
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
File: 1N8l4OzS44CPaHDuVvcPJVgYkz4.mft (raw, json)
Hash identifier: DuEYoN1JMobkkXaajigkCYbWurz8nnizskhqoMkkx8E=
Subject key identifier: 4F:D1:B5:78:9A:BC:59:CF:7D:45:C2:1F:62:9C:1C:51:C2:A3:A9:72
Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
Certificate issuer: /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Certificate serial: 0146
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
Manifest number: 0140
Signing time: Wed 25 Mar 2026 04:34:08 +0000
Manifest this update: Wed 25 Mar 2026 04:34:07 +0000
Manifest next update: Wed 01 Apr 2026 04:34:07 +0000
Files and hashes: 1: 1N8l4OzS44CPaHDuVvcPJVgYkz4.crl (hash: 5PxswD7FOh0vUn12aMl9fq5V3GPBkVwZuvoiu6OlwnU=)
2: 5415D510C68E11F0BC83973CC4F9AE02.roa (hash: aIjDJK06Sydwpu827vCSPgKtmMJrBazpUw0z+Gr+fHs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl
rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:34:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326 (0x146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D260A, serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Validity
Not Before: Mar 25 04:34:07 2026 GMT
Not After : Apr 1 04:34:07 2026 GMT
Subject: CN=69c365c0-a296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:73:6e:19:18:e3:e2:0a:10:9e:21:aa:7a:
ce:90:15:a9:26:76:c1:ab:55:78:94:6f:7e:77:74:
92:2f:5c:60:b1:e2:fc:4a:78:49:09:87:1c:1d:74:
aa:48:b3:cd:9c:64:62:7b:7f:27:6f:75:84:94:fd:
ad:20:80:65:93:e5:dd:a5:9f:6d:ba:89:a0:ef:3d:
1e:43:5c:00:ef:a6:33:da:08:4c:3d:39:3d:ae:8f:
fd:b4:fc:5c:a7:89:8c:05:69:c2:ff:e5:0c:92:d9:
14:87:e4:83:cf:25:9f:5b:bb:ea:7b:15:b5:19:fc:
ae:dc:fb:ad:7b:3a:d0:7a:11:48:72:a9:44:e4:9f:
4d:3e:13:b1:af:11:78:e9:bf:dd:33:5e:fd:f4:94:
da:8f:4a:40:ac:3f:5a:61:f0:aa:a8:16:7b:c8:cc:
19:aa:e4:45:6e:93:ac:05:eb:56:a2:5c:47:c6:92:
6c:ac:50:52:16:6d:ac:fa:79:54:3a:60:74:bd:a1:
55:d1:5f:32:90:5a:19:c2:89:ea:d4:80:1d:36:33:
a7:d9:d0:13:55:e0:f5:23:e7:07:79:5a:67:9c:ef:
d4:cb:b3:06:7d:b1:b9:74:85:7a:11:75:45:7a:c5:
93:c6:ef:7e:7e:44:36:db:27:13:fa:d4:57:2c:c4:
a6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D1:B5:78:9A:BC:59:CF:7D:45:C2:1F:62:9C:1C:51:C2:A3:A9:72
X509v3 Authority Key Identifier:
keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:11:58:8d:52:c7:cf:e3:64:5f:6b:de:24:73:aa:96:3b:f5:
f0:fc:61:ac:00:81:c9:0f:28:7b:39:51:76:38:d4:6c:70:5e:
52:ba:1a:bd:7b:f9:5b:95:6e:c6:4e:45:5e:99:48:f6:04:4f:
85:f2:b5:ee:ea:2c:51:55:ab:c6:2d:e5:24:16:b8:45:71:6e:
b6:74:5a:4b:ab:b0:d3:42:2e:b4:14:69:be:52:5d:e3:80:21:
6d:3f:29:b6:89:3b:77:4a:43:04:18:e2:eb:7b:a8:f9:5f:0e:
25:ad:1f:ca:b4:16:0c:1a:53:ff:7b:d1:8c:7a:d7:cf:c2:84:
27:cd:4e:3f:ab:27:61:43:35:e3:2a:8b:06:15:4f:ed:0a:5a:
96:37:d3:b3:be:c2:d0:b8:3a:6d:10:ea:e8:a7:bb:06:90:14:
06:9e:9a:f1:94:08:a4:f3:74:fc:58:90:40:f7:a8:d4:5c:2e:
c3:11:da:01:ea:79:ff:b5:ef:a6:76:b2:d4:b8:b6:76:2a:23:
f9:20:e2:52:34:af:de:b6:6e:44:58:30:c0:e9:91:94:47:56:
bb:e8:52:fd:72:4c:4c:24:7a:9c:ac:34:01:f9:c7:49:4f:f2:
d9:01:f0:e8:16:6a:71:ba:bd:29:42:db:36:25:26:88:69:35:
fc:53:03:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:32 2026 by rpki-client