
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
File: 1gA1BzfqQktAGySBBT0rwpFsutE.mft (raw, json)
Hash identifier: 5HkyJMSXaMMkCW4Jzw0xFPWbAEDo25AavJto9ohsLEU=
Subject key identifier: B6:EF:94:B7:62:41:1C:7D:1C:89:C7:25:45:23:F9:8C:44:2C:E6:89
Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1
Certificate issuer: /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
Certificate serial: 0146
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
Manifest number: 013D
Signing time: Fri 17 Apr 2026 05:08:39 +0000
Manifest this update: Fri 17 Apr 2026 05:08:39 +0000
Manifest next update: Fri 24 Apr 2026 05:08:39 +0000
Files and hashes: 1: 1gA1BzfqQktAGySBBT0rwpFsutE.crl (hash: tcrucJj5LEvOBheu7XziSsCXtu1JwmHm3aDw/DHL4Ac=)
2: FD557922606A11EF8B9F6820C4F9AE02.roa (hash: lDQFfJvg8sN9IbyOUgeEIh9zzBtKTvvIBaVemnoUUzo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl
rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:08:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326 (0x146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154973, serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
Validity
Not Before: Apr 17 05:08:39 2026 GMT
Not After : Apr 24 05:08:39 2026 GMT
Subject: CN=69e1c057-c1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1b:ef:d1:ce:07:14:eb:df:cc:31:c7:7b:8c:
5b:9e:0e:e5:76:41:f3:9d:a3:bd:c6:31:c8:f5:17:
a5:0a:4f:d9:bf:5b:1f:d7:74:80:c0:52:40:c5:86:
19:81:c1:ce:6b:ff:e0:48:55:7e:12:93:a0:88:a0:
2d:36:a9:bd:8c:8c:43:ff:93:f0:5f:22:ff:ac:1b:
72:ff:46:07:db:30:e5:b7:6d:7c:08:fc:a3:e0:8d:
21:f2:ff:15:0c:e0:27:fe:e5:d1:ab:29:58:da:ba:
fd:f8:a6:d3:36:bc:f5:9f:10:b7:25:24:cc:41:79:
ca:5f:42:eb:16:29:ec:1d:4c:e2:0f:ef:21:fa:cd:
7f:ab:54:39:89:7e:ff:b5:58:50:f3:a5:e4:7f:dc:
2b:3f:f6:45:12:b5:19:0d:70:ed:26:dc:20:d9:15:
46:fa:da:ae:05:1f:76:7b:cc:de:4e:7d:2a:a7:a6:
6f:4b:b7:45:21:4d:d4:cd:18:c4:f0:25:ae:5a:8f:
df:c5:23:af:d9:f0:c6:47:76:24:08:bb:90:7d:a4:
f3:7d:7b:48:31:ba:1c:02:0a:f1:7c:c7:66:59:36:
49:67:10:78:b6:83:7a:35:42:33:04:39:5d:ab:ed:
10:b7:c9:5d:01:5e:8d:3d:b8:bf:fb:25:68:36:b9:
73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EF:94:B7:62:41:1C:7D:1C:89:C7:25:45:23:F9:8C:44:2C:E6:89
X509v3 Authority Key Identifier:
keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:89:2a:29:5c:89:22:5c:57:d7:5a:9c:5f:1a:ca:2f:1f:ad:
b0:5b:45:1f:2c:5f:f6:cb:34:f5:db:82:32:4e:7a:92:5a:27:
f2:ca:22:60:85:6c:3d:48:ec:75:f1:6b:39:57:53:83:bf:80:
bd:a1:dd:f4:d2:a6:f6:82:a7:78:3d:6b:bd:d1:1c:d7:98:47:
8c:5c:05:95:f6:f7:fa:6f:d8:11:bc:b3:3c:5f:90:74:c4:a5:
99:fc:cd:81:56:b7:1a:86:cb:2c:35:d3:8b:e4:ec:d9:3c:57:
f2:ca:6d:fe:b0:4f:94:ca:68:3c:89:78:e6:b5:ae:dd:18:ff:
31:99:4d:30:b0:1a:b2:43:27:5c:64:bd:bb:de:81:37:28:69:
98:3f:c6:49:e4:1a:9a:50:95:d7:ce:b8:e6:47:25:10:44:4f:
d6:28:50:4a:3b:a4:94:76:57:9d:5f:d0:0c:5e:eb:11:c0:f6:
4c:44:19:50:4a:3b:1a:c3:0c:c7:55:80:5c:01:d9:34:fd:19:
f8:24:ad:f6:b7:a5:8c:b2:10:18:c7:30:c9:7f:3d:5b:4d:78:
44:44:34:39:b5:35:0d:98:dd:de:16:ae:7b:dd:aa:a6:71:3c:
a9:1c:42:ad:26:48:e9:f8:41:47:c6:f3:40:84:dc:05:ff:71:
7d:8b:81:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:57:47 2026 by rpki-client