
$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
File: 1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json)
Hash identifier: HbU+F/OvC6R6E81+LveiOguTdmBz3Xb6zGyfdQky9PU=
Subject key identifier: 65:21:0F:2A:26:15:00:D0:D6:D5:10:AA:E5:3F:53:7B:63:B3:2A:C0
Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF
Certificate issuer: /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF
Certificate serial: 1CD2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
Manifest number: 1CAD
Signing time: Wed 22 Jul 2026 16:15:45 +0000
Manifest this update: Wed 22 Jul 2026 16:15:44 +0000
Manifest next update: Wed 29 Jul 2026 16:15:44 +0000
Files and hashes: 1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: k8M1RQ9jBwnbk90etfcsTnYzUkWUmM5j96Uoy4llXFY=)
2: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: Kodnm0+rS9iUqWFMV9owslM69gEEqhhUDC5QqGUYClg=)
3: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: rpWO/lHhm5TFSW6ilLk7bGl8UUGMVt6i+NJTBnIB37Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl
rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7378 (0x1cd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91970E2, serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF
Validity
Not Before: Jul 22 16:15:44 2026 GMT
Not After : Jul 29 16:15:44 2026 GMT
Subject: CN=6a60ecb1-bf37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:7f:cb:ff:df:5f:39:59:03:a1:30:6a:40:
67:ee:05:e1:5e:9e:dd:38:ab:39:2c:17:6a:0c:69:
2d:ad:b9:a1:8f:ec:0b:4f:8f:fd:63:81:9e:56:db:
15:f1:4b:d7:01:8a:3e:ff:97:24:95:8f:e6:d8:15:
2e:5f:56:ca:1f:9e:f3:b1:9f:17:96:e4:8d:bf:4e:
05:92:ea:e4:8f:c8:c4:aa:06:fc:d7:77:77:0f:91:
51:af:31:06:67:e2:15:16:50:b0:52:b0:56:46:02:
9b:e8:60:86:16:a0:6d:51:14:29:44:2a:8b:14:2a:
77:ba:26:51:fd:60:0c:87:e2:e6:8c:09:ba:e2:dc:
b0:03:d4:28:2c:c6:3a:06:85:c0:5b:e4:c9:90:75:
ee:82:78:cc:9a:90:c8:c8:70:3b:da:f0:aa:42:45:
3a:da:b1:56:7f:95:0d:c2:44:e3:6b:c7:7d:26:32:
8f:05:f7:9e:88:63:29:1a:60:52:a5:f4:67:41:23:
6d:98:f8:99:e4:2c:ac:a6:e3:ae:f9:b5:42:5d:e6:
64:87:bb:bd:ff:91:e9:d2:e4:33:9b:41:f4:b1:93:
96:66:2c:9e:f7:95:61:59:40:c0:af:3c:26:9b:07:
23:1a:21:bd:59:b6:67:f5:07:d6:b2:e9:92:0e:81:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:21:0F:2A:26:15:00:D0:D6:D5:10:AA:E5:3F:53:7B:63:B3:2A:C0
X509v3 Authority Key Identifier:
keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:67:76:f8:62:fe:96:b4:fe:10:1a:28:92:58:57:b8:f6:12:
3b:c9:64:d5:f6:c0:b4:77:22:21:44:58:45:a5:3b:84:05:70:
2a:29:13:3e:95:07:da:ea:84:03:8c:ea:26:3e:94:96:b3:0b:
3c:df:d8:64:de:29:05:2e:11:24:0d:76:d7:e0:d2:f3:7c:0f:
ad:79:cc:8a:8c:57:86:a5:8d:be:64:85:38:78:fd:33:c1:31:
33:b9:1c:85:96:d8:39:0d:5c:06:55:77:7d:92:b5:49:d1:8e:
2c:73:3a:00:60:ce:d3:83:30:4d:a8:b4:c5:98:4d:8a:00:f4:
a0:ba:81:d2:e2:ba:a7:cf:e0:41:f2:5a:99:38:d0:e8:ec:67:
29:6b:b8:59:b1:11:fa:cc:91:a7:69:69:e4:58:78:56:31:e6:
0e:a8:b5:93:45:53:35:2a:47:84:0f:e2:24:4f:28:d1:47:c1:
d9:7a:9a:10:5b:f8:98:e5:02:33:c4:c1:99:b9:aa:2b:2a:7c:
5f:6e:c8:86:f2:3a:40:b8:cf:2b:22:2b:9e:75:8d:c5:10:5f:
a6:20:e6:02:49:61:a4:b1:c8:29:dc:6e:2f:5d:03:7d:8e:c0:
24:fa:95:b8:05:c0:90:2e:9a:46:f3:1b:72:21:fe:57:65:33:
d1:3c:10:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:15:29 2026 by rpki-client