
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
File: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft (raw, json)
Hash identifier: nshnVm3ark8UGiwPMlLde4MtQYAmVFLmz1SllvcDwA8=
Subject key identifier: 4C:29:3C:DE:48:11:7E:19:AC:D7:4C:1E:F1:A8:5B:95:B7:D2:B0:C2
Authority key identifier: D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57
Certificate issuer: /CN=A9170F11/serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
Manifest number: 0121
Signing time: Wed 13 May 2026 05:52:03 +0000
Manifest this update: Wed 13 May 2026 05:52:03 +0000
Manifest next update: Wed 20 May 2026 05:52:03 +0000
Files and hashes: 1: 1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl (hash: KPMoFPYEfNlwMxV2K3afL++5AgBZkumXdNRToaFnosc=)
2: EB2858349B4B11EF86A11C85C4F9AE02.roa (hash: V6hcLW3DIWJr5GsqXhQQoqs6tXkMxQGHQdAMhmhtdMQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl
rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:52:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170F11, serialNumber=D46964F9F3731F2F63E67008C91E59C7DCC78557
Validity
Not Before: May 13 05:52:03 2026 GMT
Not After : May 20 05:52:03 2026 GMT
Subject: CN=6a041183-ef88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:f6:a3:79:86:14:59:c7:2e:d0:61:f4:ba:
d5:3d:9e:2c:47:9b:6d:15:2a:14:69:0f:9e:30:11:
b5:29:f3:c6:19:9f:70:0a:e0:9f:93:36:5a:7b:b1:
94:08:b9:9c:72:1c:8e:4e:b8:e5:2b:59:3b:e7:e9:
5c:03:60:ca:a0:f3:f8:5c:92:00:11:11:0e:d0:67:
e0:0c:5f:0f:9d:5a:4f:03:c1:f6:27:d7:f5:11:63:
06:5e:e2:b1:9e:d1:47:c5:f6:6d:d9:cc:8a:99:d1:
8f:1b:1d:93:e0:9d:8f:d0:10:ca:16:d6:97:7f:a3:
5e:30:6a:bb:ae:2d:df:1b:53:f8:aa:32:c5:fa:3b:
fa:34:47:73:25:20:ab:27:d8:cd:d9:a7:a1:85:4d:
ee:65:c4:af:61:c8:16:47:f7:05:ef:f5:e2:96:5b:
b8:bc:5f:ea:a8:3f:0b:9d:e0:ab:65:1f:40:84:3c:
1b:cb:a9:8a:02:33:98:d1:d1:69:a3:e1:29:ea:7f:
de:a7:29:69:30:ec:f4:77:b2:40:47:c4:f7:fa:4d:
e7:87:33:ce:d4:6b:3d:2d:5e:e8:0e:66:5b:94:0b:
ce:09:10:ef:a5:55:d5:85:81:5e:89:74:a4:88:fa:
ee:9e:b3:c5:3f:89:fa:a4:92:6e:e9:d9:5c:46:c8:
0a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:29:3C:DE:48:11:7E:19:AC:D7:4C:1E:F1:A8:5B:95:B7:D2:B0:C2
X509v3 Authority Key Identifier:
keyid:D4:69:64:F9:F3:73:1F:2F:63:E6:70:08:C9:1E:59:C7:DC:C7:85:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E926E9129A7C11EF84950D33C4F9AE02/1Glk-fNzHy9j5nAIyR5Zx9zHhVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:f1:84:f4:cb:a6:dc:08:05:db:a3:75:e3:57:bb:e9:f4:3d:
2a:d1:8e:08:68:77:bc:29:f7:aa:a1:ce:18:33:a8:77:1e:14:
65:eb:02:b0:37:f8:ce:11:19:ec:55:ab:ee:a8:01:66:3b:34:
85:a1:5e:ed:6c:c4:5e:6d:8a:d4:05:6a:d6:c6:52:3c:37:8f:
6a:85:e4:6b:db:e3:2c:21:aa:3c:41:10:0a:2f:27:85:9f:cf:
5f:ae:35:ed:c2:ed:9d:81:74:53:06:f3:5b:4d:cf:9d:e5:2d:
bb:23:dc:eb:7f:24:b9:94:fa:a2:4f:a3:ec:f1:c4:bb:8f:15:
cf:74:7d:2a:69:98:4e:4d:7b:40:c7:a8:de:35:7e:43:b9:8b:
9a:ac:00:ea:18:77:12:9d:df:0b:e2:87:f9:8e:76:60:db:84:
c5:5d:2d:f0:e7:67:2b:3a:f2:f1:7c:65:16:c9:91:ce:53:73:
aa:96:dc:ae:1c:8b:6b:2f:e7:90:1f:87:62:41:2b:39:7a:3a:
9e:2f:50:7b:ea:6a:5a:7e:dd:51:64:53:5a:70:96:ee:e9:fd:
db:8e:84:2c:db:2b:54:a3:29:dc:f7:44:93:11:b7:c1:e4:19:
31:ef:d6:62:c3:c2:cf:71:98:52:64:f8:45:c7:96:e4:15:b9:
bd:b2:86:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:29:27 2026 by rpki-client