
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
File: 1N8l4OzS44CPaHDuVvcPJVgYkz4.mft (raw, json)
Hash identifier: KAW2zz+VkLVyddXuDK8EIjL1eBaU07gxuRySV57gjJA=
Subject key identifier: 60:25:DE:C2:CE:6B:66:4A:41:55:42:FC:3A:FD:17:71:BD:DD:94:56
Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
Certificate issuer: /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
Manifest number: 0135
Signing time: Tue 03 Mar 2026 05:04:13 +0000
Manifest this update: Tue 03 Mar 2026 05:04:12 +0000
Manifest next update: Tue 10 Mar 2026 05:04:12 +0000
Files and hashes: 1: 1N8l4OzS44CPaHDuVvcPJVgYkz4.crl (hash: RZGC6eQQI0yne5fII09X3Y5y3WnU302yE+BcmxvZf9c=)
2: 5415D510C68E11F0BC83973CC4F9AE02.roa (hash: aIjDJK06Sydwpu827vCSPgKtmMJrBazpUw0z+Gr+fHs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl
rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D260A, serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Validity
Not Before: Mar 3 05:04:12 2026 GMT
Not After : Mar 10 05:04:12 2026 GMT
Subject: CN=69a66bcc-aabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:71:c9:9a:a0:ad:ba:79:fa:36:7f:4e:be:
c3:98:ed:b8:65:8c:06:45:34:7e:5f:11:58:31:b3:
1c:39:e3:6b:6d:80:99:bb:a1:65:82:df:60:d6:31:
a0:25:e9:01:df:1a:4d:6c:9d:33:88:0f:5c:1d:f6:
d3:4b:0e:df:d7:27:62:1e:5d:5c:25:a1:35:f9:7a:
d7:aa:5e:1d:53:13:0a:07:fb:56:10:94:93:40:5a:
5b:0a:ed:06:e5:d7:86:16:49:dc:7e:21:73:00:a7:
5c:a2:4d:ac:2a:9b:9d:c6:17:9b:21:27:94:e9:2a:
62:51:9c:d0:74:2a:2e:42:7d:86:16:ff:24:20:05:
6b:e4:ab:bc:34:c0:43:56:d1:d4:c1:9c:72:2c:3e:
2b:bc:10:e6:25:1f:89:be:61:68:21:a1:da:bd:18:
33:f0:0e:b7:f7:cd:8f:47:1c:3b:cc:46:38:d8:3b:
85:83:7c:39:61:91:58:e0:04:49:30:09:6e:eb:01:
db:a3:a7:08:50:81:10:7f:d9:f4:9c:c8:c2:28:5c:
d7:c7:13:78:c0:32:7e:1e:82:89:ca:3a:30:7f:c4:
e5:22:1d:67:8b:1c:3c:ff:0e:b1:3d:d6:e8:bd:c5:
37:86:68:6e:79:b4:c1:57:ec:3d:11:9c:e6:81:ba:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:25:DE:C2:CE:6B:66:4A:41:55:42:FC:3A:FD:17:71:BD:DD:94:56
X509v3 Authority Key Identifier:
keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:53:d4:d9:6e:05:0f:8d:42:3a:94:c0:de:d0:3e:36:3f:f4:
86:fa:bf:a9:1b:8f:c4:71:1a:10:ff:a0:31:2d:34:1b:33:b7:
8f:6d:a5:97:8c:a0:5f:c8:04:71:53:ba:40:06:c4:0a:ea:f0:
60:2f:59:0f:c3:02:67:8b:f9:7d:c2:49:be:2c:36:bf:7d:a2:
33:c0:9e:05:01:aa:46:83:80:58:4f:7d:14:ac:ef:14:f8:8a:
0f:13:fc:1f:b3:70:e8:06:80:db:f6:da:d4:68:e4:95:d1:cd:
38:70:88:e7:8f:99:a8:7e:27:5d:e7:9d:d6:ce:78:89:ea:46:
2a:23:3a:ff:51:d3:2b:f8:39:47:4c:38:6c:ea:5a:68:73:bf:
62:d6:76:25:06:26:d9:82:2c:ea:fe:60:f2:6b:15:58:44:60:
7b:d1:f1:4d:67:87:2b:7a:7e:b5:ca:fb:90:a1:be:e3:88:57:
7b:cc:49:08:47:76:18:de:5c:44:e5:74:be:3a:0b:a2:b1:d3:
5d:9a:26:de:c1:fc:ea:67:bb:cd:95:a1:da:8d:bf:e4:2e:57:
ae:19:4e:46:10:9b:e1:96:43:59:2c:c4:28:69:4e:69:71:71:
cf:62:4d:8c:12:17:c2:85:85:2b:69:97:b5:53:f5:e2:27:74:
2c:54:20:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:32 2026 by rpki-client