
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft
File: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft (raw, json)
Hash identifier: NW9mEE9qYMQcqxPXvRAdhgfRGRxRqBt4xdXkfHg/GeM=
Subject key identifier: 70:76:87:2F:E1:F7:14:4E:A6:17:9C:A1:6D:8C:BB:81:CA:7C:42:33
Authority key identifier: D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2
Certificate issuer: /CN=A91BB629/serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft
Manifest number: 0148
Signing time: Sun 05 Apr 2026 04:43:04 +0000
Manifest this update: Sun 05 Apr 2026 04:43:04 +0000
Manifest next update: Sun 12 Apr 2026 04:43:04 +0000
Files and hashes: 1: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl (hash: 3b8D1iydryXBEbR//bjsfobldTuyclaOSksQHIjxy2Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl
rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:43:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB629, serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2
Validity
Not Before: Apr 5 04:43:04 2026 GMT
Not After : Apr 12 04:43:04 2026 GMT
Subject: CN=69d1e858-b527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:a7:51:57:93:44:43:92:ba:38:d4:7d:e1:
b9:71:ac:39:96:4e:0e:ba:48:68:72:da:f4:55:ac:
f0:32:8d:30:22:28:17:f4:df:8a:48:bb:71:18:d5:
79:d5:69:bb:21:24:88:d2:29:68:5f:a9:1d:6b:8d:
c4:db:23:fc:b9:0b:09:a5:9c:be:d2:6d:69:7b:8e:
42:2e:0e:16:39:28:69:c3:4d:54:e3:22:ef:3d:6e:
bf:b2:f9:52:f1:18:0a:96:43:88:41:6a:28:e7:9c:
7e:23:54:06:25:ba:99:de:16:b9:61:53:43:e5:59:
f8:d1:25:60:03:6e:87:af:f9:e6:c6:b4:61:95:fc:
99:3e:5e:40:e9:c9:b2:f0:e8:27:11:da:ce:52:f3:
66:af:0d:2d:2c:30:e8:67:78:16:f7:2a:45:c8:14:
cb:82:64:9c:28:b6:eb:75:1f:29:13:ee:8d:b5:f6:
83:eb:bd:af:36:0f:a1:cc:43:fe:bf:79:96:7f:4a:
b8:f7:8a:98:82:d7:d7:fb:e7:6f:30:78:85:01:c6:
9a:a3:da:9e:5f:a1:25:be:9d:80:c0:54:da:96:54:
43:ae:bc:c2:8d:91:96:76:0e:98:d8:3d:b3:ad:c2:
af:09:ac:d0:22:7d:52:dc:88:a9:7a:2b:4b:96:fd:
72:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:76:87:2F:E1:F7:14:4E:A6:17:9C:A1:6D:8C:BB:81:CA:7C:42:33
X509v3 Authority Key Identifier:
keyid:D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:8c:f9:42:ae:6e:c4:81:81:b4:60:d4:f7:4a:b1:18:02:55:
95:57:7d:24:20:43:53:89:24:a4:33:77:01:4d:96:37:8a:dc:
d6:8f:50:f1:5d:f1:23:95:3a:15:22:3c:cd:b8:91:47:79:3d:
ef:6d:8b:3b:8b:e4:67:41:cb:66:8d:be:dc:91:ce:57:73:db:
62:25:d8:c5:2d:78:0f:20:6a:07:95:72:d6:df:af:77:26:a0:
f5:73:4c:ec:e4:d5:ba:67:d5:f7:e8:33:f1:a1:00:91:a9:fb:
d6:f4:5c:da:40:53:44:ce:e9:03:47:0f:f7:3f:51:8b:cc:96:
81:ce:33:0f:67:cd:b2:e3:82:da:d1:6b:b8:be:d0:b6:29:a7:
8c:4c:2c:ab:2c:84:a2:ae:1d:c4:9b:e3:ef:ef:84:48:f8:9a:
e1:ec:a2:67:f2:37:af:1d:5b:dd:44:96:9d:44:48:db:d9:1c:
92:be:31:12:c2:f3:7f:e9:7b:08:aa:e4:e0:cc:44:0f:05:7b:
59:69:69:6b:ab:ba:df:7e:f7:55:a7:d8:33:5d:5b:db:48:ba:
15:f2:b6:9a:90:41:34:4e:f8:8c:66:ec:39:81:a3:08:fa:d7:
7a:18:e3:3c:28:f2:85:33:fd:6f:fb:12:29:38:38:ef:97:f5:
54:49:45:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:58 2026 by rpki-client