
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
File: 1N8l4OzS44CPaHDuVvcPJVgYkz4.mft (raw, json)
Hash identifier: i8+H4Lt+a4pX9c3owGKnHzRCjIrEfXAN0RTpDG3aOKE=
Subject key identifier: 5F:2B:0F:E8:B8:FE:F2:A7:95:A8:46:F0:64:F3:7D:36:5D:CE:F3:A8
Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
Certificate issuer: /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Certificate serial: 0187
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
Manifest number: 0180
Signing time: Mon 27 Jul 2026 06:26:11 +0000
Manifest this update: Mon 27 Jul 2026 06:26:11 +0000
Manifest next update: Mon 03 Aug 2026 06:26:11 +0000
Files and hashes: 1: 1N8l4OzS44CPaHDuVvcPJVgYkz4.crl (hash: 11O1YpjIbzzuIXm5bQ0BVjeZ98MuKM39MGxcwiKdiy4=)
2: 5415D510C68E11F0BC83973CC4F9AE02.roa (hash: PhRLsqDQKZKtbRG6RFHUAVfVtgK8nsse16kNHaAg5Hk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl
rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D260A, serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Validity
Not Before: Jul 27 06:26:11 2026 GMT
Not After : Aug 3 06:26:11 2026 GMT
Subject: CN=6a66fa03-cb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:fc:d4:30:83:5a:60:48:b6:7b:8e:f6:83:
1d:58:0c:23:0d:bf:e6:81:c6:fd:de:71:a5:45:3e:
6d:0c:6d:c2:30:fb:c7:69:8e:58:6f:7c:e6:7e:65:
40:34:d8:c2:85:e7:3b:84:97:5e:b2:4e:75:3c:d5:
6c:65:9f:5b:01:b8:77:ed:91:b6:7e:2a:72:ae:3c:
29:63:dc:05:3b:6a:05:40:f2:25:3b:de:c4:7f:c3:
c6:98:5c:fe:cd:ff:c9:13:1e:46:3f:7f:af:bc:b7:
1b:71:10:bb:14:d8:0b:52:ff:64:a2:34:ea:19:ac:
b2:82:74:70:22:4b:f9:8e:0c:79:16:27:a7:c7:3e:
38:61:ee:0f:dc:fb:bd:cb:ee:bf:af:4c:a2:7e:fd:
c9:8a:54:c7:6f:e5:19:c0:3d:4c:4e:5d:c4:60:fd:
d4:18:95:57:b5:4e:42:f7:7b:f3:8c:a0:c2:e5:c0:
2a:54:60:e0:9b:bf:59:6d:2b:4e:3d:12:b4:92:d8:
43:15:41:03:38:71:16:63:fb:d0:c1:46:f5:ab:d0:
d2:d7:a4:1e:14:06:0d:ae:3f:1e:75:5a:e6:c8:8d:
b1:bd:fa:dc:7b:90:93:d7:93:b6:b1:be:a2:30:bc:
0c:d5:ae:47:80:f2:6b:4d:cd:b2:1e:47:48:68:6d:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2B:0F:E8:B8:FE:F2:A7:95:A8:46:F0:64:F3:7D:36:5D:CE:F3:A8
X509v3 Authority Key Identifier:
keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:66:74:31:c9:e0:90:c7:94:81:72:31:c2:3b:8e:06:63:97:
c6:50:b1:47:a9:cb:09:23:39:ee:d1:4a:a9:9c:63:96:6d:55:
b4:cd:46:07:07:51:04:4f:db:b5:34:6f:b9:19:c6:ad:75:4f:
02:a0:c4:7a:0e:a2:23:7c:02:e4:2e:33:bc:3a:9e:1e:cd:01:
9c:3e:e6:e9:02:df:fa:d8:89:70:9c:bd:a3:80:49:9e:5f:01:
21:6b:53:39:29:1c:da:45:ae:62:22:61:fe:3f:79:d0:ef:d6:
f7:df:d6:f7:86:da:3a:dc:e1:3f:78:fc:1f:59:12:3e:b0:a1:
ac:58:d4:67:58:62:d9:e3:93:d9:f3:d2:85:7e:30:f2:97:23:
00:e3:32:2c:21:de:a3:09:9e:06:ee:f4:de:f0:0d:f1:f2:c0:
ad:b8:7f:ef:c1:82:36:63:52:0f:b4:21:55:21:b4:e3:3c:9a:
12:88:9a:37:12:40:3a:26:2b:ed:93:e9:84:8e:94:32:3c:39:
e1:0b:fe:a4:1c:05:7b:f1:6a:00:d6:3c:98:24:68:49:7f:3a:
80:3d:34:f2:f4:20:04:44:d0:71:f6:b4:1e:32:b5:53:00:79:
2e:11:7a:f9:98:f1:cd:0e:86:76:db:49:46:8f:87:7b:22:22:
d7:7b:25:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:20:45 2026 by rpki-client