
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
File: 1Hn1NF93o5en0pzMzvEk3B3_cro.mft (raw, json)
Hash identifier: F7C2QRQ+6809/iEG10+qwuOA8Vs95IEBOVXQzPxiKKw=
Subject key identifier: 21:CC:E9:8B:B3:A0:7A:66:00:36:49:49:BA:19:F5:BE:C9:9E:43:EC
Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA
Certificate issuer: /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
Certificate serial: 03A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
Manifest number: 03A1
Signing time: Sun 05 Apr 2026 00:30:12 +0000
Manifest this update: Sun 05 Apr 2026 00:30:11 +0000
Manifest next update: Sun 12 Apr 2026 00:30:11 +0000
Files and hashes: 1: 1Hn1NF93o5en0pzMzvEk3B3_cro.crl (hash: 6qYJWaWIlrDDsqkEbBksCTO1JM9MZBKxJW46yS9Kv+A=)
2: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (hash: I/3jw2SL7oFfJMZX+8eB8I+ObagDtYG05+5xid9Ie/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl
rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936 (0x3a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199A70, serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
Validity
Not Before: Apr 5 00:30:11 2026 GMT
Not After : Apr 12 00:30:11 2026 GMT
Subject: CN=69d1ad14-5fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:dc:6b:97:fe:23:48:c2:63:69:59:aa:25:
36:23:8a:03:d5:77:2f:02:75:cb:73:7a:81:73:16:
08:c0:fc:1a:06:db:4e:9c:d3:b4:e0:ab:4b:7e:fd:
a1:e9:8b:89:a0:5d:87:5f:05:12:36:86:89:39:05:
6d:fe:7c:92:a4:38:d3:20:9f:1e:ed:32:39:19:9d:
2e:7c:fd:d1:46:4f:9c:84:d0:ee:89:17:e3:80:ea:
da:82:5c:00:c5:bf:6e:ee:3f:38:c4:ee:0d:fd:08:
09:c7:33:61:6c:4a:94:2f:08:9a:37:72:db:45:cd:
cb:81:aa:33:56:7b:61:66:f6:d1:6a:30:f9:c2:99:
2c:c1:f9:fe:04:be:f9:7e:49:e4:5a:bb:ba:2f:79:
f7:69:df:32:78:61:23:8c:09:b7:de:e9:0c:2f:8c:
32:79:af:26:9b:92:23:d2:40:36:16:ca:e3:b9:ba:
30:50:3e:f5:91:10:a7:e7:9f:fe:ae:b3:b8:03:40:
73:86:ef:64:81:ac:eb:d1:f8:92:54:87:ff:6f:bf:
62:b5:19:7d:af:6c:48:7b:12:d7:cd:bf:06:3d:8f:
b5:69:c1:c9:ef:de:70:93:51:ba:bb:a7:b7:1f:0e:
a6:f8:3b:0b:f4:68:46:bf:9e:b5:04:8b:33:3b:55:
85:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CC:E9:8B:B3:A0:7A:66:00:36:49:49:BA:19:F5:BE:C9:9E:43:EC
X509v3 Authority Key Identifier:
keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:14:b5:ea:11:da:cb:75:a7:05:19:f1:90:e9:36:d0:b2:1b:
a5:44:37:6d:87:ba:f6:15:60:ea:5b:48:ca:d4:d6:46:95:c8:
b7:7b:2e:77:39:4e:7b:70:4f:e5:44:70:dd:8b:1c:8d:27:c6:
49:20:e8:e3:69:78:62:e2:be:d9:a2:eb:46:0d:9b:2a:3d:65:
58:dc:b2:d8:96:2e:76:49:63:44:e8:c4:e2:8c:84:39:1f:4b:
3e:76:3b:8c:4c:77:1e:81:32:b0:f5:d3:ce:2c:09:93:68:cb:
70:46:a0:d9:d5:c1:6c:40:37:f9:bc:19:04:c9:c0:e0:1f:32:
26:91:a4:83:e0:20:23:3d:a2:66:9e:97:28:d6:e4:c9:8f:a4:
c4:44:68:5f:e6:88:c7:01:cf:47:b9:32:20:19:bb:2b:30:5b:
97:dd:8f:7b:a4:ef:fd:9a:d1:d8:dd:39:3b:de:2f:6b:52:88:
13:b4:f0:dc:57:92:34:31:69:60:a3:92:7a:e3:c7:72:b8:94:
6c:a4:3b:93:06:af:a1:b4:5d:e9:dc:ab:8e:6b:75:02:c7:aa:
46:20:4b:64:69:89:5d:ed:ac:fb:46:d8:7a:03:2f:25:06:ac:
1e:36:06:31:6d:9c:5c:db:97:b0:4e:03:30:f2:cb:24:c1:5c:
cb:21:15:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlBNzAxMTAvBgNVBAUTKEQ0NzlGNTM0NUY3N0EzOTdBN0QyOUNDQ0NFRjEyNERD
MURGRjcyQkEwHhcNMjYwNDA1MDAzMDExWhcNMjYwNDEyMDAzMDExWjAYMRYwFAYD
VQQDEw02OWQxYWQxNC01ZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuJDca5f+I0jCY2lZqiU2I4oD1XcvAnXLc3qBcxYIwPwaBttOnNO04KtLfv2h
6YuJoF2HXwUSNoaJOQVt/nySpDjTIJ8e7TI5GZ0ufP3RRk+chNDuiRfjgOraglwA
xb9u7j84xO4N/QgJxzNhbEqULwiaN3LbRc3LgaozVnthZvbRajD5wpkswfn+BL75
fknkWru6L3n3ad8yeGEjjAm33ukML4wyea8mm5Ij0kA2FsrjubowUD71kRCn55/+
rrO4A0Bzhu9kgazr0fiSVIf/b79itRl9r2xIexLXzb8GPY+1acHJ795wk1G6u6e3
Hw6m+DsL9GhGv561BIszO1WF9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCHM6Yuz
oHpmADZJSboZ9b7JnkPsMB8GA1UdIwQYMBaAFNR59TRfd6OXp9KczM7xJNwd/3K6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUE3MC9DREJCMTg5NkQ3
RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281ZW4wcHpNenZFazNCM19j
cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFIbjFORjkzbzVlbjBwek16dkVrM0IzX2Nyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUE3MC9DREJCMTg5NkQ3RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281
ZW4wcHpNenZFazNCM19jcm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAehS16hHay3WnBRnxkOk20LIbpUQ3bYe69hVg6ltIytTWRpXIt3sudzlOe3BP
5URw3YscjSfGSSDo42l4YuK+2aLrRg2bKj1lWNyy2JYudkljROjE4oyEOR9LPnY7
jEx3HoEysPXTziwJk2jLcEag2dXBbEA3+bwZBMnA4B8yJpGkg+AgIz2iZp6XKNbk
yY+kxERoX+aIxwHPR7kyIBm7KzBbl92Pe6Tv/ZrR2N05O94va1KIE7Tw3FeSNDFp
YKOSeuPHcriUbKQ7kwavobRd6dyrjmt1AseqRiBLZGmJXe2s+0bYegMvJQasHjYG
MW2cXNuXsE4DMPLLJMFcyyEVkQ==
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:00:08 2026 by rpki-client