
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
File: 1Y-DTjzFalATaTGkQZnby-WLhEw.mft (raw, json)
Hash identifier: cAzN1DbM4/XR4WG/CaHa/bFLIfK2EsypGaZHi8sHbKI=
Subject key identifier: 8E:1F:44:8E:41:24:86:DD:56:53:1F:DE:C9:B6:C8:E6:76:26:7B:33
Authority key identifier: D5:8F:83:4E:3C:C5:6A:50:13:69:31:A4:41:99:DB:CB:E5:8B:84:4C
Certificate issuer: /CN=A9178992/serialNumber=D58F834E3CC56A50136931A44199DBCBE58B844C
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
Manifest number: 20
Signing time: Sun 01 Mar 2026 10:21:44 +0000
Manifest this update: Sun 01 Mar 2026 10:21:44 +0000
Manifest next update: Sun 08 Mar 2026 10:21:44 +0000
Files and hashes: 1: 1Y-DTjzFalATaTGkQZnby-WLhEw.crl (hash: C0eqhYeGCFd2WoDQYpJOma51VD6aJk+OfemkAZz1Fm4=)
2: 694A4554ED2311F09CB4E0CD436F56BC.roa (hash: EhS//Fv0PhcyswJMfy8v37wRi8RtUogTTHlQepTJJls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.crl
rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:21:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178992, serialNumber=D58F834E3CC56A50136931A44199DBCBE58B844C
Validity
Not Before: Mar 1 10:21:44 2026 GMT
Not After : Mar 8 10:21:44 2026 GMT
Subject: CN=69a41338-272a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:04:a6:f1:3f:84:05:62:21:04:f9:b9:aa:
85:ba:6a:13:52:63:da:80:76:c0:ce:d6:6a:29:37:
d9:31:02:f6:f8:79:dc:81:3d:99:a8:89:86:38:d2:
6f:df:e9:20:41:97:07:26:8b:77:67:0f:53:ac:01:
4a:c5:2a:a5:ad:bf:35:f2:4d:a7:e9:80:b4:c1:8b:
5a:7a:9b:2d:d3:4e:91:9e:de:35:7e:80:3d:ac:fe:
bb:56:c1:1e:62:b0:71:48:12:c7:e2:83:39:64:e7:
8a:68:ce:1a:5d:bd:4a:ca:c0:f6:2a:78:01:63:06:
c2:d4:e3:21:fa:ba:b4:e0:24:34:0c:b5:2d:9a:ad:
83:bb:50:eb:89:86:d8:73:c8:aa:49:61:d0:21:a8:
6e:e2:3f:f4:77:b0:fc:69:e4:f6:e0:bd:a3:d0:5b:
13:b6:25:92:5d:a3:61:c0:2f:bd:52:a4:34:51:04:
b7:2b:59:f5:c0:de:af:f8:28:f5:8c:25:ab:c6:61:
91:5b:72:7e:e4:33:54:4b:28:04:d0:80:24:b2:a9:
61:54:6a:bd:df:56:fe:3d:ac:3b:16:06:d5:05:8e:
8a:34:89:a4:7a:fe:78:c3:ea:d5:93:8a:30:af:12:
7c:41:31:1e:4e:54:46:76:e7:d6:bf:2e:e0:c2:32:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1F:44:8E:41:24:86:DD:56:53:1F:DE:C9:B6:C8:E6:76:26:7B:33
X509v3 Authority Key Identifier:
keyid:D5:8F:83:4E:3C:C5:6A:50:13:69:31:A4:41:99:DB:CB:E5:8B:84:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:d8:e6:d4:d1:dc:60:bd:f9:1b:58:36:05:7c:47:a4:e0:ae:
2a:b2:d1:d9:42:72:b6:ed:55:8f:87:c3:29:2d:7e:dc:50:42:
03:a9:2e:57:12:fb:73:ad:3a:ca:56:f4:4c:8a:81:7d:88:ea:
2c:f4:50:2e:9c:86:07:2d:35:a7:f9:cd:e6:ee:85:7f:a1:85:
a1:16:61:4b:94:ea:4b:da:9d:8b:8a:d4:47:94:d2:a8:a3:53:
bd:d2:a3:a7:47:12:ab:b0:d0:f5:67:0f:15:f5:b0:58:55:c5:
c0:55:33:5a:8b:72:fb:19:11:af:53:70:a2:8f:fc:83:93:84:
49:69:8e:33:9e:1b:29:62:d5:84:72:65:a7:e1:d4:1a:75:55:
d3:b1:bf:01:f5:0e:e3:26:8a:8c:1f:6e:83:51:f2:21:79:bb:
56:2e:06:50:80:7e:54:5d:eb:1f:09:10:be:e3:80:45:c0:82:
35:75:19:8d:0a:36:7e:03:88:69:4f:92:f7:a0:b3:6c:94:d0:
c6:a3:a0:92:63:b5:44:e4:c6:bd:e1:ad:9d:f1:84:1f:e1:b0:
e3:1d:c4:2f:6f:fe:34:04:85:b0:13:42:97:c8:ba:21:a2:f3:
ea:f3:d1:78:3e:ca:57:53:ca:97:e6:1b:ab:c8:8a:42:2b:ae:
be:fe:2c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:29 2026 by rpki-client