
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
File: 1gA1BzfqQktAGySBBT0rwpFsutE.mft (raw, json)
Hash identifier: xnF2WIDYsgK14PofgUUK2KS4VZo8Gai3LSM/j0DlH3A=
Subject key identifier: D6:B3:4C:12:D0:61:D4:ED:03:D5:BD:2F:A0:30:BD:11:33:FF:E6:90
Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1
Certificate issuer: /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
Certificate serial: 0140
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
Manifest number: 0137
Signing time: Sun 05 Apr 2026 04:56:19 +0000
Manifest this update: Sun 05 Apr 2026 04:56:18 +0000
Manifest next update: Sun 12 Apr 2026 04:56:18 +0000
Files and hashes: 1: 1gA1BzfqQktAGySBBT0rwpFsutE.crl (hash: kOvkr1oJOoZ925dO3FpVazEh71I0CPNf8gnTfPn3FqA=)
2: FD557922606A11EF8B9F6820C4F9AE02.roa (hash: lDQFfJvg8sN9IbyOUgeEIh9zzBtKTvvIBaVemnoUUzo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl
rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154973, serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
Validity
Not Before: Apr 5 04:56:18 2026 GMT
Not After : Apr 12 04:56:18 2026 GMT
Subject: CN=69d1eb73-0265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ee:d7:45:6b:97:4c:43:c2:0b:85:55:52:1e:
f8:3f:ab:2d:a3:e9:d3:f8:87:2b:cf:bc:a4:31:28:
e4:4b:a5:b9:42:f1:b7:d3:f6:df:6c:11:07:0d:9e:
8c:ad:05:02:92:9d:24:53:2b:e3:23:32:77:8f:7c:
22:58:2d:12:c0:85:d4:21:a8:b6:b4:91:fd:19:b1:
03:25:8d:99:7e:6b:90:cb:7e:3a:a3:c8:14:66:e0:
a7:06:6b:05:fc:93:da:b9:d3:45:e1:1a:7b:e3:77:
a4:6f:60:2d:59:0b:b5:bf:9d:ea:df:20:89:f0:e7:
27:3b:27:68:68:65:34:81:4f:46:ac:73:0b:e3:d8:
5a:a0:16:61:6d:af:0d:0c:58:00:95:53:cf:04:f8:
79:ff:66:90:66:47:66:6a:ee:ca:9f:07:6b:b5:5e:
86:09:dd:40:b4:0b:89:7b:82:71:7e:3d:ac:b4:67:
f3:a7:69:09:ac:3e:13:fb:b7:0b:25:51:d5:16:0a:
59:3d:04:10:9a:70:da:84:f9:76:3a:9a:09:76:e6:
93:cb:77:96:c8:f9:83:01:58:3d:52:80:d2:6b:1e:
8b:85:78:92:d3:81:65:02:75:25:c2:66:0d:0f:90:
d3:58:df:6e:96:5a:08:3b:5e:fb:a6:a1:7a:d6:a6:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B3:4C:12:D0:61:D4:ED:03:D5:BD:2F:A0:30:BD:11:33:FF:E6:90
X509v3 Authority Key Identifier:
keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:ab:80:47:76:17:6a:07:f7:f6:36:f0:d3:cb:b8:5f:83:3f:
c6:7c:89:e1:8b:6d:4e:55:bc:a3:97:86:d1:6c:6e:d9:fd:dc:
b0:5e:a2:74:db:5d:99:0d:c6:92:33:54:dd:1b:f6:02:56:a9:
d0:d2:ee:97:87:c3:03:19:84:0d:54:c4:ea:0d:43:49:ae:79:
0b:8b:c1:d6:f4:bc:ef:cd:e0:1b:fb:74:b0:1d:69:5a:4c:0a:
4f:d9:d1:ec:5f:9a:25:2d:e5:2a:06:fe:43:0c:24:fb:b4:a3:
b0:b6:96:00:d9:ed:1c:14:d0:e5:a6:cb:df:5d:06:07:e5:0a:
2c:62:de:d2:fc:9e:7a:ef:13:f6:2b:cc:53:df:f0:da:5e:66:
0c:fc:24:8c:00:0d:26:34:57:7d:73:7e:c0:55:bc:63:04:3b:
18:15:40:2e:e4:71:61:99:55:7f:e6:fb:99:28:73:00:7d:ac:
c7:b9:60:45:9b:ab:2e:1b:12:bf:79:f2:db:4f:03:a3:8e:f6:
a4:79:49:70:69:3e:73:1c:a0:9f:a1:23:98:71:e1:a4:b0:82:
85:ce:1c:50:5f:86:1c:be:80:11:81:13:b1:ae:3f:0d:34:d6:
08:d4:70:45:ed:3b:12:a9:ae:0d:a4:48:64:92:bd:e4:9e:c6:
2b:e6:b1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:18:44 2026 by rpki-client