
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
File: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft (raw, json)
Hash identifier: HBGxeaA/cdIIPo2dk9aTUbozkzgnkM42/AL2ltezhkA=
Subject key identifier: 2C:8A:A3:45:F2:FD:FC:C8:D1:EE:65:CE:C3:67:49:AB:79:65:D5:36
Authority key identifier: D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57
Certificate issuer: /CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
Manifest number: 0155
Signing time: Tue 25 Aug 2026 05:06:36 +0000
Manifest this update: Tue 25 Aug 2026 05:06:36 +0000
Manifest next update: Tue 01 Sep 2026 05:06:36 +0000
Files and hashes: 1: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl (hash: dhtdr3K8v+0eeB2VZkL1RL4UhYrsyurgNFDaPQRx7rw=)
2: EB2858349B4B11EF86A11C85C4F9AE02.roa (hash: V6hcLW3DIWJr5GsqXhQQoqs6tXkMxQGHQdAMhmhtdMQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl
rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 05:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170F11, serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557
Validity
Not Before: Aug 25 05:06:36 2026 GMT
Not After : Sep 1 05:06:36 2026 GMT
Subject: CN=6a8d22dc-1bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a5:26:c3:f8:17:b1:b8:cc:0b:ce:c4:64:32:
24:88:05:e4:c6:ef:78:91:9a:40:d6:02:eb:e2:a8:
02:bb:fa:3b:f0:a4:68:89:65:a4:c5:6a:d3:14:3a:
39:a6:2c:c1:64:f4:c2:8f:b7:1f:f1:ed:2f:69:85:
9b:a0:80:80:b6:ca:08:22:51:3a:dd:32:c4:db:cd:
bb:b8:fe:ed:59:f6:61:c9:22:51:95:5c:db:02:20:
6e:6e:b9:2d:3b:57:b4:67:ed:01:9a:9e:1f:5b:b2:
62:c7:ac:4f:58:95:94:8f:9a:3e:54:dc:09:de:74:
07:00:f4:b6:a2:8c:ca:ab:89:82:c5:52:2d:23:17:
0d:80:db:2f:6d:1a:f1:4f:3c:73:43:30:ab:aa:75:
01:b9:d2:bb:a4:cb:64:7a:d8:71:34:bf:9a:68:2f:
69:21:05:37:89:72:c5:0c:39:fe:6e:83:f0:32:c9:
3f:07:8a:b3:8b:0b:5d:7e:9c:f8:9f:89:f1:32:31:
16:06:0d:68:14:38:64:8a:cd:65:26:6b:04:09:22:
cc:69:17:cd:d8:70:0c:23:36:4d:b1:78:50:e8:90:
c7:d0:5b:8e:01:e9:e3:50:95:ab:ef:ee:b8:94:37:
ed:f9:2c:7b:9e:e0:5d:6b:74:cb:f4:36:3b:06:20:
4c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8A:A3:45:F2:FD:FC:C8:D1:EE:65:CE:C3:67:49:AB:79:65:D5:36
X509v3 Authority Key Identifier:
keyid:D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:74:98:8c:f2:5b:3e:a1:51:87:e9:51:3b:83:ec:e0:cc:37:
20:70:7c:b3:df:05:ae:c9:a1:b0:30:0e:10:f2:2e:63:86:c9:
ae:98:19:71:35:00:46:59:be:c5:21:cb:83:e4:e0:8a:87:20:
16:71:92:4f:97:f6:13:0b:c2:7d:09:57:fb:85:2d:32:8c:82:
00:7e:e6:d1:e7:47:1e:a6:be:02:29:13:1c:66:76:64:34:a3:
0e:33:74:13:48:cd:54:ad:2a:99:8d:df:41:1a:2b:2c:44:50:
10:a9:33:fa:1e:b1:d5:fd:06:e3:65:82:39:da:1d:f9:99:bf:
dc:43:e8:ba:c0:e3:01:cb:4e:90:9c:2c:dc:e7:a1:50:9b:4f:
48:f6:42:1d:69:8a:d6:d9:57:03:7f:7b:eb:e6:1b:72:cc:61:
de:46:05:43:7f:8b:bb:45:0d:d1:ba:21:34:27:46:d8:37:5a:
a8:7b:b3:7e:4c:4d:a6:19:6b:7b:12:92:36:4e:03:7c:37:d1:
01:ba:5d:0b:a7:1e:ff:65:90:38:40:a1:f2:3f:65:b7:8f:f5:
7c:c2:9b:da:3a:e5:56:20:3b:82:3d:7e:33:44:5a:51:c5:9b:
5f:91:bc:81:87:3c:0e:85:b2:56:59:c8:c7:4f:13:2a:99:63:
b5:0b:56:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:27:17 2026 by rpki-client