
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft
File: 1AsQwSJMYeDTGML8YAOTeOz3LQA.mft (raw, json)
Hash identifier: hJLtp75TTQsqY/mXKTCFI8BnMsZf17QPFCpAnEMvYTc=
Subject key identifier: 15:67:FA:84:C0:33:FC:F7:AE:ED:32:B7:7C:7B:05:D6:0D:96:E3:F2
Authority key identifier: D4:0B:10:C1:22:4C:61:E0:D3:18:C2:FC:60:03:93:78:EC:F7:2D:00
Certificate issuer: /CN=A9167C20/serialNumber=D40B10C1224C61E0D318C2FC60039378ECF72D00
Certificate serial: 0BD4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft
Manifest number: 0BC4
Signing time: Fri 18 Sep 2026 18:59:52 +0000
Manifest this update: Fri 18 Sep 2026 18:59:52 +0000
Manifest next update: Fri 25 Sep 2026 18:59:52 +0000
Files and hashes: 1: 1AsQwSJMYeDTGML8YAOTeOz3LQA.crl (hash: TJSSC1tCYkx/9oGsDeKdiAW1aVrUXLIs36kXk8UhjEg=)
2: AD35C0044EA511EAAB9DBE7DC4F9AE02.roa (hash: ++OmRdpWu3XIPu43iBXnmAM59CLsJ6ZGIdHZAm0yrgA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.crl
rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3028 (0xbd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167C20, serialNumber=D40B10C1224C61E0D318C2FC60039378ECF72D00
Validity
Not Before: Sep 18 18:59:52 2026 GMT
Not After : Sep 25 18:59:52 2026 GMT
Subject: CN=6aad8a28-cb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:30:ab:5d:74:f9:d3:35:94:d9:9f:39:5f:
90:57:96:d5:18:82:62:e3:57:48:35:81:8c:95:61:
8d:10:84:6e:9b:1e:4b:44:aa:69:23:c2:f4:90:24:
7d:2b:32:c1:92:f6:d0:6e:13:22:43:e6:25:c8:d8:
d4:54:de:1b:ea:06:56:74:02:fe:a5:b0:42:ae:16:
83:7d:c8:37:1a:37:9f:ff:cf:95:8e:8a:eb:55:05:
02:1a:74:8b:b1:11:a5:b1:30:f2:1b:a8:09:f3:24:
2c:89:68:0c:6c:fb:29:f1:6c:e7:28:eb:ef:a8:9b:
17:59:0f:fc:f0:d4:af:03:8d:08:d1:0a:38:8a:67:
59:16:7a:6d:8b:69:3d:10:f9:28:17:d4:24:71:d7:
86:d6:5b:ff:e5:c9:cd:9d:a6:c1:9d:61:e9:a6:53:
e9:38:bc:0c:79:f2:f3:9c:1d:7f:cf:50:95:9e:43:
d1:a8:8a:3d:42:7a:61:35:0b:94:60:b8:4a:7d:bb:
91:37:f7:3c:3c:cd:d1:31:57:0a:13:17:3e:98:2f:
3d:9f:9e:90:3b:7a:33:86:70:18:bd:a9:b7:6a:85:
3a:09:45:e3:60:f8:c3:f2:01:4e:60:aa:30:d9:90:
8c:2e:03:a4:44:fb:f7:f1:86:39:80:b8:6d:c9:bb:
23:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:67:FA:84:C0:33:FC:F7:AE:ED:32:B7:7C:7B:05:D6:0D:96:E3:F2
X509v3 Authority Key Identifier:
keyid:D4:0B:10:C1:22:4C:61:E0:D3:18:C2:FC:60:03:93:78:EC:F7:2D:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:01:95:0d:31:16:23:d7:99:81:cc:53:65:ff:4d:28:b6:9c:
e6:10:38:88:3b:27:b8:08:03:6c:e9:60:9f:97:bc:aa:0f:af:
86:9a:71:a0:e6:cf:39:44:2e:6c:fc:d0:3c:4d:ed:0b:68:b0:
9f:b0:06:0e:ee:2b:57:5a:f3:19:df:42:4d:9c:d2:a3:81:f4:
02:04:31:78:98:00:89:6a:c2:54:29:af:03:d3:2f:cf:ff:df:
bd:86:cf:c6:24:f0:fd:06:20:b9:8e:81:2f:37:b2:c9:00:87:
b9:07:0b:9a:66:1a:cc:51:e7:6d:0d:fd:8f:d6:14:b2:d4:07:
00:79:95:d6:33:92:1b:21:c7:e7:66:6d:ce:5d:7b:bf:b3:87:
c5:00:f2:50:5f:8e:7c:ab:d9:4a:ce:6c:c6:a4:cb:b5:af:d6:
f9:da:2f:36:58:05:82:6e:5b:dd:63:07:93:68:03:90:6b:6d:
9d:25:89:96:88:18:40:74:6c:45:b1:9e:fe:3f:33:09:b2:82:
ad:a0:45:0c:29:ab:18:92:e1:49:ec:78:c1:a5:95:49:58:b5:
09:a4:79:d0:c0:b6:25:32:e1:fc:90:9b:6b:70:2f:3d:4e:95:
c9:1a:53:4f:17:92:32:4b:21:9a:52:00:6d:53:f0:62:7e:06:
f3:a7:dd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:12:44 2026 by rpki-client