
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
File: 1AwbOf4FNm7Ysj4IgLaet198kOI.mft (raw, json)
Hash identifier: FatKoI9R6jB4I2i4N1kC02tSQORCjEfR00FbeZf3CPc=
Subject key identifier: 05:E5:9C:09:6A:DC:CF:D9:BF:3C:BA:CF:BA:D3:D1:21:15:D8:FC:7A
Authority key identifier: D4:0C:1B:39:FE:05:36:6E:D8:B2:3E:08:80:B6:9E:B7:5F:7C:90:E2
Certificate issuer: /CN=A9171A26/serialNumber=D40C1B39FE05366ED8B23E0880B69EB75F7C90E2
Certificate serial: 0BA3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AwbOf4FNm7Ysj4IgLaet198kOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
Manifest number: 0B99
Signing time: Sat 04 Apr 2026 18:54:11 +0000
Manifest this update: Sat 04 Apr 2026 18:54:10 +0000
Manifest next update: Sat 11 Apr 2026 18:54:10 +0000
Files and hashes: 1: 1AwbOf4FNm7Ysj4IgLaet198kOI.crl (hash: dtqF/L4q9thpW3Ktamwmli3N94kOUq1M8S6J1HTTeCA=)
2: 5C9BC9D045C311EA9DE6F237C4F9AE02.roa (hash: Op/TZ3dOt8Yt2zdOFwj+mdajCZ3G7/THMBti/s9h/Qo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.crl
rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AwbOf4FNm7Ysj4IgLaet198kOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2979 (0xba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171A26, serialNumber=D40C1B39FE05366ED8B23E0880B69EB75F7C90E2
Validity
Not Before: Apr 4 18:54:10 2026 GMT
Not After : Apr 11 18:54:10 2026 GMT
Subject: CN=69d15e53-238f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ea:07:9f:d9:9f:93:32:b4:80:df:6e:d5:06:
4b:6d:07:58:52:98:ea:94:e9:d4:e8:70:a9:87:d4:
be:fa:68:d9:c2:dd:99:e5:ce:82:8c:e7:cb:e1:6d:
28:f4:01:8e:6f:f5:1f:c9:84:c5:60:28:ec:05:8f:
4d:dd:ae:a1:74:13:fa:5f:b1:af:b6:53:26:5c:eb:
15:ab:56:02:b9:80:b3:5b:4e:df:8c:08:72:df:87:
1a:6d:ff:09:85:99:3f:be:2d:20:c2:02:e8:7d:86:
e7:17:ed:44:54:72:3a:c5:5b:17:8e:86:c8:3b:3d:
4e:64:83:89:1b:10:1e:f0:6c:b1:ba:8a:f9:fc:3e:
fe:f5:a4:6e:a8:aa:ad:82:aa:11:e6:65:58:16:e8:
fa:66:6e:b8:1f:f3:2e:08:78:02:ac:09:10:38:8f:
8b:ff:b8:cd:c0:5e:eb:5b:ee:63:61:40:3e:ff:e8:
ca:6a:55:10:1d:23:db:af:55:fa:27:6c:2d:7f:44:
04:ba:b6:b0:a0:94:95:7f:fa:3d:1a:32:d6:b1:e2:
97:15:3a:c8:f2:4e:f0:80:97:7a:0e:27:e1:00:6a:
c4:ad:19:ce:1a:8d:4e:d0:af:64:1d:3b:53:49:10:
83:f3:8b:52:0a:57:41:9a:37:78:3f:9a:0f:f4:2b:
ef:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E5:9C:09:6A:DC:CF:D9:BF:3C:BA:CF:BA:D3:D1:21:15:D8:FC:7A
X509v3 Authority Key Identifier:
keyid:D4:0C:1B:39:FE:05:36:6E:D8:B2:3E:08:80:B6:9E:B7:5F:7C:90:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AwbOf4FNm7Ysj4IgLaet198kOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A26/BE5312A245C111EA8D0BDD34C4F9AE02/1AwbOf4FNm7Ysj4IgLaet198kOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:44:e2:77:44:63:5a:77:d9:d8:9f:af:53:e0:5d:96:a7:7b:
f1:e1:a0:9e:94:42:74:d7:87:56:26:2f:9d:bf:f0:c2:16:a1:
a2:ed:06:dc:25:e3:e8:b4:f5:d9:ce:50:d7:da:f7:ed:03:5c:
47:f2:1f:fa:11:86:c6:dd:26:aa:37:d7:90:73:33:4d:4a:11:
33:9c:e5:35:4e:06:1c:ad:a8:4f:88:fb:27:b1:83:14:6f:c4:
bc:e3:a2:0a:eb:8f:b6:b6:97:0a:7a:05:be:44:e6:54:84:ad:
04:0b:aa:06:72:39:3a:5b:ac:ba:99:32:65:1b:fb:73:b5:3e:
2e:b9:94:c6:63:91:8e:23:05:b8:54:09:e2:00:e7:6c:0a:16:
9c:51:8a:f3:81:e4:c5:e1:47:6d:7b:12:b6:04:5b:44:b6:a3:
38:ae:c4:e5:d5:24:81:22:5b:09:d3:c6:e8:5f:12:13:aa:8d:
eb:90:9a:8c:33:0d:ce:3e:b2:8d:8c:35:0a:bf:32:fb:1f:1f:
31:38:eb:47:32:44:ca:20:84:66:a8:8a:65:0b:d1:38:28:62:
67:8a:e6:79:58:30:5a:7d:30:77:94:6c:42:8d:53:79:42:a0:
e0:c7:dc:bd:68:85:df:dc:a7:6e:d5:c3:bc:52:fc:5c:01:57:
97:72:e3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:10 2026 by rpki-client