
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
File: 1Siei3312SAW7HmO7v8FvHPoVYA.mft (raw, json)
Hash identifier: IkcPWuK75yrUMbZw2E1pEmFx5uwVnCd2ipKYZJH5nUU=
Subject key identifier: 39:A1:91:EE:5F:E6:EE:AF:93:BB:88:DC:5E:9C:F0:2B:12:51:CD:50
Authority key identifier: D5:28:9E:8B:7D:F5:D9:20:16:EC:79:8E:EE:FF:05:BC:73:E8:55:80
Certificate issuer: /CN=A9137722/serialNumber=D5289E8B7DF5D92016EC798EEEFF05BC73E85580
Certificate serial: 0146
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
Manifest number: 0143
Signing time: Sun 01 Mar 2026 06:16:46 +0000
Manifest this update: Sun 01 Mar 2026 06:16:45 +0000
Manifest next update: Sun 08 Mar 2026 06:16:45 +0000
Files and hashes: 1: 1Siei3312SAW7HmO7v8FvHPoVYA.crl (hash: XQrsCLBIJT2SpqHq9ukpfBJ5lBzu91SR+BSsMpV1Vl0=)
2: B4684D8A288D11EF96BC5135C4F9AE02.roa (hash: b6ERigxsXjUyaKMbJy8+YRLovoMIY+E6IWTJv3Q8jfI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.crl
rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326 (0x146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137722, serialNumber=D5289E8B7DF5D92016EC798EEEFF05BC73E85580
Validity
Not Before: Mar 1 06:16:45 2026 GMT
Not After : Mar 8 06:16:45 2026 GMT
Subject: CN=69a3d9ce-a3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9b:42:4b:e8:bd:1c:59:2d:be:82:36:48:82:
c5:73:2b:9e:38:07:2a:89:6e:37:5a:f4:e8:8f:74:
35:b7:54:88:db:46:52:e1:7a:ea:dc:0c:a5:be:41:
a3:25:ed:b5:5a:44:b6:ab:12:0e:3c:6b:12:f7:9d:
59:fb:f2:48:0e:e6:97:1a:2b:b8:6c:f1:9a:a4:05:
0c:bd:f6:16:ec:ea:c0:42:73:f0:06:ab:4e:06:f8:
b4:2b:08:8d:c3:c7:7e:c5:f3:3e:aa:94:f6:75:9e:
fa:0c:9e:1e:ea:4a:3c:47:2d:ce:82:49:74:8e:85:
3d:7e:18:4f:7f:04:1a:c0:5b:23:f1:6e:f3:e5:2c:
28:8a:47:37:22:47:90:87:03:58:f3:ff:45:d1:02:
bb:b8:5a:28:04:6b:6a:80:5d:54:e0:28:31:d1:f9:
7d:e5:0d:64:31:6f:07:f4:5d:3d:19:58:06:fb:7b:
86:51:df:ba:27:70:36:1f:7f:b5:f0:73:30:51:4d:
d2:55:b9:81:ae:be:41:58:36:d2:8e:d0:41:80:28:
b8:2e:e0:89:31:bf:76:22:29:95:57:13:13:05:92:
f4:20:67:ec:af:17:f7:2f:5a:cc:2f:d8:a9:e7:7e:
d8:f6:b6:3d:d3:cd:66:e9:f7:5a:88:92:99:e0:cf:
01:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A1:91:EE:5F:E6:EE:AF:93:BB:88:DC:5E:9C:F0:2B:12:51:CD:50
X509v3 Authority Key Identifier:
keyid:D5:28:9E:8B:7D:F5:D9:20:16:EC:79:8E:EE:FF:05:BC:73:E8:55:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:0b:73:a2:c3:f1:d8:a4:cc:88:44:5d:74:06:f1:f2:fe:fc:
74:55:a2:80:82:ef:7b:3a:3c:0a:d1:ba:df:23:30:59:f2:2c:
56:1a:d6:5e:e3:ed:dc:71:0e:7f:72:2f:6a:8a:b0:29:29:f4:
4c:35:72:23:2f:e7:03:94:8f:bf:73:7b:bf:b3:55:de:f7:b5:
8d:56:f0:7c:60:f0:f1:12:e2:35:5e:bb:30:0a:ee:55:e7:a3:
5c:c1:30:46:e8:ae:ba:4f:26:9b:d7:36:4f:21:c2:ca:6c:02:
25:7c:13:dd:dc:e7:9e:7f:cb:40:ff:d1:34:e2:ff:75:52:c1:
e1:31:2a:f6:e9:f7:9d:29:3d:a0:97:7d:12:3f:d3:87:f7:56:
aa:7d:6d:69:9a:e3:e3:a1:c5:e8:86:ee:67:a1:3c:cc:67:9e:
78:74:27:98:1c:99:cc:4f:da:5b:10:ba:26:9b:39:16:b7:44:
a1:87:6f:80:9c:50:21:67:59:8f:bb:bc:64:4e:8b:54:a3:68:
fb:ff:9c:55:7b:b1:60:13:6e:16:ce:c0:16:9a:a0:f2:37:2c:
9b:42:58:eb:f1:d7:06:03:b8:73:bc:8b:a6:3a:e7:00:d2:3b:
4b:29:e6:3a:c5:ea:8f:9b:8a:46:51:69:18:cd:72:5e:76:6d:
4d:43:36:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:12 2026 by rpki-client