
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft
File: 1SAZKpWvyNXyc3TZo0xGM859rEQ.mft (raw, json)
Hash identifier: wM3vdlr+1fs1R/SNKfMeFc1ZBA0UBjsM0+D4FRnrWtE=
Subject key identifier: F5:5E:D8:03:82:19:D7:EB:A4:DA:5C:C4:34:FD:FA:76:E6:B7:DD:90
Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44
Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44
Certificate serial: 0279
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft
Manifest number: 0266
Signing time: Mon 05 Oct 2026 02:41:26 +0000
Manifest this update: Mon 05 Oct 2026 02:41:26 +0000
Manifest next update: Mon 12 Oct 2026 02:41:26 +0000
Files and hashes: 1: 1SAZKpWvyNXyc3TZo0xGM859rEQ.crl (hash: JhvYvlXOvAuSA6NXk4gvCU2P5tcfWDz7fDPZuKpubD4=)
2: D42F5C768D6C11F18EE805546F11F970.roa (hash: Sz/65WULpY02tU1/WSVRdUsQAN8B0cHXUocGj84jNV8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl
rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 02:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633 (0x279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44
Validity
Not Before: Oct 5 02:41:26 2026 GMT
Not After : Oct 12 02:41:26 2026 GMT
Subject: CN=6ac30e56-e968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bb:30:b1:93:6d:8b:ea:00:33:1a:60:52:ce:
d3:be:e4:c0:5a:cd:ab:7d:38:6e:24:a3:73:87:eb:
08:81:87:0f:b8:21:0a:e7:46:a5:4e:01:4d:02:38:
46:09:95:ee:b7:99:e1:85:23:96:8c:05:17:c2:7d:
03:b5:ab:6c:3d:d7:d4:e4:7b:5c:8c:86:1c:4d:7d:
2c:4f:72:3c:e2:86:12:dd:38:01:53:9a:d8:fd:aa:
26:c8:98:0b:01:23:07:dd:ba:db:b3:00:24:ca:b1:
f8:f8:f2:21:d4:58:65:1e:74:06:2b:9c:83:b6:08:
ea:17:76:36:1c:7f:d9:68:28:34:66:72:2f:4d:85:
9f:89:fd:16:09:5d:98:a8:7f:d8:48:31:42:7b:01:
09:78:56:a9:0b:09:33:97:c7:7d:05:b5:63:2d:a9:
42:03:ac:7d:60:6c:d9:14:33:42:f4:0d:65:76:97:
d4:ea:ae:fb:01:c4:ab:d1:39:7a:27:fa:79:ec:a9:
4e:a2:2e:31:f8:33:43:b5:e2:96:f5:9c:31:bf:d2:
71:05:7e:d8:0e:ec:fd:51:16:a4:23:72:06:c2:40:
6c:11:2a:7d:76:47:9e:87:a0:2e:52:15:ad:1c:8f:
51:0d:46:87:5e:71:e2:84:89:c3:32:b5:45:a1:13:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5E:D8:03:82:19:D7:EB:A4:DA:5C:C4:34:FD:FA:76:E6:B7:DD:90
X509v3 Authority Key Identifier:
keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:4d:9b:2a:70:32:7a:3f:8b:41:61:de:1c:7b:10:0d:23:f0:
f9:3f:7c:b4:e2:a6:aa:21:c5:dc:ee:7e:d9:e2:e8:8a:e4:a3:
9c:b4:4d:1b:2d:5d:15:8b:14:88:e4:ee:b0:fa:e1:14:6c:e5:
aa:ad:4a:81:fa:01:66:8d:2a:eb:e4:f2:e4:07:c3:2d:aa:d4:
9c:c0:87:64:3d:e4:23:2e:cc:62:a5:5d:34:60:97:57:10:fd:
f2:18:8f:81:bd:30:1d:41:a0:0a:2a:77:92:d8:d4:b6:96:d9:
b1:46:f0:19:d7:20:1b:78:91:d6:50:77:da:16:ff:16:2e:a0:
e9:9b:89:f7:d2:01:f2:9e:a4:ef:7a:16:17:f7:c7:2e:72:9b:
19:65:03:03:ea:e4:fa:8e:f4:e2:65:7c:cb:48:4c:e7:67:31:
69:66:89:f2:e0:86:29:83:aa:46:c7:96:37:3b:7a:ad:84:05:
e1:59:c9:ca:44:d7:a9:e2:96:6f:42:ed:b0:e3:68:6a:1d:6f:
bf:75:e9:80:7b:e3:60:68:fe:3a:c2:86:36:37:65:e8:f5:ea:
36:65:b3:40:ff:9a:e8:f7:51:09:47:eb:b2:3d:55:81:a9:f5:
80:cc:98:d8:b7:57:85:a3:c9:27:77:8d:41:ba:91:6b:fd:ee:
8b:d6:07:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 12:21:30 2026 by rpki-client