
$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
File: 1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json)
Hash identifier: hPDkX1bPHkfYzpZJAWE8bLH2rH9Shto/qsMx4PI4TZc=
Subject key identifier: 96:6D:AC:F7:08:0D:A8:36:F2:51:86:37:A1:10:09:0F:FD:55:4F:A9
Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF
Certificate issuer: /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF
Certificate serial: 1CC3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
Manifest number: 1C9E
Signing time: Mon 22 Jun 2026 16:09:30 +0000
Manifest this update: Mon 22 Jun 2026 16:09:30 +0000
Manifest next update: Mon 29 Jun 2026 16:09:30 +0000
Files and hashes: 1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: X6ciQAuMy62ajwL+eXSHA73bgWgtc4V0qorW6XlCcfs=)
2: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: Kodnm0+rS9iUqWFMV9owslM69gEEqhhUDC5QqGUYClg=)
3: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: rpWO/lHhm5TFSW6ilLk7bGl8UUGMVt6i+NJTBnIB37Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl
rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 16:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7363 (0x1cc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91970E2, serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF
Validity
Not Before: Jun 22 16:09:30 2026 GMT
Not After : Jun 29 16:09:30 2026 GMT
Subject: CN=6a395e3a-1f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:44:d4:0a:26:8d:00:8b:6d:af:15:93:70:
f2:05:81:99:7f:b0:cc:16:cf:1a:64:6f:d8:11:f5:
09:19:76:de:44:16:a2:d5:42:b8:b6:7b:1f:a7:d1:
10:18:b7:8c:c3:91:6c:55:1b:23:0a:69:54:7e:ee:
d1:00:7e:a6:f4:9d:f5:e2:22:30:dc:b2:84:ff:61:
89:76:5d:3c:80:4a:1a:8c:6e:6d:aa:cc:ba:b5:46:
b8:e9:d8:df:9a:57:75:d9:cc:76:51:f1:cc:8c:aa:
93:91:41:b3:41:5b:49:3c:54:5f:ee:e6:56:34:33:
0d:d7:38:7d:de:68:87:72:28:1d:6b:58:15:aa:b4:
88:b0:47:ee:21:80:49:e9:f3:ff:73:ea:39:e4:a2:
97:31:41:c3:47:08:4f:dc:62:e5:d7:e1:05:26:b5:
89:19:b8:f2:5e:f6:78:0e:7f:ef:5b:bc:35:7f:ee:
89:4d:2a:75:2e:9e:5b:75:26:ee:d9:a1:e2:f8:69:
38:3a:b6:aa:0a:20:b2:3a:8a:25:d3:f8:e0:7d:02:
9a:24:83:54:a1:29:26:97:24:56:29:80:ed:35:73:
18:e4:93:fe:ff:c2:a9:1a:d3:05:ef:ca:9e:3c:b7:
78:13:b4:c2:21:52:f3:07:25:47:53:e6:6d:58:37:
07:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6D:AC:F7:08:0D:A8:36:F2:51:86:37:A1:10:09:0F:FD:55:4F:A9
X509v3 Authority Key Identifier:
keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:51:f0:45:6d:a8:43:48:0a:02:07:25:b1:2c:e7:8d:5e:32:
26:b4:40:c2:04:90:0c:92:43:b8:dd:c5:7f:32:9a:4f:38:cb:
04:e9:d0:8c:a8:3d:53:ae:5e:c1:77:1d:32:4f:e5:16:0e:53:
30:0e:b8:eb:bd:6a:ee:82:14:77:99:ed:27:23:4e:7d:25:23:
fe:9f:22:ab:7c:49:a9:4c:e1:4c:da:6c:f9:29:23:b9:7f:44:
e9:ed:aa:dd:06:81:1e:73:8f:95:c0:ed:67:4b:f8:d4:d4:db:
17:76:fc:87:87:60:36:12:1c:82:cd:e6:4a:ed:a5:2c:7f:bb:
d6:e2:1d:3a:1b:c1:f8:81:61:84:00:9d:49:fe:98:e1:92:7e:
7f:33:e6:f8:fc:1c:c3:e1:67:3c:c3:49:01:ec:ab:31:ca:7c:
80:80:ba:a8:17:c0:3d:5b:85:d9:86:bf:17:64:4f:8a:06:f4:
d0:28:05:e0:22:55:b1:53:d5:94:74:91:e6:7c:88:4f:a3:3c:
f8:2b:c6:24:15:34:64:67:d2:f1:32:58:c4:cc:c8:be:bd:82:
1e:ee:aa:8d:93:0c:2c:cc:4f:52:b9:53:96:7d:5b:2f:d9:c4:
f4:1c:39:e7:be:8a:b2:6b:e5:ba:31:f6:f9:6a:d9:85:88:df:
24:01:27:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:27:09 2026 by rpki-client