
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft
File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json)
Hash identifier: r6tUpONFlHytJ63GJL2VB8nmQYqBZxPlxYWSLuWzCoo=
Subject key identifier: 0C:8C:E3:FE:06:C9:C2:7E:D5:02:2C:83:16:F9:06:0B:C5:70:50:CD
Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21
Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft
Manifest number: 018C
Signing time: Wed 19 Aug 2026 05:03:51 +0000
Manifest this update: Wed 19 Aug 2026 05:03:50 +0000
Manifest next update: Wed 26 Aug 2026 05:03:50 +0000
Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: OUYh/sk/7ZqNcBIDyWsT1jzx/+AAPmf2MSKZmjMtwA8=)
2: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: Q2XsaXqT+eyCPXvxi8zIHiMKLLmA95KKZabuPQOI/bQ=)
3: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: NxzkE3G6k7uKaBQgTyXi96jp5VcOIi/OIHejJcnWXxw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl
rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 05:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421
Validity
Not Before: Aug 19 05:03:50 2026 GMT
Not After : Aug 26 05:03:50 2026 GMT
Subject: CN=6a853936-9ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f1:6a:ee:70:72:e8:d4:83:c0:04:c4:b5:89:
ea:d0:dd:72:b3:03:61:e0:10:e5:ff:32:3f:61:37:
e8:0b:c4:0f:da:e7:84:71:69:f1:0e:dd:ea:40:71:
b3:60:35:f5:3f:35:93:05:a0:29:c8:93:3f:82:f4:
5f:7d:01:15:cf:02:6e:19:10:29:db:69:da:59:04:
52:8f:a7:ba:8a:25:c8:c2:e2:37:ea:e6:f0:38:ed:
39:b4:3f:27:4f:40:a5:fd:4d:7d:71:2c:62:46:b9:
0d:34:9e:56:15:4c:0d:89:24:ba:7c:bb:b0:50:4f:
10:d4:57:d8:70:ee:12:70:87:d2:81:14:71:21:9b:
10:e2:0f:42:03:73:2a:72:1b:6a:19:39:fc:02:7c:
ba:76:ad:71:e4:80:7e:78:67:96:3a:b3:71:b6:27:
82:ad:69:0c:dd:8a:64:02:9b:cb:2a:a1:40:bf:d6:
51:55:4f:0c:af:cb:50:2e:58:02:dc:9b:dd:4e:7a:
63:2d:26:37:cd:2e:17:61:9b:5e:e0:c1:db:54:14:
b7:04:73:94:fc:62:10:03:a9:05:2d:41:5b:d3:30:
27:08:c9:6a:38:9a:b9:d0:77:46:f9:4a:ad:fe:8f:
ac:21:64:f1:c8:43:ed:e4:5d:be:84:27:43:a1:aa:
87:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8C:E3:FE:06:C9:C2:7E:D5:02:2C:83:16:F9:06:0B:C5:70:50:CD
X509v3 Authority Key Identifier:
keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:b7:03:d6:84:21:1c:7f:9a:73:ea:f5:0d:56:21:37:8d:c0:
cd:89:93:f7:6e:d0:79:81:4f:80:85:a0:72:74:23:72:16:15:
9b:8a:8e:c7:e1:fa:1c:50:5c:9d:7b:c9:db:f7:46:f1:a8:57:
5b:cc:78:ec:28:9c:ef:78:2d:f3:7a:19:c5:4a:00:e6:1a:bd:
be:07:df:7c:be:45:c6:7e:ec:a6:3f:7e:20:ca:1b:a8:da:ec:
a9:bb:fd:8c:f2:9f:e3:77:57:5d:49:36:1d:3e:40:54:85:0a:
e1:e6:bc:2e:09:32:28:d6:5b:55:85:bb:68:32:ee:30:e3:2d:
f3:cd:24:50:6b:b9:b0:5e:8a:8a:39:42:b7:0f:36:59:05:7a:
08:a8:5b:70:49:05:4b:73:b6:29:87:b5:9d:8b:b8:cf:c2:ad:
10:e9:be:e2:b4:00:68:f4:b3:d0:c5:60:bc:52:2f:f8:0f:0a:
c2:0c:a2:65:92:ba:1f:55:74:fe:1a:c3:52:c5:01:0f:6c:47:
a7:71:a7:14:16:2a:37:5e:16:c3:5e:21:3f:d8:04:e1:99:9a:
d6:a6:00:f6:93:35:10:1a:a3:33:62:bc:e2:4f:0c:13:87:60:
d9:24:46:31:b1:c7:f7:10:f2:a4:5b:4c:57:79:84:44:8e:14:
09:45:40:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:54 2026 by rpki-client