
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
File: 1yELbplCSp6CpNRQAnNvZIOqJ5o.mft (raw, json)
Hash identifier: do8gQTqoQszds9RbI2keRWCc3fjWjTO4k3sjhl786BY=
Subject key identifier: E8:86:8A:F7:DD:0C:5C:99:CB:0D:0E:BF:A2:57:D5:AB:A4:54:2F:41
Authority key identifier: D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
Certificate issuer: /CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Certificate serial: 017B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
Manifest number: 0170
Signing time: Wed 13 May 2026 04:52:44 +0000
Manifest this update: Wed 13 May 2026 04:52:43 +0000
Manifest next update: Wed 20 May 2026 04:52:43 +0000
Files and hashes: 1: 1yELbplCSp6CpNRQAnNvZIOqJ5o.crl (hash: HuwAqRE/aBImpqpisD2iMzFJb9p7ubRz89sulD3IIOY=)
2: 1D5C0B90475D11EFBD75C15EC4F9AE02.roa (hash: dvMAmyh/hxtc1oBr5SYuyecDOjC5pr35ilz+dVjcw8U=)
3: A12190D8109411F1899116B2353D8C67.roa (hash: QIM5OQhz8QrW/58S7ybtOUdL75BxjSCO7dYUN29W8QE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl
rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A909, serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A
Validity
Not Before: May 13 04:52:43 2026 GMT
Not After : May 20 04:52:43 2026 GMT
Subject: CN=6a04039c-95a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:71:d8:d3:09:84:99:bf:10:48:ae:9b:b4:
d1:c9:d4:ec:ea:00:d6:0a:e5:03:12:b3:65:bf:b9:
7a:d9:da:7c:0c:85:4d:b2:74:25:e2:4b:af:b7:84:
97:2d:93:7c:88:c5:cc:b5:5d:41:19:ce:7e:ff:f5:
36:6d:17:47:a8:4b:b4:0d:90:a6:cb:33:3b:38:b6:
85:aa:22:49:dc:6b:0e:1a:2f:31:c8:d2:b7:c6:8d:
95:ab:9f:0c:8f:01:eb:87:4d:df:49:2d:92:e7:15:
cd:fa:55:0c:c0:40:0c:e9:af:5d:fd:e5:e7:3f:fb:
d8:88:b3:b4:4f:6d:af:6d:9f:11:8f:5e:4b:69:aa:
8d:4e:bc:1e:8b:56:89:dc:34:7e:8b:c3:77:d9:91:
02:a6:03:8b:35:34:da:34:1d:da:c6:d1:db:b2:37:
4d:a0:0e:46:36:ef:80:10:4d:d0:c1:ad:63:89:b7:
cf:72:18:fe:d4:ef:ce:e8:8b:b9:dc:c6:f0:cb:cd:
19:8e:e6:b4:4c:81:e0:dc:f9:19:a9:7d:de:2c:7d:
18:77:32:f4:5c:a4:65:20:59:c2:31:09:0f:e3:e0:
36:78:01:2e:fd:60:94:ab:f1:a1:37:d0:3f:43:b3:
47:10:4f:83:c1:cf:a9:97:a2:03:21:eb:50:cf:52:
b4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:86:8A:F7:DD:0C:5C:99:CB:0D:0E:BF:A2:57:D5:AB:A4:54:2F:41
X509v3 Authority Key Identifier:
keyid:D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b1:88:65:52:a4:28:23:d8:c9:1d:95:8b:88:a8:49:0d:f3:
60:f1:dd:d5:a6:cf:b8:52:66:a1:d2:e5:df:70:74:cb:dd:6f:
fb:cc:38:e9:cf:34:35:2a:9d:2b:96:d3:d7:e9:63:d6:e6:ec:
d7:2c:82:18:1b:29:26:56:b5:b7:6f:e3:fe:04:04:e4:88:aa:
bf:bb:27:5a:5d:4d:39:45:fe:42:24:d7:3e:f2:a6:e0:37:d2:
ec:83:cb:d0:bf:61:fb:e3:fb:29:1f:7b:b6:77:11:71:80:16:
78:80:3f:74:3e:73:32:f2:c7:cc:e7:91:f5:32:bf:d8:bd:1f:
3d:b9:ea:c0:1a:58:e3:b5:de:29:6d:85:cb:c5:14:4e:d4:11:
26:73:fd:77:7a:4c:6b:b4:2d:c1:21:6f:78:63:f1:21:6b:b8:
a6:1a:38:4e:9d:6c:5f:13:57:4e:f0:f3:28:0d:f5:b3:57:2d:
7f:c7:eb:ce:6d:27:bd:a2:71:a0:e7:6a:8d:a9:c2:1b:4e:32:
33:93:2b:5e:3c:04:83:ca:8a:36:9c:bd:be:ad:a5:64:10:65:
15:5a:28:37:83:21:54:5e:19:58:49:7a:31:c9:49:af:7d:d2:
b5:28:95:92:e0:2f:10:a1:8b:d8:a8:6e:05:86:c9:01:64:6b:
73:7f:10:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:02:38 2026 by rpki-client