
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
File: 1Y-DTjzFalATaTGkQZnby-WLhEw.mft (raw, json)
Hash identifier: JJzXXS7AHeg0IESTU3KSLsimrWWqq+7XikLQg4e0EVA=
Subject key identifier: 2C:50:40:C4:E4:E5:6B:22:0E:44:52:05:2C:CA:4A:02:49:69:8B:E9
Authority key identifier: D5:8F:83:4E:3C:C5:6A:50:13:69:31:A4:41:99:DB:CB:E5:8B:84:4C
Certificate issuer: /CN=A9178992/serialNumber=D58F834E3CC56A50136931A44199DBCBE58B844C
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
Manifest number: 87
Signing time: Mon 21 Sep 2026 07:37:43 +0000
Manifest this update: Mon 21 Sep 2026 07:37:42 +0000
Manifest next update: Mon 28 Sep 2026 07:37:42 +0000
Files and hashes: 1: 1Y-DTjzFalATaTGkQZnby-WLhEw.crl (hash: HA/0vdIulFXthEcmYfW1ZNPUVeIPhTUomRRPvPH6M4g=)
2: 694A4554ED2311F09CB4E0CD436F56BC.roa (hash: EhS//Fv0PhcyswJMfy8v37wRi8RtUogTTHlQepTJJls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.crl
rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178992, serialNumber=D58F834E3CC56A50136931A44199DBCBE58B844C
Validity
Not Before: Sep 21 07:37:42 2026 GMT
Not After : Sep 28 07:37:42 2026 GMT
Subject: CN=6ab0dec6-a524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:bb:6a:df:ff:12:30:fd:f8:09:67:2d:17:
72:3f:5c:11:42:1f:9f:e9:92:9f:89:32:bd:cd:46:
37:3c:7c:f3:d0:8c:5a:48:77:37:5b:cf:e4:79:f0:
0d:f3:cc:1c:f3:71:d7:0f:c3:9b:b0:f8:bc:f3:a0:
87:c6:8d:cb:73:8e:dd:01:61:6f:2d:46:05:58:9d:
5d:f8:93:57:84:d5:4d:ef:4c:76:79:1f:69:17:2f:
5b:3c:0b:59:2b:c5:e1:0e:56:9b:40:0b:10:a5:68:
47:81:39:e3:24:95:24:88:5b:79:35:b4:49:d9:0a:
ae:74:0f:95:17:30:3e:36:85:4e:eb:29:a1:2e:be:
ba:fc:9b:ef:9c:a9:1b:12:a8:20:ed:8f:e9:94:88:
3b:8c:c3:bd:a2:ae:57:30:ad:5f:fb:56:88:26:23:
29:1b:0f:62:8a:b2:21:d7:d2:31:db:5f:16:37:ba:
fa:8e:68:7f:1d:4a:eb:22:d7:48:2e:7c:4d:f5:de:
bf:65:1c:05:49:88:34:7f:fa:e1:dd:23:a3:52:49:
42:dc:80:5c:36:08:7c:a5:93:2a:7c:ce:1d:a7:a4:
43:42:74:9d:8b:9f:bd:80:ed:a9:29:ea:e2:11:34:
d3:90:d0:f7:48:3f:c4:53:41:0d:2f:ec:65:6b:2c:
0c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:50:40:C4:E4:E5:6B:22:0E:44:52:05:2C:CA:4A:02:49:69:8B:E9
X509v3 Authority Key Identifier:
keyid:D5:8F:83:4E:3C:C5:6A:50:13:69:31:A4:41:99:DB:CB:E5:8B:84:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f0:f5:a8:3a:37:b1:25:99:ef:4c:b7:bc:f2:df:9d:37:20:
ee:8a:68:ea:cc:c6:7a:43:81:b4:bc:41:73:7f:f5:12:3d:27:
69:b6:e0:48:b7:c3:80:c9:43:7d:21:17:8d:c9:6f:95:da:58:
bb:54:cf:cf:ff:4f:e4:69:e1:a9:ff:19:61:64:ca:ea:8c:50:
77:df:6b:2e:3a:aa:b0:12:bb:41:0d:fa:16:ed:aa:13:c8:62:
bb:90:ca:d9:63:95:ab:c0:a4:7d:b0:1e:fb:0c:c6:24:b0:ae:
cc:10:1b:f7:63:ab:5e:bd:fc:e3:a6:fd:7b:1a:b3:4c:ea:8b:
d2:4d:29:f1:7c:58:d7:12:d8:b9:89:33:f6:cc:88:d8:03:84:
20:50:d2:95:46:b7:51:a3:7d:73:db:d0:52:c6:d9:f5:2f:b1:
34:22:e5:4d:9a:04:0e:d0:25:16:bc:58:99:99:34:30:55:86:
87:25:21:c5:d5:5e:81:81:2c:27:20:b6:de:d5:dd:66:f8:0e:
3c:c1:35:a0:6f:f0:67:cc:66:9b:cb:e9:6b:c8:ed:fe:69:ca:
c0:2b:d2:d5:1b:d4:27:c4:03:6c:d9:96:a0:38:52:00:7a:f7:
ee:1c:39:0f:8f:a8:26:ea:e0:10:6a:c6:a2:52:a8:bb:dc:48:
6d:3c:9a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:06:50 2026 by rpki-client