
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
File: 1cNfp3myIZlgnD6gpTHFoNMyrQE.mft (raw, json)
Hash identifier: xg4pkm5oAYBYe7pG+nPEF+XkWbx0XH9ggng0KAqC1x8=
Subject key identifier: 26:6F:5F:4C:68:34:EA:6B:62:5D:A0:EF:6A:7E:5B:09:6A:6A:18:DF
Authority key identifier: D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01
Certificate issuer: /CN=A912A8BC/serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01
Certificate serial: 0236
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
Manifest number: 0230
Signing time: Fri 17 Apr 2026 02:24:03 +0000
Manifest this update: Fri 17 Apr 2026 02:24:02 +0000
Manifest next update: Fri 24 Apr 2026 02:24:02 +0000
Files and hashes: 1: 1cNfp3myIZlgnD6gpTHFoNMyrQE.crl (hash: 2xBXidR92ENBJ8zcgg/ciWBoYsMSArfi5ijP1j6vgh8=)
2: 4D962E8AE65111ED90E5833EC4F9AE02.roa (hash: ozB4qSn60KTh14UkkZIERrYPZDHp9uoJD36BdQCwa/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl
rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 566 (0x236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A8BC, serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01
Validity
Not Before: Apr 17 02:24:02 2026 GMT
Not After : Apr 24 02:24:02 2026 GMT
Subject: CN=69e199c2-1166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:56:e4:d4:d9:1d:f1:64:7f:b2:3d:71:a6:9e:
f5:5f:3f:cf:2b:60:cc:c7:e2:b7:88:31:3d:9c:21:
6a:a1:78:84:56:3e:c8:ec:bf:36:26:65:b8:a6:3a:
a0:39:d3:17:cd:be:07:87:33:22:cd:f4:3c:e5:c9:
4e:8e:af:92:d1:fa:9e:50:65:c2:6e:3e:4d:9c:29:
dd:90:01:2b:d1:c4:98:6f:b6:5d:ef:b1:3d:17:6c:
eb:2c:5d:2f:bf:24:5e:d6:f8:a5:cf:a3:f3:32:e6:
24:13:db:be:14:09:14:21:9b:c8:7f:3a:36:47:f0:
78:81:ad:c5:1b:49:02:86:72:b3:21:49:7a:9d:8d:
59:37:5e:48:32:0d:9d:08:a7:34:5c:1f:00:f1:ea:
85:8d:70:4c:f1:5d:67:8b:88:3c:85:c7:0c:2c:50:
0c:ab:3c:67:2f:b2:bd:4d:fe:76:9b:c4:43:6e:d7:
b8:4c:d2:89:05:a4:4c:37:09:40:8e:32:bb:ce:11:
5a:e7:0d:f1:8f:08:fc:ef:ce:4d:50:73:5b:ab:b4:
7b:0f:d1:96:09:a5:38:a2:4b:bc:85:06:99:e5:19:
26:5d:0f:86:f5:e4:61:b8:2a:d1:55:50:58:e5:94:
1e:3b:2d:f1:22:fc:eb:29:3f:4c:96:b7:98:c0:2b:
25:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6F:5F:4C:68:34:EA:6B:62:5D:A0:EF:6A:7E:5B:09:6A:6A:18:DF
X509v3 Authority Key Identifier:
keyid:D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:cd:30:94:d0:39:a2:cb:ba:b0:41:e4:65:96:0e:66:13:ab:
36:0c:ae:55:ec:28:be:4e:04:b2:64:84:4b:31:15:59:a6:70:
2a:55:b7:ec:7b:ca:58:c1:c6:de:e4:6f:4c:c8:67:7e:c5:41:
6e:1d:e1:56:fc:97:60:66:01:a9:70:0b:90:69:82:42:5f:06:
8b:f3:40:0e:18:06:20:4f:d7:6f:84:d5:59:65:84:88:02:2e:
2f:7b:2b:8c:3c:44:4c:0b:42:12:5e:60:e5:35:4b:f5:ad:e6:
22:be:04:3c:34:78:01:fb:3d:d3:67:6c:da:88:f0:03:4c:66:
5b:71:71:88:f0:3d:11:97:b0:6e:f8:d3:2c:c0:97:ad:e1:c7:
9d:8e:e2:e3:ff:6b:38:90:86:e1:da:05:cf:eb:f0:99:eb:61:
10:44:36:da:57:6f:59:8c:06:64:31:d1:7a:b6:c1:c0:11:2c:
1d:6c:3f:0a:66:2e:08:4c:76:e5:1c:89:ab:29:e4:0f:65:cc:
89:af:1a:8e:d5:f2:86:12:10:d9:de:22:9c:e7:83:ae:da:ce:
b5:e6:7b:23:7e:59:7c:4d:d4:48:a6:42:af:37:47:ed:1a:a2:
b9:96:2f:35:43:80:65:a1:c0:b8:ba:c2:66:ce:eb:b9:c2:d9:
93:85:61:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:40 2026 by rpki-client