
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
File: _1wQCXXjaGJFyt5XnFdDO7_faBk.mft (raw, json)
Hash identifier: VaokQhxJEH/5u5IfEhV59rpGgoIYNPyy7crNnquXRZA=
Subject key identifier: 39:B9:2D:81:98:13:D8:5C:9C:E6:76:25:02:61:DE:84:C1:72:E1:A3
Authority key identifier: FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19
Certificate issuer: /CN=A9144913/serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819
Certificate serial: 01AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
Manifest number: 01A4
Signing time: Sun 01 Mar 2026 04:54:37 +0000
Manifest this update: Sun 01 Mar 2026 04:54:37 +0000
Manifest next update: Sun 08 Mar 2026 04:54:37 +0000
Files and hashes: 1: _1wQCXXjaGJFyt5XnFdDO7_faBk.crl (hash: OC9NT+ViErcNI/pBjIkFQCazDsvUo2eh47OBzGr7jis=)
2: 740BB01A90D511EE816E5C34C4F9AE02.roa (hash: 5OTHdHDCmfuI/ZOanycQLnoktf60OpN1mQqMdmP9U+I=)
3: 749936E290D511EE816E5C34C4F9AE02.roa (hash: pUmBGJmyMHEcbY4KaDR5mt/b7cXO616AtPpB4tejaZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl
rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:54:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144913, serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819
Validity
Not Before: Mar 1 04:54:37 2026 GMT
Not After : Mar 8 04:54:37 2026 GMT
Subject: CN=69a3c68d-4bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0a:f7:2f:e6:3a:85:31:d9:ff:4b:17:84:e0:
32:4c:a9:96:8d:0e:59:f5:40:f2:0c:9e:9b:2c:59:
85:f0:43:1e:30:5d:c3:75:0a:7e:31:a4:b7:a7:54:
64:58:be:9b:cc:a5:a1:ed:12:1e:c0:4e:69:c8:9e:
d6:d7:e4:f7:98:0b:77:ea:b1:9d:44:a0:1c:22:e4:
b2:14:ea:71:d5:85:91:2c:04:07:c5:74:6c:c8:a5:
e4:b1:87:0c:d0:88:72:6d:5a:8b:32:4c:f2:a1:1d:
a4:e7:a5:26:df:bc:07:7a:df:2e:f5:c3:1e:60:da:
2c:60:d3:99:47:74:50:a3:a4:b8:bf:f0:5e:34:e6:
2c:fe:e9:94:f5:44:77:27:de:c7:f6:cd:03:da:41:
85:af:32:d1:0a:7a:6a:96:47:99:f0:3e:be:ec:cd:
d6:ac:ae:00:25:10:e0:9e:4c:80:7f:a2:01:d0:b2:
09:0a:0a:44:aa:fb:2b:b6:02:a5:2c:be:c9:a7:d1:
00:13:91:3e:7f:37:31:b3:01:59:a0:8c:b4:2b:e5:
71:db:02:c1:fe:ef:82:7f:b2:cd:49:bd:9d:0a:79:
6e:46:de:82:7e:76:d5:5c:4b:d6:6e:8c:93:91:3b:
32:6b:10:b1:5a:6d:aa:dc:07:b1:ba:18:bf:09:a1:
45:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B9:2D:81:98:13:D8:5C:9C:E6:76:25:02:61:DE:84:C1:72:E1:A3
X509v3 Authority Key Identifier:
keyid:FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:50:de:36:52:6d:3a:05:8d:cc:3e:34:fa:42:33:f6:77:04:
25:d5:cc:01:a5:9e:92:d2:28:03:cc:39:9c:84:11:0c:e8:5c:
aa:e2:da:23:47:e2:ce:65:e5:4d:9b:8c:be:35:78:93:c8:72:
05:e8:7a:1f:14:81:89:93:67:7c:11:36:f5:70:69:17:e5:13:
8a:27:e6:07:35:17:2b:81:9f:8f:c6:e9:65:11:c8:45:1b:2c:
d0:ad:55:35:e7:7e:14:b5:37:74:17:ac:27:af:d7:91:d4:67:
8a:c6:53:aa:90:21:13:3b:9d:22:df:34:4d:bc:ae:44:de:28:
14:f7:d7:bf:fa:f6:5d:2a:9f:17:34:d3:9a:33:02:bf:6b:7b:
c5:6c:4a:a1:6b:76:a1:17:14:53:c2:f7:89:6e:e0:6f:cb:ab:
97:b7:42:11:21:5c:f9:2f:17:8f:c0:d9:56:b3:1f:3c:87:b0:
42:9f:e1:c7:37:bb:f0:b7:5e:ba:6d:1e:0f:e0:ef:4e:18:09:
81:9a:55:78:68:b5:0b:c4:c5:cf:ec:3e:d3:ce:b4:8a:09:85:
53:72:2f:78:4e:7c:e3:b3:54:60:34:f9:0c:6e:ab:6e:33:c9:
ce:21:71:2f:a5:1b:d0:0b:8a:94:ec:ec:61:03:9c:39:c0:a6:
7b:9c:5f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:20 2026 by rpki-client