc:18:63:
ee:e1:27:e2:be:ea:09:ea:d7:b7:91:d6:e3:45:39:74:4d:69:
5f:34:e7:0f:94:bc:5d:43:c4:09:16:89:ab:ad:7a:46:e0:fe:
d0:9e:4c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:31:44 2026 by rpki-client