
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft
File: 1SAZKpWvyNXyc3TZo0xGM859rEQ.mft (raw, json)
Hash identifier: tmWKPe5suSleKkEtocULbF/Y+DjovgIewTIPyxoA42E=
Subject key identifier: EE:0E:10:AA:86:9D:FB:46:C1:F0:10:D3:C5:39:9F:7F:D0:87:32:7D
Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44
Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft
Manifest number: 01F6
Signing time: Mon 02 Mar 2026 01:49:34 +0000
Manifest this update: Mon 02 Mar 2026 01:49:33 +0000
Manifest next update: Mon 09 Mar 2026 01:49:33 +0000
Files and hashes: 1: 1SAZKpWvyNXyc3TZo0xGM859rEQ.crl (hash: mEuZ+JRnZDVSZuzC3XZaJmTQ984XwQgfLP40dy8DR2s=)
2: 40D0157A4E6A11F088256D4EC4F9AE02.roa (hash: GtB+540Na9gBA/mhZk/pwr8xgrOuS92j17VMFwnTNm4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl
rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44
Validity
Not Before: Mar 2 01:49:33 2026 GMT
Not After : Mar 9 01:49:33 2026 GMT
Subject: CN=69a4ecae-1419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:0b:02:bd:1e:33:fe:0c:d5:15:75:b7:72:
f5:70:d7:17:61:51:92:b6:f3:2f:41:24:22:5c:1f:
0e:b3:c0:c5:69:bd:45:96:5f:b8:b8:8a:aa:a2:a1:
59:5b:06:84:6d:c7:84:24:6a:e0:92:23:a0:40:29:
37:cc:70:26:49:5a:93:80:30:33:0e:cf:cc:b3:0e:
07:d6:38:17:c2:fa:5e:51:40:b1:49:22:2a:b3:03:
fe:d4:96:e9:d5:eb:7e:3e:5d:95:58:73:83:3b:f6:
6c:3a:11:58:d0:aa:e8:11:0d:12:13:e7:76:cc:f9:
6f:48:19:ae:17:43:0a:70:1d:80:26:73:81:9c:bb:
73:6c:7b:d2:6f:db:7e:59:60:fb:94:73:a1:0f:b1:
b9:69:21:d7:45:78:67:30:1d:53:83:98:e1:74:06:
36:b7:e4:62:79:43:0e:03:b5:9b:88:7f:85:8c:02:
35:19:db:d5:11:91:ae:8c:b3:57:f7:d6:3b:61:5d:
b5:aa:4f:d4:5a:6b:96:21:fd:1d:c0:ae:0b:59:6f:
9f:db:19:56:e3:b9:bb:82:c9:b7:2d:a9:f3:a6:5f:
9d:9b:1c:bd:20:c8:41:e6:ed:c1:12:9c:8a:2d:c8:
44:28:29:97:62:78:b0:96:3f:ff:b1:58:0f:f1:73:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0E:10:AA:86:9D:FB:46:C1:F0:10:D3:C5:39:9F:7F:D0:87:32:7D
X509v3 Authority Key Identifier:
keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:9b:d9:20:cc:1b:75:b0:39:e7:dd:82:bf:e5:77:77:34:cd:
a1:35:68:ce:17:4a:a5:f2:78:8e:a6:3f:be:b9:0b:a5:86:a9:
da:d2:7d:50:bd:c3:1c:58:47:18:95:5b:1b:b5:35:8b:91:1f:
b2:fb:d1:b5:78:fb:97:03:b7:4c:0f:10:07:ba:d2:bf:2d:73:
6e:58:4e:30:90:ed:b5:f6:53:40:9a:17:78:26:90:20:e6:b9:
e7:c7:65:e0:6f:dc:56:65:7b:6b:3a:1b:64:b8:60:1e:9d:51:
d9:72:51:ed:50:e7:16:40:03:75:23:35:c6:08:2c:63:ee:7c:
31:97:75:cd:45:28:24:92:82:ec:65:07:24:dc:1a:89:4f:b3:
e9:75:8a:62:41:25:01:e4:26:46:80:57:51:13:6d:f3:76:07:
0c:43:77:72:84:61:88:a5:9a:e8:be:9d:e7:a3:e3:55:85:9e:
15:af:a8:b7:ad:52:ef:7b:c8:8e:c6:ff:9b:ac:64:0d:8d:43:
df:42:89:e8:87:f0:a3:6e:32:e9:f1:f4:fa:f3:cc:58:36:31:
9c:21:10:7f:01:e7:27:cc:d8:41:66:59:8d:8b:f1:44:db:fd:
43:b9:63:3b:98:51:f6:ef:10:67:a4:b3:39:bf:95:1d:3b:83:
a9:8d:76:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlBOUMxMTAvBgNVBAUTKEQ1MjAxOTJBOTVBRkM4RDVGMjczNzREOUEzNEM0NjMz
Q0U3REFDNDQwHhcNMjYwMzAyMDE0OTMzWhcNMjYwMzA5MDE0OTMzWjAYMRYwFAYD
VQQDEw02OWE0ZWNhZS0xNDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApjwLAr0eM/4M1RV1t3L1cNcXYVGStvMvQSQiXB8Os8DFab1Fll+4uIqqoqFZ
WwaEbceEJGrgkiOgQCk3zHAmSVqTgDAzDs/Msw4H1jgXwvpeUUCxSSIqswP+1Jbp
1et+Pl2VWHODO/ZsOhFY0KroEQ0SE+d2zPlvSBmuF0MKcB2AJnOBnLtzbHvSb9t+
WWD7lHOhD7G5aSHXRXhnMB1Tg5jhdAY2t+RieUMOA7WbiH+FjAI1GdvVEZGujLNX
99Y7YV21qk/UWmuWIf0dwK4LWW+f2xlW47m7gsm3Lanzpl+dmxy9IMhB5u3BEpyK
LchEKCmXYniwlj//sVgP8XPPLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO4OEKqG
nftGwfAQ08U5n3/QhzJ9MB8GA1UdIwQYMBaAFNUgGSqVr8jV8nN02aNMRjPOfaxE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy9DM0E4MDQwNDNG
ODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlOWHljM1RabzB4R004NTly
RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFTQVpLcFd2eU5YeWMzVFpvMHhHTTg1OXJFUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUE5Qy9DM0E4MDQwNDNGODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlO
WHljM1RabzB4R004NTlyRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGZvZIMwbdbA5592Cv+V3dzTNoTVozhdKpfJ4jqY/vrkLpYap2tJ9UL3DHFhH
GJVbG7U1i5EfsvvRtXj7lwO3TA8QB7rSvy1zblhOMJDttfZTQJoXeCaQIOa558dl
4G/cVmV7azobZLhgHp1R2XJR7VDnFkADdSM1xggsY+58MZd1zUUoJJKC7GUHJNwa
iU+z6XWKYkElAeQmRoBXURNt83YHDEN3coRhiKWa6L6d56PjVYWeFa+ot61S73vI
jsb/m6xkDY1D30KJ6Ifwo24y6fH0+vPMWDYxnCEQfwHnJ8zYQWZZjYvxRNv9Q7lj
O5hR9u8QZ6SzOb+VHTuDqY12JQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:15 2026 by rpki-client