
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
File: 1Y-DTjzFalATaTGkQZnby-WLhEw.mft (raw, json)
Hash identifier: fSDxcdtjah54Vi+sa0vl8d1b9GrgEnliS1AUugtRIHU=
Subject key identifier: 15:56:F6:5C:A5:78:AA:07:9D:6C:C2:51:7D:63:5B:08:9F:D1:E6:7C
Authority key identifier: D5:8F:83:4E:3C:C5:6A:50:13:69:31:A4:41:99:DB:CB:E5:8B:84:4C
Certificate issuer: /CN=A9178992/serialNumber=D58F834E3CC56A50136931A44199DBCBE58B844C
Certificate serial: 52
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
Manifest number: 4F
Signing time: Mon 01 Jun 2026 09:06:10 +0000
Manifest this update: Mon 01 Jun 2026 09:06:10 +0000
Manifest next update: Mon 08 Jun 2026 09:06:10 +0000
Files and hashes: 1: 1Y-DTjzFalATaTGkQZnby-WLhEw.crl (hash: Meb+ZDeldDR3XLCPojRa54UNZRGjKOgLnN24AAaVHvI=)
2: 694A4554ED2311F09CB4E0CD436F56BC.roa (hash: EhS//Fv0PhcyswJMfy8v37wRi8RtUogTTHlQepTJJls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.crl
rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:06:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178992, serialNumber=D58F834E3CC56A50136931A44199DBCBE58B844C
Validity
Not Before: Jun 1 09:06:10 2026 GMT
Not After : Jun 8 09:06:10 2026 GMT
Subject: CN=6a1d4b82-7529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b8:86:79:9e:64:60:82:b3:ad:a3:1b:4f:5f:
c7:03:75:3e:30:a2:2d:0f:9e:18:48:9e:62:2f:b6:
c7:b5:71:1a:12:86:31:9a:75:96:cf:f9:a8:a0:2a:
be:d9:1e:8a:40:c7:7a:8d:23:dc:83:d6:30:da:d6:
63:47:8b:3b:97:4c:ec:71:39:55:5c:25:3e:d0:98:
1d:0d:4d:b7:67:b6:d6:eb:0c:79:0e:f8:7e:b9:76:
54:3f:34:4c:59:d9:0b:55:80:63:61:0a:5a:8e:b2:
de:d0:f7:90:f2:a3:d3:73:72:4b:6a:4a:68:87:95:
56:08:6f:8d:74:2c:38:73:55:71:da:fe:6b:1e:21:
a9:d2:f1:07:95:d3:36:29:d4:5e:60:9d:07:49:4d:
50:78:08:79:0c:35:0f:40:9c:6d:56:ab:6d:e0:03:
54:a5:7d:39:eb:93:67:71:d3:da:42:5f:c3:d3:8c:
71:9e:2f:50:5c:75:8c:f6:2b:ef:d6:8e:df:1b:66:
01:43:7e:b6:36:0e:5d:38:8a:e4:48:f7:de:fb:78:
a1:f6:71:28:99:6a:51:73:72:ed:31:a8:cb:94:dc:
4f:ad:a3:80:68:6d:99:39:ed:42:21:80:cb:70:69:
f9:af:e6:56:cb:1b:33:94:4a:8f:2a:f4:33:ee:75:
34:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:56:F6:5C:A5:78:AA:07:9D:6C:C2:51:7D:63:5B:08:9F:D1:E6:7C
X509v3 Authority Key Identifier:
keyid:D5:8F:83:4E:3C:C5:6A:50:13:69:31:A4:41:99:DB:CB:E5:8B:84:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:00:dc:38:11:7b:a2:ac:1a:76:33:77:71:82:13:ad:7e:9f:
69:68:8a:0e:70:81:35:f8:40:09:f8:c3:c1:f3:ec:ca:18:b9:
b4:2a:ad:52:06:ef:96:f1:25:4b:45:32:9b:75:a8:33:64:88:
50:c1:e4:36:e3:30:44:ce:4e:23:58:e7:6d:8f:e0:ec:ed:c6:
a9:de:92:8c:02:2c:ab:b8:a2:0e:ba:42:79:3c:ce:87:a8:85:
65:e6:63:67:12:f1:7e:10:0c:a1:15:21:c0:db:38:72:8f:43:
e3:a3:84:70:10:ec:2e:1d:dc:48:73:60:54:ac:26:a5:f8:92:
b4:2b:b0:57:12:0e:fe:ba:6c:02:d9:bc:dc:c8:62:42:f5:d2:
06:f8:d2:ae:48:0c:1e:0e:c5:e9:7b:31:48:89:ba:a3:83:c6:
fa:a1:c5:1a:91:8f:18:4c:10:ef:d6:de:0a:c9:2f:a6:83:d0:
06:5e:03:8e:1d:37:d6:1c:d5:0d:d7:e3:60:43:c6:96:0e:0e:
30:2c:ed:39:b9:06:1c:3c:53:ef:ff:01:fa:c7:11:d7:3f:a7:
91:dd:32:b8:20:55:ec:0f:29:71:e5:d0:76:37:76:19:27:de:
aa:f5:f6:15:62:8c:0f:e4:6e:47:b7:72:83:c3:11:d3:92:20:
c6:a5:e2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:52 2026 by rpki-client