
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
File: 1gA1BzfqQktAGySBBT0rwpFsutE.mft (raw, json)
Hash identifier: QOFMxmbuqiGJYfFTPLvEFx9ERBRaZwzGb1rJhhPA7kw=
Subject key identifier: CF:0C:58:25:29:34:93:B8:28:C9:CC:C8:A0:8B:06:E7:26:A1:48:C0
Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1
Certificate issuer: /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
Manifest number: 014A
Signing time: Wed 13 May 2026 05:21:23 +0000
Manifest this update: Wed 13 May 2026 05:21:23 +0000
Manifest next update: Wed 20 May 2026 05:21:23 +0000
Files and hashes: 1: 1gA1BzfqQktAGySBBT0rwpFsutE.crl (hash: pbEyvGQdmxOBFdhDjUgfJeCq1BmLn6k7W1hzfBwP8gQ=)
2: FD557922606A11EF8B9F6820C4F9AE02.roa (hash: lDQFfJvg8sN9IbyOUgeEIh9zzBtKTvvIBaVemnoUUzo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl
rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:21:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154973, serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
Validity
Not Before: May 13 05:21:23 2026 GMT
Not After : May 20 05:21:23 2026 GMT
Subject: CN=6a040a53-265b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:1e:30:5c:b7:34:8e:9e:2e:c5:61:79:09:
af:60:26:3d:6c:10:46:23:c1:a8:1c:65:99:bd:7e:
93:95:8d:d1:3b:97:cd:cd:e4:70:ad:67:e2:51:d2:
a0:1e:3f:ef:7f:7a:ef:c5:80:12:65:75:68:fe:7f:
26:e7:69:de:b8:0d:a3:bc:02:b1:f6:3a:48:c7:d0:
3b:09:58:0b:a4:06:2a:2f:d8:64:8c:79:7b:70:0f:
f8:a6:5d:93:88:57:18:34:8b:b3:b4:dd:57:62:80:
4b:b2:8a:8a:22:30:bd:e3:55:c5:3a:6c:31:ba:54:
74:aa:74:b9:a4:79:9c:b5:4d:ce:51:2e:5a:8f:12:
c5:5a:2c:b1:db:0b:50:a1:77:84:d0:34:82:85:79:
0f:04:49:63:97:f2:74:7a:bd:97:02:4c:4d:7a:d5:
12:88:24:ef:0f:39:3b:74:f2:4a:1d:29:29:ad:5b:
c8:55:0c:2a:d5:85:dd:85:c7:7f:4c:62:4f:01:52:
c4:c1:13:f1:25:14:6e:8b:3f:97:76:e0:2b:0f:6b:
e2:46:59:3e:44:b5:24:22:f1:8c:05:78:75:5b:f0:
95:c2:17:d3:e9:2c:53:8e:5e:f6:1b:e0:09:b5:ee:
72:80:df:f4:d8:16:c8:2d:cb:6f:ee:4a:af:e8:1c:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0C:58:25:29:34:93:B8:28:C9:CC:C8:A0:8B:06:E7:26:A1:48:C0
X509v3 Authority Key Identifier:
keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:43:d5:7a:af:03:ff:fa:de:0d:81:c7:e4:ff:16:d6:76:c8:
13:60:2e:eb:4c:9d:85:9e:1b:71:76:20:9a:24:50:e1:ba:5f:
da:1d:01:f5:86:c7:2c:74:a7:3f:36:07:62:d6:f5:13:3d:b3:
a0:53:5f:e6:22:0f:4d:63:24:f7:da:db:e1:ee:12:65:da:98:
19:9f:20:11:d4:b4:e6:01:d1:15:8b:28:13:46:2d:07:0f:9b:
a7:07:74:02:5e:74:80:dd:30:47:9f:f8:dc:1b:c5:c4:20:c1:
4c:21:a7:a8:20:44:5b:08:79:60:84:1b:67:ed:a8:58:25:28:
7c:fc:4c:79:e8:14:60:94:97:af:97:29:78:38:41:db:b3:df:
68:f9:79:0c:3f:e2:a0:91:c1:55:9b:c0:a7:7c:78:59:f8:28:
8f:6a:ec:49:21:26:29:42:6e:94:87:c6:31:ce:81:9b:65:9a:
5d:e2:ff:25:7e:f9:c7:6f:b8:d2:00:d1:fa:19:43:85:6f:df:
5d:13:8d:5f:db:a5:d3:61:82:2f:67:7d:ed:67:22:fe:a4:04:
4c:1d:b1:8e:14:1a:c0:a5:15:d9:df:bb:93:d5:a5:13:fa:34:
c9:59:40:ff:35:5a:be:40:f9:78:02:5a:86:b1:24:1d:92:9f:
f8:0e:29:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:54:28 2026 by rpki-client