
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft
File: 1AsQwSJMYeDTGML8YAOTeOz3LQA.mft (raw, json)
Hash identifier: r0205pM1MotR2lWs1BdNQbqihKz7KxZcpAN7DDfwh58=
Subject key identifier: F9:AD:5A:8A:C0:95:D7:26:2C:ED:51:11:B5:9B:08:99:69:8F:20:C3
Authority key identifier: D4:0B:10:C1:22:4C:61:E0:D3:18:C2:FC:60:03:93:78:EC:F7:2D:00
Certificate issuer: /CN=A9167C20/serialNumber=D40B10C1224C61E0D318C2FC60039378ECF72D00
Certificate serial: 0BC4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft
Manifest number: 0BB4
Signing time: Tue 18 Aug 2026 19:20:13 +0000
Manifest this update: Tue 18 Aug 2026 19:20:12 +0000
Manifest next update: Tue 25 Aug 2026 19:20:12 +0000
Files and hashes: 1: 1AsQwSJMYeDTGML8YAOTeOz3LQA.crl (hash: Z0fyJeE61kis3pJ404J9FJmTAyCpR6ttskj6WeOglw4=)
2: AD35C0044EA511EAAB9DBE7DC4F9AE02.roa (hash: ++OmRdpWu3XIPu43iBXnmAM59CLsJ6ZGIdHZAm0yrgA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.crl
rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3012 (0xbc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167C20, serialNumber=D40B10C1224C61E0D318C2FC60039378ECF72D00
Validity
Not Before: Aug 18 19:20:12 2026 GMT
Not After : Aug 25 19:20:12 2026 GMT
Subject: CN=6a84b06d-ef86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:0a:c4:7f:b0:77:aa:46:0b:b5:6f:b3:94:
1b:38:40:b7:c7:41:9c:2d:13:a7:55:93:f5:e4:b8:
c2:03:1e:6a:72:ef:1a:2c:4e:a3:6a:d0:7a:4c:47:
83:27:38:38:e9:cb:04:07:6f:83:1c:e9:d6:7d:c8:
30:1c:a1:03:76:bb:c5:77:9b:d4:55:9b:4a:be:76:
6c:ae:8c:2c:3d:28:88:86:02:9f:1e:5b:cf:d7:b1:
c4:6b:e5:26:79:22:83:35:75:30:bf:39:ea:a9:ab:
97:96:24:73:19:a2:0d:8e:4c:2c:25:95:28:32:80:
46:96:40:b7:16:e5:5d:39:a7:0b:60:e8:9c:c5:a6:
07:dd:1b:56:01:28:2b:6e:9f:3a:bc:50:e1:da:e4:
6c:8f:54:ff:c0:fb:95:f1:63:9e:ba:39:48:00:fe:
5e:8c:b7:f0:e8:3e:6c:36:cc:e8:6a:e2:9f:b5:fa:
b3:15:e1:68:57:e1:f9:6b:30:b0:7c:46:d5:4e:a7:
75:57:be:cd:69:3d:86:e8:49:20:eb:2c:b0:43:3b:
7c:15:2b:5c:21:74:fa:b3:44:96:1d:84:89:23:ea:
0b:bd:ef:be:f3:7f:92:ea:69:00:3b:86:60:a7:36:
82:9c:79:de:55:06:49:7f:b5:33:ff:8a:6b:e5:1a:
0a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AD:5A:8A:C0:95:D7:26:2C:ED:51:11:B5:9B:08:99:69:8F:20:C3
X509v3 Authority Key Identifier:
keyid:D4:0B:10:C1:22:4C:61:E0:D3:18:C2:FC:60:03:93:78:EC:F7:2D:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:a0:99:b0:f1:20:f5:e0:0d:7d:a9:cc:42:6e:48:2e:74:88:
58:e1:e2:fb:58:4a:a2:7b:27:20:34:93:02:17:d8:29:c5:06:
8a:31:fb:d2:67:55:e7:a8:99:83:4f:4a:64:2c:a4:e0:ff:50:
7f:62:86:b2:db:96:fe:eb:c4:cf:89:51:e3:fb:ca:bf:6a:f0:
2e:02:4c:33:d8:ca:68:84:7b:bd:ac:d2:b2:dd:b6:0f:2d:a0:
d5:eb:47:cd:8e:61:8b:dc:e9:d6:9e:e1:73:5f:6d:27:11:5b:
07:ad:86:75:c5:eb:76:ff:12:df:0f:77:ce:30:3d:47:18:43:
3a:f0:a4:1c:dd:80:1d:4d:1d:8f:99:15:8c:2f:b1:f5:fd:74:
60:fb:03:e1:c0:a5:05:f6:c8:e4:22:6a:cc:2c:0a:86:3d:71:
c2:df:15:4f:83:9e:67:e0:0c:aa:05:2a:83:e8:c2:0b:b1:83:
b4:a7:ba:58:a0:00:3c:f1:f5:a4:49:c8:e4:72:80:b3:ae:ca:
0d:df:9b:74:25:37:7f:20:be:19:1b:18:e6:6d:54:2d:74:52:
74:34:3e:03:cc:96:dc:a3:0c:c5:ac:0e:40:35:d6:b6:96:64:
c3:64:1a:77:6f:a2:00:39:50:f6:d3:78:53:d3:82:26:b7:73:
68:7a:cc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:57 2026 by rpki-client