
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft
File: 1AsQwSJMYeDTGML8YAOTeOz3LQA.mft (raw, json)
Hash identifier: uawUmfUEq9Um0tOrQImH85oObAxgK5O5cftzCXKW+ss=
Subject key identifier: 78:66:D5:63:21:1C:00:78:F0:7F:C2:42:33:36:95:2D:B0:61:68:9E
Authority key identifier: D4:0B:10:C1:22:4C:61:E0:D3:18:C2:FC:60:03:93:78:EC:F7:2D:00
Certificate issuer: /CN=A9167C20/serialNumber=D40B10C1224C61E0D318C2FC60039378ECF72D00
Certificate serial: 0B92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft
Manifest number: 0B82
Signing time: Tue 12 May 2026 19:11:11 +0000
Manifest this update: Tue 12 May 2026 19:11:11 +0000
Manifest next update: Tue 19 May 2026 19:11:11 +0000
Files and hashes: 1: 1AsQwSJMYeDTGML8YAOTeOz3LQA.crl (hash: G7CPa+8fj5tvJJUXDG06omTlSoXnFrmNHPK0GWK44vk=)
2: AD35C0044EA511EAAB9DBE7DC4F9AE02.roa (hash: ++OmRdpWu3XIPu43iBXnmAM59CLsJ6ZGIdHZAm0yrgA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.crl
rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2962 (0xb92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167C20, serialNumber=D40B10C1224C61E0D318C2FC60039378ECF72D00
Validity
Not Before: May 12 19:11:11 2026 GMT
Not After : May 19 19:11:11 2026 GMT
Subject: CN=6a037b4f-1944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:80:3c:73:cc:0a:fc:e2:35:20:ef:da:8b:ef:
d4:07:21:92:26:e3:b5:35:46:91:cf:14:26:2a:d8:
9c:ea:60:ca:de:d5:86:c1:f1:7d:a1:ee:b3:2d:a8:
bd:35:cc:0f:b5:d8:ed:d8:46:5a:a9:0e:86:40:b2:
96:da:88:0c:2b:2d:f5:97:a8:6c:20:c5:7a:29:fe:
45:19:40:0e:04:75:a7:c0:df:a3:86:11:34:e5:fc:
6a:be:7e:62:58:40:87:e4:f1:9e:27:a8:9f:b2:c2:
ff:43:65:20:19:05:ac:6d:64:11:e6:3d:43:d8:b0:
0f:0d:83:b9:90:9e:3b:c0:db:38:c5:0f:1e:ff:b1:
df:54:17:04:e0:ce:9d:36:07:f1:cc:0c:e8:73:12:
ea:88:8a:4c:ad:de:c7:ba:48:6f:ff:e1:5b:3b:84:
2e:8f:5b:4b:49:13:42:8f:66:55:1f:62:67:b7:c7:
1f:db:1f:11:e7:a4:fb:19:b9:56:fe:36:c5:6c:89:
a1:38:65:83:a7:86:59:72:43:17:b3:cc:eb:e5:f6:
33:24:7a:ed:09:d2:c7:a0:c8:e5:ee:4e:c7:f7:c0:
14:5e:ed:2b:dc:91:03:82:86:11:6e:a4:9a:19:f9:
b0:b6:cf:31:35:29:d3:c1:2a:2e:94:23:b9:4d:eb:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:66:D5:63:21:1C:00:78:F0:7F:C2:42:33:36:95:2D:B0:61:68:9E
X509v3 Authority Key Identifier:
keyid:D4:0B:10:C1:22:4C:61:E0:D3:18:C2:FC:60:03:93:78:EC:F7:2D:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AsQwSJMYeDTGML8YAOTeOz3LQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167C20/86571C104EA211EA84C08874C4F9AE02/1AsQwSJMYeDTGML8YAOTeOz3LQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:07:96:fe:88:31:52:77:6e:be:53:6b:8f:7d:fd:ff:ce:ed:
