
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft
File: 1qn8yzagJxy8XxErtyBaV7n0hPc.mft (raw, json)
Hash identifier: 15xLCHCkrXVxw7D5737E30ASWxZqy3yvdhoGT1I1mZk=
Subject key identifier: 58:0E:E3:A5:3B:4E:8D:A9:AF:71:33:6F:7E:30:74:42:F7:67:D1:D5
Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7
Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7
Certificate serial: 04B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft
Manifest number: 049D
Signing time: Thu 16 Apr 2026 23:55:34 +0000
Manifest this update: Thu 16 Apr 2026 23:55:33 +0000
Manifest next update: Thu 23 Apr 2026 23:55:33 +0000
Files and hashes: 1: 1qn8yzagJxy8XxErtyBaV7n0hPc.crl (hash: fQyjZCdjPpCB0t9bjjfSXMjQfIDZfbimXsT9bCNoAKA=)
2: 819150603F3411EF85BAC749C4F9AE02.roa (hash: fmRvDrlAVUP4IPzjCxKSFO/W9oPKrGtnnlxwGGwestk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl
rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:55:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1202 (0x4b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168126, serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7
Validity
Not Before: Apr 16 23:55:33 2026 GMT
Not After : Apr 23 23:55:33 2026 GMT
Subject: CN=69e176f5-4bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:28:70:2b:21:50:b3:d9:f3:40:7c:a3:9a:df:
c8:46:31:03:c9:1e:c3:1b:5f:54:bd:1b:03:75:2a:
1c:11:24:88:f9:d5:c0:7a:81:2b:48:ff:13:85:78:
5c:c0:51:53:c5:69:3a:ff:8d:ea:06:46:9a:59:be:
3e:3b:a9:a2:83:95:ef:32:0b:f6:9f:41:a2:6b:c8:
c1:06:b5:c5:d5:47:2d:e4:03:1b:dc:81:65:72:9f:
80:f9:a9:95:16:db:92:ea:95:21:22:51:93:ab:a5:
32:9b:fe:1e:35:cb:63:c0:25:82:a2:61:cf:2f:9c:
b5:75:8e:2e:08:06:4f:cf:a9:17:99:4b:5f:ed:df:
fc:57:8e:90:90:19:18:7f:0a:4a:8c:5d:99:be:60:
65:b5:29:3b:35:e0:d0:5b:f8:09:b1:d1:99:ed:79:
5b:cc:e6:e9:2a:60:41:4c:e7:93:72:68:81:d5:45:
4d:ae:0f:f2:bd:4a:b3:e5:51:9e:c9:e7:b0:2c:6e:
ba:64:44:01:3c:10:4d:13:3f:5e:18:fd:09:dc:94:
b3:3b:07:f6:b5:a0:9b:0c:9d:c8:12:6b:07:0d:40:
83:68:89:25:7a:af:69:d5:c8:18:36:7f:29:67:27:
ce:a6:b9:7e:1e:e8:19:d0:bf:16:22:b8:99:59:b2:
9b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0E:E3:A5:3B:4E:8D:A9:AF:71:33:6F:7E:30:74:42:F7:67:D1:D5
X509v3 Authority Key Identifier:
keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:ab:d0:80:d0:4d:5c:ed:fd:8d:a8:55:c7:dd:71:be:be:f7:
03:8b:fe:c0:f9:f2:c5:03:32:96:ae:21:b4:6a:85:cc:47:a2:
c2:87:be:6c:88:87:11:79:93:cb:66:19:1b:16:f0:f3:cb:f0:
43:6c:2d:c9:de:34:81:b9:85:0b:dc:cb:c8:c5:72:9d:11:24:
01:56:8c:d6:3f:14:09:07:cd:41:d7:43:6f:7b:ee:ec:81:ba:
9b:f1:9f:4b:99:ce:41:80:2c:0f:52:19:e0:39:11:1b:42:2b:
2a:1b:5e:05:2c:75:f9:dc:20:58:12:fc:1d:26:fc:7a:7e:63:
1d:33:fe:0e:11:73:93:5a:0f:6e:81:73:53:80:c9:84:c4:6f:
42:ff:f0:a3:fd:a6:fe:06:de:2c:9c:ae:d6:a8:df:5a:ee:31:
ed:0f:86:c4:e8:fa:27:1e:f5:a7:43:94:62:e1:d1:e9:35:eb:
7a:4b:e6:5e:e4:0b:7b:4c:33:05:89:1f:31:fb:22:06:a3:6f:
22:49:33:cb:f9:aa:0b:69:07:13:ef:99:57:11:2b:18:85:c3:
4d:1e:f0:6b:73:3f:8d:69:b8:cb:87:a9:25:1a:81:be:a1:10:
19:c4:6c:90:64:53:00:2c:80:75:a8:50:cc:74:bb:ea:d1:39:
cb:1c:b5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:06:06 2026 by rpki-client