
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
File: 1Y-DTjzFalATaTGkQZnby-WLhEw.mft (raw, json)
Hash identifier: sgRkFnnu1rHQNWl+D38RlhogMLfKA3HJvJOBOC+o20c=
Subject key identifier: 1A:3F:D2:E2:10:F3:9F:11:95:E5:4F:B1:43:1A:71:65:2A:CF:08:CF
Authority key identifier: D5:8F:83:4E:3C:C5:6A:50:13:69:31:A4:41:99:DB:CB:E5:8B:84:4C
Certificate issuer: /CN=A9178992/serialNumber=D58F834E3CC56A50136931A44199DBCBE58B844C
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
Manifest number: 8F
Signing time: Wed 07 Oct 2026 08:02:47 +0000
Manifest this update: Wed 07 Oct 2026 08:02:46 +0000
Manifest next update: Wed 14 Oct 2026 08:02:46 +0000
Files and hashes: 1: 1Y-DTjzFalATaTGkQZnby-WLhEw.crl (hash: pElCrq3LgdIfem23wtobQZVst35+YRTWBPDvZmKIiT8=)
2: 694A4554ED2311F09CB4E0CD436F56BC.roa (hash: EhS//Fv0PhcyswJMfy8v37wRi8RtUogTTHlQepTJJls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.crl
rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 08:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178992, serialNumber=D58F834E3CC56A50136931A44199DBCBE58B844C
Validity
Not Before: Oct 7 08:02:46 2026 GMT
Not After : Oct 14 08:02:46 2026 GMT
Subject: CN=6ac5fca7-03ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e6:4e:57:db:d0:43:f8:7b:73:ac:5f:d3:d3:
d8:9d:06:07:e8:57:f7:3c:00:4c:f7:4d:b5:a6:e9:
9b:f1:f5:6e:e6:07:56:54:01:27:b3:51:be:8a:7e:
cf:08:3b:8c:13:2f:fd:32:05:83:e8:b1:15:3d:39:
98:f7:25:84:14:f3:71:d0:e4:c0:5d:4d:f0:41:a8:
d0:82:55:31:60:09:46:c5:4b:e0:08:ad:3a:9d:ab:
4f:71:d9:f5:2a:48:cb:31:d0:56:de:64:c8:e6:74:
28:87:3c:e4:ac:25:cc:33:9d:3c:ed:83:b0:92:9e:
ef:0d:cd:88:12:8f:57:57:3a:2a:5c:43:57:60:dd:
c9:c8:ec:ba:84:18:83:39:4f:90:71:33:77:d9:4b:
5b:0d:b0:bf:9e:8c:44:98:66:8d:1c:a2:6a:e2:b4:
0d:b3:a1:58:bc:54:f5:47:22:cd:62:da:d9:12:8e:
df:18:cf:45:6b:0c:66:11:60:2d:80:7b:45:54:1f:
1e:41:2d:24:e2:c1:41:5a:d6:d5:78:27:7a:63:cd:
b0:dc:73:98:ed:6f:a2:86:24:6d:75:f3:24:8c:7a:
7a:7e:17:63:b7:4b:36:0c:92:e3:72:26:02:20:75:
28:3b:07:4b:d7:bc:56:58:13:92:87:85:f8:cc:9f:
30:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3F:D2:E2:10:F3:9F:11:95:E5:4F:B1:43:1A:71:65:2A:CF:08:CF
X509v3 Authority Key Identifier:
keyid:D5:8F:83:4E:3C:C5:6A:50:13:69:31:A4:41:99:DB:CB:E5:8B:84:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:a4:f3:44:1a:fc:9d:c0:2e:28:b6:f9:05:8c:2f:df:ed:41:
a6:7d:11:13:1b:cc:a7:c9:46:22:8a:f4:07:79:79:fb:5d:ef:
c3:b1:06:35:61:16:8d:d5:f6:24:3d:db:32:07:8a:72:4f:88:
ac:60:fb:b4:3a:7f:28:da:ca:b4:31:b8:5a:02:a8:e1:1b:f9:
5f:66:17:ca:dd:36:f0:0c:dd:a8:ce:29:51:5a:6c:d0:5e:40:
11:8c:1e:6d:32:80:46:ef:36:e5:33:00:f0:16:df:5f:0d:17:
5f:b7:b9:94:fe:72:2d:56:cf:3e:bd:d5:09:90:44:67:40:c2:
a9:d8:0a:41:f8:f8:f2:d1:e9:db:36:5c:f4:d8:38:e1:92:c1:
78:29:72:0b:83:9d:5d:dd:49:61:c9:7e:7b:67:d2:d7:7f:44:
96:ee:87:60:4e:93:f7:bd:da:04:6f:01:70:0f:a0:c9:41:d9:
67:5b:a6:67:88:7f:9b:b7:20:1c:bf:0f:54:89:2e:b9:fa:ca:
2f:99:d6:19:5d:ba:dc:b8:5d:f6:c4:60:e6:d8:92:e4:80:de:
f2:4d:03:3b:09:ad:6d:3b:ef:c8:1b:7e:10:de:42:d3:77:c0:
1f:df:47:f6:9b:20:bb:e5:23:e5:49:90:42:30:0b:82:e6:c7:
22:18:ee:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:56:22 2026 by rpki-client