
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
File: 1gA1BzfqQktAGySBBT0rwpFsutE.mft (raw, json)
Hash identifier: B3fHAobvnf2+gFgXtVlJL14kq+Og6llJX5HpsXlgHQM=
Subject key identifier: 52:7D:12:FD:D7:C1:95:88:73:4E:69:DA:B1:72:AB:CD:B6:1B:73:5E
Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1
Certificate issuer: /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
Certificate serial: 01A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
Manifest number: 0198
Signing time: Sun 11 Oct 2026 05:00:32 +0000
Manifest this update: Sun 11 Oct 2026 05:00:32 +0000
Manifest next update: Sun 18 Oct 2026 05:00:32 +0000
Files and hashes: 1: 1gA1BzfqQktAGySBBT0rwpFsutE.crl (hash: WzxzuBN3ePc8rN1W4un5w46XKtO8w8NA3lBkpmbHyag=)
2: FD557922606A11EF8B9F6820C4F9AE02.roa (hash: XYcxvXsIZf8Fuuj3PCiap/sXv4cR9z5b00T5aM5YJhY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl
rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154973, serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
Validity
Not Before: Oct 11 05:00:32 2026 GMT
Not After : Oct 18 05:00:32 2026 GMT
Subject: CN=6acb17f0-2295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:26:6e:09:65:05:44:4d:4a:f8:9b:75:2f:
cc:f0:f7:74:4b:06:c4:24:4a:53:f3:39:43:b0:ed:
8f:d3:7c:90:72:27:33:5e:9f:40:11:29:42:62:dc:
9b:12:41:03:d1:8d:57:41:da:ed:15:2d:0b:7a:c9:
1b:81:b1:20:f6:1a:53:1e:44:c2:f1:b7:33:11:a3:
d4:19:54:e7:10:1e:83:af:18:92:a3:a9:63:69:75:
ae:13:83:d9:4b:c5:68:73:4a:0a:e9:1e:b7:fd:eb:
df:76:2b:86:db:2f:b2:d2:c7:58:f2:67:d4:81:eb:
55:e7:e8:01:2c:1e:98:9a:bd:e7:e6:f8:ed:7a:22:
d1:e4:a4:a3:02:0c:bb:4d:59:27:c6:36:c5:92:a2:
fb:55:e3:a2:6f:c2:b2:7a:24:a7:7d:15:37:48:9c:
f6:fb:77:c5:43:90:a5:d4:96:cc:9f:a9:6b:19:78:
b5:77:6f:3a:ed:f1:3e:88:4a:af:54:89:bc:4e:54:
e0:5b:ce:20:04:e5:0c:b9:73:33:31:91:f3:38:b3:
fd:47:43:17:5c:04:1a:0f:79:fb:fe:30:c3:eb:e7:
9a:7f:22:a3:45:81:27:2b:e7:8a:be:4f:51:54:10:
c6:28:17:56:60:9a:36:59:7b:7d:f5:53:76:02:ab:
1f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7D:12:FD:D7:C1:95:88:73:4E:69:DA:B1:72:AB:CD:B6:1B:73:5E
X509v3 Authority Key Identifier:
keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:a9:ae:05:54:2b:2d:da:74:23:25:4d:11:c0:bd:27:0e:f8:
5e:d2:aa:da:06:e9:6d:35:1f:fd:a0:c5:78:e6:2a:e0:8f:54:
24:76:cd:aa:c9:16:d6:3e:00:0b:3e:b6:44:0f:23:df:ba:13:
d6:58:5c:5f:78:2e:ec:5e:b8:a7:6f:52:bf:27:dd:c7:a5:e9:
f1:fa:88:6d:16:15:db:b6:43:bb:02:6c:5f:ef:0a:28:d5:c3:
cf:d3:83:fa:de:5a:b2:c0:f0:ee:56:68:07:8d:31:6d:e5:85:
26:e2:d9:ec:91:dd:73:a3:66:c8:8f:17:1f:25:46:41:60:3f:
84:f8:d2:71:be:54:cd:b0:c4:29:67:48:c4:4c:29:4e:af:16:
70:04:fb:e4:58:96:fe:4f:92:a4:c3:4f:41:ac:42:bb:f5:cd:
b5:f4:1d:a5:74:07:dc:9b:20:ab:2b:ff:20:23:f5:41:86:47:
4f:ed:71:87:c3:59:26:a9:1a:c7:61:97:4a:04:d5:33:7d:fb:
4b:3c:72:8f:ef:04:6a:02:8a:d8:04:31:89:87:90:2c:63:e3:
29:f9:49:98:d4:57:34:ed:b3:f2:a6:f6:f1:fa:32:c2:07:ba:
a5:eb:c2:76:b4:4f:0f:f8:5f:59:48:de:0c:bd:91:2e:a0:16:
c4:4c:be:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:07:08 2026 by rpki-client