8f:19:bc:5f:3e:99:08:36:3b:1a:50:89:1b:a4:f3:f8:9d:5c:
d0:41:20:96:b0:c1:81:ac:7a:31:3f:fc:4a:80:66:14:28:9d:
c1:05:2f:5d:ab:17:75:7e:c2:dc:00:81:0e:70:d9:5b:bb:5a:
a4:f7:fb:a1:54:29:69:fa:7d:81:ab:f8:72:91:6a:97:12:14:
29:58:55:36:0f:d4:49:6b:d6:c4:d0:f1:c0:46:20:3f:a9:e9:
44:18:eb:53:c7:4c:81:eb:9c:a1:b6:1e:50:21:b5:65:8c:90:
52:02:c2:a5:4d:c1:26:25:9f:d4:b4:13:64:36:4f:87:0a:5c:
f3:d4:95:1a:b1:c6:06:11:3e:b9:77:c1:8b:08:9f:21:6e:31:
11:3e:77:c8:7f:8e:dd:a5:6d:3d:28:cc:55:80:3c:13:44:f6:
8d:a5:fc:f1:3a:21:85:8b:c2:99:9e:7e:3e:26:38:8d:87:3f:
c7:e6:d5:3b:4c:3b:8c:35:e6:e9:a8:81:c8:ef:94:a7:61:ec:
a1:44:eb:8d:57:3a:4c:93:6d:83:00:25:54:a7:d2:fd:04:38:
d7:29:a3:45:4a:02:2e:be:4d:e1:e1:9d:cf:16:39:3a:49:cb:
10:8f:90:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdDMjAxMTAvBgNVBAUTKEQ0MEIxMEMxMjI0QzYxRTBEMzE4QzJGQzYwMDM5Mzc4
RUNGNzJEMDAwHhcNMjYwNTEyMTkxMTExWhcNMjYwNTE5MTkxMTExWjAYMRYwFAYD
VQQDEw02YTAzN2I0Zi0xOTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8oA8c8wK/OI1IO/ai+/UByGSJuO1NUaRzxQmKtic6mDK3tWGwfF9oe6zLai9
NcwPtdjt2EZaqQ6GQLKW2ogMKy31l6hsIMV6Kf5FGUAOBHWnwN+jhhE05fxqvn5i
WECH5PGeJ6ifssL/Q2UgGQWsbWQR5j1D2LAPDYO5kJ47wNs4xQ8e/7HfVBcE4M6d
NgfxzAzocxLqiIpMrd7Hukhv/+FbO4Quj1tLSRNCj2ZVH2Jnt8cf2x8R56T7GblW
/jbFbImhOGWDp4ZZckMXs8zr5fYzJHrtCdLHoMjl7k7H98AUXu0r3JEDgoYRbqSa
Gfmwts8xNSnTwSoulCO5TevMaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHhm1WMh
HAB48H/CQjM2lS2wYWieMB8GA1UdIwQYMBaAFNQLEMEiTGHg0xjC/GADk3js9y0A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0MyMC84NjU3MUMxMDRF
QTIxMUVBODRDMDg4NzRDNEY5QUUwMi8xQXNRd1NKTVllRFRHTUw4WUFPVGVPejNM
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFBc1F3U0pNWWVEVEdNTDhZQU9UZU96M0xRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0MyMC84NjU3MUMxMDRFQTIxMUVBODRDMDg4NzRDNEY5QUUwMi8xQXNRd1NKTVll
RFRHTUw4WUFPVGVPejNMUUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlAeW/ogxUnduvlNrj339/87tjxm8Xz6ZCDY7GlCJG6Tz+J1c0EEglrDBgax6
MT/8SoBmFCidwQUvXasXdX7C3ACBDnDZW7tapPf7oVQpafp9gav4cpFqlxIUKVhV
Ng/USWvWxNDxwEYgP6npRBjrU8dMgeucobYeUCG1ZYyQUgLCpU3BJiWf1LQTZDZP
hwpc89SVGrHGBhE+uXfBiwifIW4xET53yH+O3aVtPSjMVYA8E0T2jaX88TohhYvC
mZ5+PiY4jYc/x+bVO0w7jDXm6aiByO+Up2HsoUTrjVc6TJNtgwAlVKfS/QQ41ymj
RUoCLr5N4eGdzxY5OknLEI+QhA==
-----END CERTIFICATE-----
Generated at Wed May 13 11:03:07 2026 by rpki-client