
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
File: 1Y-DTjzFalATaTGkQZnby-WLhEw.mft (raw, json)
Hash identifier: aOjYqnnmk7oUwTJucOnThiemVmh66euc581TqjWAWzE=
Subject key identifier: AF:BE:65:38:52:4B:21:47:5A:C0:67:F7:74:42:2D:48:85:F2:6C:6F
Authority key identifier: D5:8F:83:4E:3C:C5:6A:50:13:69:31:A4:41:99:DB:CB:E5:8B:84:4C
Certificate issuer: /CN=A9178992/serialNumber=D58F834E3CC56A50136931A44199DBCBE58B844C
Certificate serial: 68
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
Manifest number: 65
Signing time: Fri 17 Jul 2026 09:18:13 +0000
Manifest this update: Fri 17 Jul 2026 09:18:13 +0000
Manifest next update: Fri 24 Jul 2026 09:18:13 +0000
Files and hashes: 1: 1Y-DTjzFalATaTGkQZnby-WLhEw.crl (hash: Y8cVmW+BQKG0R0HSPCBbY1vOtXMR0sqjhxC64LxMcaw=)
2: 694A4554ED2311F09CB4E0CD436F56BC.roa (hash: EhS//Fv0PhcyswJMfy8v37wRi8RtUogTTHlQepTJJls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.crl
rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:18:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178992, serialNumber=D58F834E3CC56A50136931A44199DBCBE58B844C
Validity
Not Before: Jul 17 09:18:13 2026 GMT
Not After : Jul 24 09:18:13 2026 GMT
Subject: CN=6a59f355-de51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:1c:25:29:4a:91:1b:29:95:20:d2:64:60:
b0:9f:45:bc:21:b2:4a:ab:bf:b2:fe:16:77:dd:52:
75:ad:b7:68:2f:53:3f:b1:87:aa:1f:53:76:c6:8e:
36:7a:7d:bb:ae:5f:22:83:e6:f7:97:09:03:62:9d:
a5:7b:e5:28:4a:fe:67:b0:ba:20:9c:cd:16:f7:9a:
9d:1a:f1:fa:ba:70:ae:cb:b5:bc:f2:df:f2:fb:8d:
3b:60:b0:e6:f5:cf:e0:6c:d4:2c:45:80:a6:4c:2f:
9a:db:30:9b:fd:75:23:b4:b6:70:ad:d9:72:75:5f:
28:f9:48:ec:63:0d:8f:49:6e:d1:21:bc:c3:0e:5e:
ac:be:00:1e:22:01:b6:ca:78:32:8c:ce:b0:36:13:
fa:88:e7:9c:cc:a8:d2:4b:7f:9f:d0:3b:59:3e:4c:
a8:19:59:da:07:9d:82:ca:79:c4:b6:d8:1a:54:c4:
f7:b9:17:20:04:41:6f:e7:63:a2:d3:78:04:ab:1f:
7f:82:48:43:ae:eb:a0:5d:3e:d6:ee:88:89:7a:9d:
14:6b:1c:cf:70:5c:9f:8c:f5:65:4e:e0:d8:90:09:
2f:ee:14:ce:2b:78:96:e9:67:5c:17:93:76:c3:e1:
62:24:2c:2a:fe:80:14:8e:41:7f:c9:d3:c2:04:d0:
d5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BE:65:38:52:4B:21:47:5A:C0:67:F7:74:42:2D:48:85:F2:6C:6F
X509v3 Authority Key Identifier:
keyid:D5:8F:83:4E:3C:C5:6A:50:13:69:31:A4:41:99:DB:CB:E5:8B:84:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:81:53:57:5c:d3:ca:d1:82:82:c6:1e:d2:8b:eb:6d:67:11:
2f:a9:cd:2c:58:f2:3d:76:8e:3a:c1:4d:e5:61:7e:e0:20:81:
9f:cc:fc:57:8c:64:f1:28:87:ae:c5:f5:8d:59:3a:33:21:8e:
d6:28:87:72:4d:1c:7a:63:4c:bd:e8:1e:ee:be:8e:d2:90:89:
2b:2c:6c:98:eb:bb:19:2e:07:a3:03:10:70:e9:d3:bc:54:ae:
a9:e6:03:20:be:28:67:a8:75:e7:db:bb:84:6c:ec:61:a2:6f:
ca:4a:43:78:e1:99:da:54:57:c7:62:69:01:b6:db:a5:a3:6e:
22:d9:6f:ad:62:35:79:f7:d0:3f:5f:f9:a0:6b:d7:0d:3f:4a:
9e:a0:8b:58:f3:69:3b:fd:7b:7b:b7:bc:28:f9:89:6c:51:2a:
4e:a0:d5:21:0d:3b:ea:95:dc:6e:23:ec:9d:53:4d:67:dd:19:
51:8b:db:34:49:6e:ca:75:68:31:27:b4:a9:74:2e:08:de:ea:
1d:95:4e:50:35:98:5e:da:2f:67:fe:20:a6:d9:3c:26:21:fd:
45:1d:2e:3f:fc:51:ba:f7:09:5f:a8:bf:5e:16:c1:7b:66:fb:
f4:74:dd:fb:3c:9e:96:ca:11:cb:d0:66:b7:d5:95:8a:eb:63:
8f:35:d3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:19 2026 by rpki-client