
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
File: 1Hn1NF93o5en0pzMzvEk3B3_cro.mft (raw, json)
Hash identifier: FAmr+z/dvGCdofefNkJ2xf7XRGFml/0/kuCaNOoz0hc=
Subject key identifier: 6B:F5:07:29:44:2A:5C:9B:43:7C:B6:9E:EF:83:CB:2C:11:5D:E0:3E
Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA
Certificate issuer: /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
Certificate serial: 0406
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
Manifest number: 03FF
Signing time: Wed 07 Oct 2026 00:32:03 +0000
Manifest this update: Wed 07 Oct 2026 00:32:02 +0000
Manifest next update: Wed 14 Oct 2026 00:32:02 +0000
Files and hashes: 1: 1Hn1NF93o5en0pzMzvEk3B3_cro.crl (hash: q0R+CRlvREo9cr6TAiWwnoTefXiICSrRe93titQ5K/4=)
2: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (hash: I/3jw2SL7oFfJMZX+8eB8I+ObagDtYG05+5xid9Ie/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl
rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 00:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1030 (0x406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199A70, serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
Validity
Not Before: Oct 7 00:32:02 2026 GMT
Not After : Oct 14 00:32:02 2026 GMT
Subject: CN=6ac59303-41db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:94:06:3f:d7:b9:37:2c:0c:43:e3:a6:f6:b3:
bc:34:7a:64:79:ba:29:26:ef:a6:6d:c3:a2:4f:ab:
60:e8:09:c5:4a:ee:a8:ea:83:26:b1:dc:e0:89:48:
79:9d:ea:67:b3:6c:2a:5c:5e:5d:f1:9b:54:05:53:
02:bf:13:e8:e2:27:35:a8:9d:15:78:c8:b8:b2:44:
29:01:c9:b0:b4:7a:78:af:91:8d:86:2c:55:6f:9a:
0c:4e:53:82:26:8a:73:ef:47:60:6a:8f:97:9d:62:
39:02:c0:ce:d6:bc:31:56:17:92:33:63:dd:b7:99:
53:2c:2e:81:e8:0d:47:49:ae:73:84:f8:ba:79:76:
69:af:71:17:0a:7b:e7:07:0e:4d:4b:b6:d5:37:51:
cc:43:7d:fd:15:f7:aa:43:76:68:c7:98:8c:24:d8:
0f:58:df:e8:b7:41:a6:35:90:d1:b3:63:31:07:64:
05:4e:4a:d2:f6:c8:44:0d:92:55:d1:82:4b:e7:a7:
af:ea:7e:ed:fb:62:9d:e1:ab:db:6a:92:8e:c2:1f:
f2:70:20:c4:97:44:7e:ab:e0:23:24:d1:25:37:a6:
72:60:95:53:e0:80:02:66:65:3c:45:0b:e5:1f:19:
f8:21:e0:5a:2b:bd:3a:c2:dc:71:a8:43:96:2c:50:
8c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F5:07:29:44:2A:5C:9B:43:7C:B6:9E:EF:83:CB:2C:11:5D:E0:3E
X509v3 Authority Key Identifier:
keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e7:e0:95:66:3a:d2:93:fd:7f:fd:45:55:b1:8e:a4:10:eb:
ef:23:e2:c8:86:68:22:5f:e7:fb:28:74:10:a2:fd:0a:53:ab:
27:dc:2c:fa:95:ef:19:62:7e:34:74:4e:4b:e8:d9:50:b3:57:
0a:4d:76:18:75:48:fc:00:c6:ab:8d:b2:f7:d6:8d:67:83:4b:
a9:58:1f:09:ba:2d:01:4b:80:7c:a9:05:6a:1c:44:37:3b:74:
96:cc:f6:88:5c:80:90:cf:00:ef:a2:c4:a1:50:2a:ac:1b:18:
d2:28:95:25:20:ef:b6:14:79:6e:81:44:9d:cc:df:f0:01:79:
ff:10:e8:aa:f3:3b:38:d5:7f:8a:5f:6b:f7:d7:78:26:e3:81:
d6:8d:f7:85:f8:86:28:ee:d7:5f:b0:59:58:ca:5e:cc:f6:92:
7d:36:3a:21:27:29:9b:5f:00:e9:5f:67:ba:60:02:6a:16:dd:
11:bf:82:9b:2f:11:3c:02:c3:36:2c:42:5e:6d:14:46:ca:b1:
ff:4a:2b:c7:8c:de:50:e6:9b:5f:6d:40:b1:0b:e2:fa:bd:63:
6a:9c:f8:e7:c0:6c:39:f8:a3:67:17:ab:f9:e3:73:04:b1:2c:
2f:1e:c8:a4:b6:93:21:2e:93:b0:a9:e5:80:90:eb:b5:5c:5b:
1f:b9:93:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:07:36 2026 by rpki-client