
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft
File: 1RZ7lweHQQlX4l2fh1CFYPAFd24.mft (raw, json)
Hash identifier: ygvGziW9ljzbYv+JnJsoID2N4+qIZDOlFTM4WjkoVrM=
Subject key identifier: 6D:8A:4C:F5:8A:B5:B6:AB:82:7C:BD:EC:83:2C:9C:0D:A3:18:9C:5F
Authority key identifier: D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E
Certificate issuer: /CN=A91B9011/serialNumber=D5167B970787410957E25D9F87508560F005776E
Certificate serial: 0664
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft
Manifest number: 065D
Signing time: Thu 16 Apr 2026 22:33:17 +0000
Manifest this update: Thu 16 Apr 2026 22:33:16 +0000
Manifest next update: Thu 23 Apr 2026 22:33:16 +0000
Files and hashes: 1: 1RZ7lweHQQlX4l2fh1CFYPAFd24.crl (hash: sSH1iHL3APbwJRaRDMDFFqrUbjfufwChGnvCU+9f5HQ=)
2: 438893AC55BE11EDBDE51983C4F9AE02.roa (hash: gL7cp7BTVKF8NZn2TWA67vSTXMDPVWx2RqBEPS0dmPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl
rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1636 (0x664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9011, serialNumber=D5167B970787410957E25D9F87508560F005776E
Validity
Not Before: Apr 16 22:33:16 2026 GMT
Not After : Apr 23 22:33:16 2026 GMT
Subject: CN=69e163ad-ab37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:06:91:af:d9:2f:20:32:ae:86:ca:5c:f0:2f:
2f:19:1b:a6:c2:15:0e:df:01:10:ea:9e:b4:67:3a:
5e:54:90:85:fa:b9:5e:a8:4f:66:eb:eb:be:bf:5e:
05:e7:43:74:df:4b:2d:b4:f0:5a:b3:b4:cd:34:6e:
86:9d:e6:af:ad:85:42:70:bb:ed:c1:3d:42:37:c6:
32:92:bf:a6:bb:41:55:9f:0d:0c:64:48:b5:73:53:
22:3f:80:50:4d:62:7d:64:ef:1b:2f:f0:30:f6:7b:
c5:f7:5a:b1:a9:85:86:1d:ed:ea:7f:f7:23:00:cc:
31:5b:7e:88:e3:2d:88:ec:13:4c:51:5d:73:be:cf:
ec:4b:12:fe:ee:b3:cc:ad:f3:d0:13:33:4a:bc:0c:
48:25:4b:f5:dd:27:b5:39:18:2d:85:2b:18:6f:a0:
b9:9d:74:1d:1f:31:ce:ad:10:ec:c9:06:c5:fb:e2:
31:d0:07:fc:a3:5b:24:87:87:9c:1c:1c:0c:8e:f4:
69:cd:4c:41:12:f5:37:3e:3c:4f:50:11:f5:65:c5:
ea:98:80:bb:d8:10:6d:d8:a8:8e:a3:34:8c:09:61:
f7:5e:c8:f4:c8:93:1c:9c:dd:a7:37:63:cf:45:67:
fc:bf:eb:7f:a8:40:d1:cd:cd:64:68:38:52:e3:62:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8A:4C:F5:8A:B5:B6:AB:82:7C:BD:EC:83:2C:9C:0D:A3:18:9C:5F
X509v3 Authority Key Identifier:
keyid:D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:cb:fc:0a:6c:11:c0:ce:af:d7:c3:5d:a7:ee:e9:43:87:bc:
d7:ec:48:cb:bf:4d:e3:f5:ed:6f:78:07:64:03:71:f6:d1:6f:
cc:dc:69:a4:86:00:79:56:d5:41:bc:89:f8:f1:b3:f7:ce:a8:
08:a5:87:02:f8:c0:00:33:1f:35:be:b4:f7:05:ed:63:fa:81:
5e:93:d2:9a:3c:7f:41:47:43:62:19:24:2e:f2:af:8c:7b:c2:
52:ef:86:d6:b5:84:6e:52:26:dc:e4:3f:43:76:43:4b:c9:09:
6b:2a:24:23:d4:84:bb:9c:2e:45:8e:fc:b1:5c:b9:95:72:7f:
0c:12:7a:67:83:31:b8:c4:d8:7d:a0:b0:0f:b1:21:fb:31:ff:
eb:ab:34:a0:c5:23:ef:e8:1e:7a:d3:a6:05:25:4d:cf:57:1d:
7c:b0:cc:37:1a:28:ff:80:4c:fc:08:4d:56:6a:fd:96:38:9c:
e5:4c:f1:d4:01:bc:19:79:08:b9:a1:e8:fc:62:85:a1:66:af:
a8:d6:f0:ba:4a:29:ba:04:08:56:e9:b5:04:a9:b9:91:4a:f8:
4e:d7:c3:1d:af:11:99:ca:03:13:0c:f1:b4:7c:db:96:8f:67:
b5:8c:4d:4d:c0:b3:4c:c8:9f:02:f4:fc:61:d3:37:0a:e3:70:
3f:3e:b1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:45:34 2026 by rpki-client