
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
File: 1pYa2ozVd8wz1xqaLcgbDBklrJg.mft (raw, json)
Hash identifier: ++0vp10v4BfTHflAegs9ccjxT94H9CmFDHwnmiaH114=
Subject key identifier: 54:58:10:46:FB:53:04:8A:B6:E1:CE:28:C3:CE:CF:D6:37:66:8F:22
Authority key identifier: D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98
Certificate issuer: /CN=A9179CA8/serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98
Certificate serial: 0224
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
Manifest number: 0220
Signing time: Sun 01 Mar 2026 03:34:16 +0000
Manifest this update: Sun 01 Mar 2026 03:34:15 +0000
Manifest next update: Sun 08 Mar 2026 03:34:15 +0000
Files and hashes: 1: 1pYa2ozVd8wz1xqaLcgbDBklrJg.crl (hash: 5rkubPDRECTbkQExN+HfaYGOHdb47VgCFlkSDkYENKM=)
2: B94E87EAD44911ED88A2367FC4F9AE02.roa (hash: QVZDCd1ya5oxlLiJqZP/4xPWOb/nFUonfRIHAss0Ydc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl
rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179CA8, serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98
Validity
Not Before: Mar 1 03:34:15 2026 GMT
Not After : Mar 8 03:34:15 2026 GMT
Subject: CN=69a3b3b8-0ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2b:50:eb:b3:f7:0c:12:6c:cf:6f:11:83:33:
52:1a:21:87:f1:df:06:49:68:c3:f8:f5:59:ec:cf:
50:1b:de:fc:9b:92:8e:7d:81:1e:56:a4:12:68:7a:
9b:a8:e3:9f:51:f0:52:49:32:1d:9f:6f:9d:ae:86:
c3:c3:5a:3e:51:39:0a:75:00:da:80:f8:3a:f9:b5:
58:83:33:b4:f8:18:9e:7a:91:de:24:00:b9:e6:e1:
d9:ff:0e:24:cc:80:b4:83:b3:24:42:6b:e0:cc:da:
52:75:72:43:1a:42:95:b0:b9:3f:7e:d2:17:d2:b3:
2c:85:a7:f5:0c:3b:30:84:9d:ad:f1:3b:91:9b:ef:
3d:90:37:2e:3e:86:ed:8a:37:e4:ee:23:36:da:7c:
a0:f6:4a:85:40:67:67:e4:78:81:23:0c:b4:44:d7:
49:9a:09:cf:5a:d7:9a:32:9b:0d:dd:bc:ae:29:5f:
5f:cd:2c:f8:f5:6e:e5:6d:a9:82:aa:a9:68:02:2e:
d7:5a:89:2f:4d:b9:3a:c8:d7:51:fa:60:bd:0b:08:
22:04:07:d0:47:d1:81:bc:9f:8e:00:66:a2:4f:0b:
a7:9e:20:09:16:c8:17:46:0d:7e:ae:72:5f:ab:98:
7e:ef:48:3b:74:32:2b:26:1d:a4:f7:d4:88:2c:14:
31:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:58:10:46:FB:53:04:8A:B6:E1:CE:28:C3:CE:CF:D6:37:66:8F:22
X509v3 Authority Key Identifier:
keyid:D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1f:31:09:8e:83:65:96:fe:89:d7:82:58:2c:30:cb:e6:18:
c0:40:c5:ab:f8:fb:00:fc:d1:76:24:0b:db:8a:62:e3:c8:dd:
65:7b:9a:90:93:58:bb:cd:38:02:54:9e:ce:4e:b6:f9:1a:fb:
9e:11:c9:7d:ef:42:94:91:d0:ac:e5:0e:08:59:b9:f6:d3:69:
24:1f:3e:f9:75:b7:55:ef:20:98:50:b3:d4:c5:fc:4a:5e:bf:
5e:62:a9:b1:1a:3b:85:28:b0:44:a7:73:33:73:90:bb:46:c8:
4d:22:9a:98:f3:a3:06:3d:ef:b4:0a:b6:ba:55:46:ff:e0:e8:
68:f4:7b:d4:fe:0e:84:78:d9:68:3a:e2:62:03:ef:aa:8f:cf:
47:9b:7f:d6:17:73:cb:77:8c:af:d3:21:be:04:72:4f:ea:97:
2d:d3:85:c5:a9:bf:06:97:82:1e:11:f6:ba:14:e1:a3:49:68:
af:44:ef:df:d8:81:31:e5:aa:ba:fe:d4:46:94:87:4f:14:1a:
fd:23:78:53:f5:82:1d:ad:83:d5:41:d0:3e:61:a8:82:62:40:
c0:1c:21:ce:8e:70:63:56:41:1b:d0:30:57:06:fe:e9:a2:0e:
1d:4f:51:b8:18:57:3a:24:50:c2:78:8a:cc:75:03:8d:cb:a1:
9d:40:05:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:57:30 2026 by rpki-client