
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft
File: 1qn8yzagJxy8XxErtyBaV7n0hPc.mft (raw, json)
Hash identifier: ObC3NXrveUYMjFmG85NlsDDWbXGeH2Zhq6MvOa09tKA=
Subject key identifier: FF:8D:63:08:DF:2D:EA:F1:7F:36:8D:B4:8F:F2:B2:35:6A:3A:39:14
Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7
Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7
Certificate serial: 04A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft
Manifest number: 0491
Signing time: Tue 24 Mar 2026 23:44:01 +0000
Manifest this update: Tue 24 Mar 2026 23:44:01 +0000
Manifest next update: Tue 31 Mar 2026 23:44:01 +0000
Files and hashes: 1: 1qn8yzagJxy8XxErtyBaV7n0hPc.crl (hash: bgmH1CENeyTIq09r6Kinj4bVuXOBpDepXtPZilC5Bew=)
2: 819150603F3411EF85BAC749C4F9AE02.roa (hash: fmRvDrlAVUP4IPzjCxKSFO/W9oPKrGtnnlxwGGwestk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl
rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1190 (0x4a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168126, serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7
Validity
Not Before: Mar 24 23:44:01 2026 GMT
Not After : Mar 31 23:44:01 2026 GMT
Subject: CN=69c321c1-65ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:98:09:4c:71:e8:66:d5:11:eb:0c:0e:15:22:
fc:29:e2:21:b3:69:16:7d:4a:7e:94:9c:b4:a1:37:
20:0b:03:24:f3:e7:f3:33:93:90:e4:d4:a3:79:db:
da:12:0f:10:ef:80:c3:b7:ea:9f:a8:3d:85:f2:70:
2f:b9:d7:90:23:17:9e:96:d2:03:d5:a6:52:2d:9a:
84:61:cc:92:56:58:7e:f1:46:5f:6b:b9:4b:ab:a7:
48:39:a4:bc:af:43:10:5c:b5:6c:a6:2b:bc:0c:26:
ae:b9:d8:a0:8c:70:e3:ad:3f:41:57:51:9f:24:aa:
5e:93:a2:e2:9b:e0:81:f2:ee:8d:e4:3d:e4:a3:73:
d2:1e:44:20:bb:23:13:88:42:26:df:81:5d:3e:87:
d6:c2:1e:a8:4f:8f:b0:f2:33:73:8e:25:86:57:cf:
f7:cc:f6:4c:81:16:da:70:10:50:dc:d8:f3:2f:15:
bd:73:47:42:75:a7:89:2a:e1:36:f2:48:f5:db:37:
da:5d:45:dc:60:9c:28:7b:35:8a:83:e7:22:55:22:
1a:43:0e:7a:b4:67:f6:68:c8:19:f8:97:2d:0e:9b:
8d:d0:78:a1:04:36:ee:ab:90:fb:ed:1f:1b:a4:c7:
38:f5:7e:a2:14:b8:86:f2:90:73:1f:34:79:44:1c:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8D:63:08:DF:2D:EA:F1:7F:36:8D:B4:8F:F2:B2:35:6A:3A:39:14
X509v3 Authority Key Identifier:
keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:e2:f0:c7:49:cf:ca:e5:b1:5b:3f:a4:1a:af:24:ad:fd:50:
b2:39:7a:93:fe:b4:b9:32:6f:eb:03:6f:cc:53:72:b4:55:3a:
e8:38:ce:a3:ce:f4:51:a7:50:96:96:35:d8:e0:4f:26:83:2f:
dc:b0:e4:d6:77:68:62:8a:b1:70:86:78:a0:62:87:15:4e:9b:
96:14:e9:3e:f6:66:16:e7:19:65:1d:fd:4d:f8:42:86:39:34:
e9:24:f7:1c:46:bf:0f:9f:cc:df:b5:3e:97:b9:44:18:1b:85:
b3:53:b4:08:59:c5:55:09:3b:3e:f6:39:10:91:c7:34:53:f4:
b1:b4:6b:30:4d:fe:37:64:90:38:00:a1:34:2b:34:55:4e:89:
10:8c:84:b3:1b:ec:5a:dc:73:36:a5:54:85:d3:e6:e4:6e:dc:
97:a2:b1:4f:0f:c0:0d:a7:4a:c9:8c:81:47:51:8d:85:36:94:
d6:bd:e1:08:b0:30:73:bf:04:42:31:47:95:05:3f:69:4b:6c:
11:1b:14:4e:80:12:4f:97:a5:c7:ad:65:af:8c:44:19:f6:3a:
68:d2:8b:23:72:a2:92:d4:88:e9:a3:f0:33:33:c7:ed:91:8b:
87:69:a0:53:71:51:d5:37:05:61:79:53:b5:da:27:11:25:ac:
fd:c7:b7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:23:29 2026 by rpki-client