
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft
File: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft (raw, json)
Hash identifier: uuUCMmG8p+t7fZHq0MLe7yyEr2C3Bqpex0+iUxX21ws=
Subject key identifier: DA:41:05:99:C6:41:D5:FE:84:1B:11:24:05:9F:DF:EE:B7:F6:C8:4D
Authority key identifier: D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22
Certificate issuer: /CN=A9172D65/serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22
Certificate serial: 0537
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft
Manifest number: 052F
Signing time: Tue 24 Mar 2026 23:13:41 +0000
Manifest this update: Tue 24 Mar 2026 23:13:41 +0000
Manifest next update: Tue 31 Mar 2026 23:13:41 +0000
Files and hashes: 1: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl (hash: VE40r5E+taaS/JbNutRmwRUHFGPwEbLmOu/tDCbMmeM=)
2: 56530120D47E11EFB2639C53C4F9AE02.roa (hash: b7CwC2fe96z3x+Fvfv4++7k3I2tqTbNxtFKEdcFxbNU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl
rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:13:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1335 (0x537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172D65, serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22
Validity
Not Before: Mar 24 23:13:41 2026 GMT
Not After : Mar 31 23:13:41 2026 GMT
Subject: CN=69c31aa5-111a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9c:0a:1b:f0:f4:52:ef:b8:83:65:f5:55:5e:
41:9b:05:01:f7:40:92:60:a4:cb:db:fd:3a:e3:61:
4b:3e:ea:7b:54:82:11:f5:02:bc:6c:b3:57:f8:5b:
5a:69:0f:b1:ee:c4:c9:34:8a:33:5b:b8:5a:de:2c:
05:14:2f:58:86:19:fe:ae:b4:04:46:e8:b4:f9:33:
20:6b:71:62:c0:66:e4:03:75:d4:eb:23:48:07:a7:
5e:53:a2:49:0a:60:54:f6:3f:54:73:c7:1c:58:4b:
5e:31:28:e5:f5:2e:41:1e:e2:e5:09:4d:90:0a:6f:
78:0a:1c:96:61:9c:c6:62:9d:ba:76:34:f2:bd:57:
a8:7c:ff:90:b3:67:f4:8e:47:bf:39:90:2a:62:b8:
51:ab:cf:43:9e:ba:c9:b2:c1:27:a9:b5:07:df:09:
f7:0e:62:b1:39:78:b7:64:e0:4c:07:00:b3:1b:4f:
8c:96:6f:f5:5f:84:89:ee:74:da:6b:de:a9:04:1e:
3f:c7:c0:7d:d5:a8:f7:1c:ce:63:1a:79:91:8a:d6:
8d:c9:18:9e:d3:c1:31:1a:b2:0b:18:ce:e0:28:f0:
2b:5b:37:14:3c:6d:dc:76:ca:e7:78:57:b7:5c:d3:
1e:e9:61:60:c0:b7:fd:cc:74:ed:86:bf:2e:96:8c:
2c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:41:05:99:C6:41:D5:FE:84:1B:11:24:05:9F:DF:EE:B7:F6:C8:4D
X509v3 Authority Key Identifier:
keyid:D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:70:66:40:7b:ae:09:b9:a0:9a:c2:63:5c:5c:d7:ce:e9:7d:
62:2b:a1:5b:7a:5f:7c:e1:a6:13:29:c7:a1:ae:81:ac:54:0a:
30:60:92:85:75:5e:58:8d:1a:8f:bc:92:d8:45:b6:14:50:ad:
2a:65:a0:ab:6e:ed:95:6d:fb:15:d2:84:69:a1:c5:5c:06:c3:
ce:d8:0a:27:65:16:32:49:63:23:a7:66:18:4c:9e:dc:36:cf:
b8:7e:fa:ce:00:11:a7:a1:56:6e:6d:42:7e:dd:fd:38:09:47:
b0:1b:10:0a:7c:46:59:ca:3a:d0:25:0d:f5:eb:7c:81:08:dd:
83:07:28:63:23:fa:fb:28:e7:55:89:07:9a:bb:20:7c:9b:76:
d7:5a:f6:5e:48:64:f1:59:86:20:61:c1:97:28:90:93:88:b2:
36:76:01:e1:e9:d5:73:e5:5a:33:99:bf:1e:b1:61:e3:1b:31:
1b:3d:4f:b2:51:31:bb:12:4a:cd:5f:41:46:a0:6d:1e:0f:4b:
77:55:ff:e7:16:5f:5b:a0:ba:80:da:47:36:4f:38:8b:fc:e9:
3e:e5:ae:9f:8a:48:6c:36:3b:d6:da:b3:85:4e:62:a4:14:cd:
4b:75:20:20:54:29:66:67:dc:5c:54:91:fc:76:56:92:8c:87:
bb:e2:9f:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJENjUxMTAvBgNVBAUTKEQ3MTUxOEZDNkU1NkM3QzRFQ0E5RUExOEIxQjU0MUQ4
QjBDMkNBMjIwHhcNMjYwMzI0MjMxMzQxWhcNMjYwMzMxMjMxMzQxWjAYMRYwFAYD
VQQDEw02OWMzMWFhNS0xMTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAppwKG/D0Uu+4g2X1VV5BmwUB90CSYKTL2/0642FLPup7VIIR9QK8bLNX+Fta
aQ+x7sTJNIozW7ha3iwFFC9Yhhn+rrQERui0+TMga3FiwGbkA3XU6yNIB6deU6JJ
CmBU9j9Uc8ccWEteMSjl9S5BHuLlCU2QCm94ChyWYZzGYp26djTyvVeofP+Qs2f0
jke/OZAqYrhRq89DnrrJssEnqbUH3wn3DmKxOXi3ZOBMBwCzG0+Mlm/1X4SJ7nTa
a96pBB4/x8B91aj3HM5jGnmRitaNyRie08ExGrILGM7gKPArWzcUPG3cdsrneFe3
XNMe6WFgwLf9zHTthr8ulowszQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNpBBZnG
QdX+hBsRJAWf3+639shNMB8GA1UdIwQYMBaAFNcVGPxuVsfE7KnqGLG1Qdiwwsoi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ2NS80RjQyMUY1MjNC
MEIxMUVDQUEyNUUzM0FDNEY5QUUwMi8xeFVZX0c1V3g4VHNxZW9Zc2JWQjJMREN5
aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzF4VVlfRzVXeDhUc3Flb1lzYlZCMkxEQ3lpSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkQ2NS80RjQyMUY1MjNCMEIxMUVDQUEyNUUzM0FDNEY5QUUwMi8xeFVZX0c1V3g4
VHNxZW9Zc2JWQjJMREN5aUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf3BmQHuuCbmgmsJjXFzXzul9YiuhW3pffOGmEynHoa6BrFQKMGCShXVeWI0a
j7yS2EW2FFCtKmWgq27tlW37FdKEaaHFXAbDztgKJ2UWMkljI6dmGEye3DbPuH76
zgARp6FWbm1Cft39OAlHsBsQCnxGWco60CUN9et8gQjdgwcoYyP6+yjnVYkHmrsg
fJt211r2Xkhk8VmGIGHBlyiQk4iyNnYB4enVc+VaM5m/HrFh4xsxGz1PslExuxJK
zV9BRqBtHg9Ld1X/5xZfW6C6gNpHNk84i/zpPuWun4pIbDY71tqzhU5ipBTNS3Ug
IFQpZmfcXFSR/HZWkoyHu+KfuQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:05 2026 by rpki-client