
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft
File: 1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft (raw, json)
Hash identifier: fsrqtu8k7e0/ew3fWMCzkypvIrXgZeOInG5GOxi599k=
Subject key identifier: B2:CD:85:A5:F9:65:E8:9C:7D:F1:A5:93:59:A3:4A:B3:EE:09:6A:DB
Authority key identifier: D6:A6:02:93:4A:CB:E4:14:B3:49:A0:15:69:EB:B6:66:1E:54:A2:BC
Certificate issuer: /CN=A9171996/serialNumber=D6A602934ACBE414B349A01569EBB6661E54A2BC
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft
Manifest number: 7A
Signing time: Sat 13 Jun 2026 07:46:36 +0000
Manifest this update: Sat 13 Jun 2026 07:46:35 +0000
Manifest next update: Sat 20 Jun 2026 07:46:35 +0000
Files and hashes: 1: 1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl (hash: ghZ38D24OwzZB7GN/ZSreb5X4h3qnX5muu58eOIgImU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl
rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:46:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171996, serialNumber=D6A602934ACBE414B349A01569EBB6661E54A2BC
Validity
Not Before: Jun 13 07:46:35 2026 GMT
Not After : Jun 20 07:46:35 2026 GMT
Subject: CN=6a2d0adc-482f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:90:16:6b:18:78:fa:a0:25:2c:a9:f3:19:
eb:e1:70:ce:b9:98:17:cb:e8:48:c4:62:7f:0e:fe:
5e:b9:50:ce:20:b3:1d:91:f0:5d:ad:b0:34:e2:35:
2a:d6:f5:40:65:b3:a1:f1:d0:b0:22:8c:51:1d:c8:
cc:9b:d3:0a:97:87:9e:af:66:b0:e0:14:89:46:f0:
d4:2a:f7:93:ec:f6:ce:e8:87:ed:4d:13:a4:d0:43:
b7:a6:ad:cf:35:db:b7:1b:8e:59:55:60:7e:55:90:
3e:8c:05:e4:bf:a2:c4:c0:29:57:8c:9b:a4:7f:f1:
15:89:31:e4:b4:0a:28:24:a4:68:65:54:88:b4:56:
44:ae:fb:47:18:7e:04:4d:0d:41:30:51:19:5f:7e:
a9:39:22:56:e2:2e:d8:5c:19:49:91:e7:c5:68:e0:
65:26:c1:39:ee:08:26:50:1b:36:de:2a:e1:35:4f:
c7:f7:8f:e5:cd:21:1e:1e:8c:80:1e:b2:5c:e6:34:
23:4c:f8:a6:7c:3d:62:3c:8d:c9:71:9e:41:36:ad:
44:1b:b1:60:cb:14:f6:27:02:d4:4b:7d:11:be:4f:
e9:88:50:57:30:51:d3:92:44:15:3c:7d:da:38:dc:
fb:8b:3a:c7:a3:6a:a5:eb:44:8a:b8:35:5c:cb:d4:
66:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CD:85:A5:F9:65:E8:9C:7D:F1:A5:93:59:A3:4A:B3:EE:09:6A:DB
X509v3 Authority Key Identifier:
keyid:D6:A6:02:93:4A:CB:E4:14:B3:49:A0:15:69:EB:B6:66:1E:54:A2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:96:21:c0:4b:8b:d1:48:e7:a3:ab:fc:46:cf:35:bb:95:f7:
cd:ca:c7:68:9c:ff:2e:e5:eb:61:7e:a6:33:42:43:ce:ab:48:
cb:3f:b3:3d:eb:69:18:ce:fc:ea:e2:03:bf:08:17:1f:09:b5:
53:78:30:b0:f1:ef:58:2d:92:3c:e2:37:b7:e2:52:cc:61:25:
b9:b5:df:56:05:2c:ad:37:71:98:e8:cb:ba:ac:aa:95:46:12:
6e:7d:1d:5e:f2:0d:0b:5c:94:0e:f2:3c:80:14:64:fc:ff:d6:
f7:f2:a4:d3:d2:c6:07:03:ad:de:fa:6f:56:df:60:11:94:7a:
5b:ba:6c:fa:c2:99:f9:f3:f8:12:eb:cc:cd:52:08:11:33:db:
96:cb:88:96:55:31:c4:cf:6f:0f:39:3e:55:34:4d:06:2e:79:
cf:38:bd:be:dc:41:9b:d7:76:4a:e4:c6:d4:87:98:b0:dd:fe:
41:2f:c1:f1:1f:83:7c:c2:7d:06:b4:ac:9d:e1:b2:ee:b0:d4:
0d:31:cd:b5:d5:62:e2:8e:9c:6a:1b:ee:6b:b5:a3:c1:16:e9:
b7:4b:95:e2:f5:f7:2f:ce:11:ea:09:04:3c:dc:60:c8:c2:6e:
91:ca:74:28:0a:cd:d1:32:b0:5a:3f:cf:87:9a:5d:78:71:97:
bb:8f:7c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:32:07 2026 by rpki-client