
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
File: 1N8l4OzS44CPaHDuVvcPJVgYkz4.mft (raw, json)
Hash identifier: r767uF7s6GM4oZ5fT/Bn6rS6lIzCHTyC7l+2rLdh+KM=
Subject key identifier: A5:E8:E8:09:18:3A:F3:CB:67:1B:C5:30:DC:C9:12:28:13:E8:38:ED
Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
Certificate issuer: /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
Manifest number: 016A
Signing time: Sat 13 Jun 2026 04:50:59 +0000
Manifest this update: Sat 13 Jun 2026 04:50:59 +0000
Manifest next update: Sat 20 Jun 2026 04:50:59 +0000
Files and hashes: 1: 1N8l4OzS44CPaHDuVvcPJVgYkz4.crl (hash: VTiyP4aSvNvhkuhtcfbmSFDGsYxG6KhIdyY+m+RiV8c=)
2: 5415D510C68E11F0BC83973CC4F9AE02.roa (hash: PhRLsqDQKZKtbRG6RFHUAVfVtgK8nsse16kNHaAg5Hk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl
rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:50:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D260A, serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Validity
Not Before: Jun 13 04:50:59 2026 GMT
Not After : Jun 20 04:50:59 2026 GMT
Subject: CN=6a2ce1b3-3af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:6e:93:9b:7e:fe:bf:f3:1c:7a:30:cb:5a:
2b:c7:7d:a9:c6:82:03:9e:79:1e:c7:0f:58:60:fe:
bd:79:7e:e0:a9:e1:7d:c6:ec:e3:8b:a0:4f:32:4d:
ec:fe:7c:7a:de:4e:a7:66:17:e0:6f:c3:3e:27:35:
6f:2b:9d:91:96:53:3f:2d:df:67:5d:6b:36:58:9d:
3f:82:7f:c7:30:d8:fe:df:c0:a5:9b:33:d6:fc:49:
b6:1f:ea:ce:0f:ef:9e:e1:f7:5e:fa:47:31:1e:14:
3b:6e:73:14:1c:84:ed:9b:99:b2:6f:d1:3e:0f:15:
5c:3f:b3:f9:29:09:49:98:ae:0f:0b:52:a5:d7:53:
7c:12:ac:e8:8b:16:85:cf:bb:cd:d2:47:0e:79:a0:
75:a3:a8:02:71:cc:2c:83:75:60:71:61:3c:1c:55:
73:37:c9:ba:ea:de:74:b5:a1:29:e9:5b:bd:11:04:
6e:35:43:6f:db:35:0a:c3:68:4b:87:4b:ed:79:b2:
8e:eb:3d:08:2d:c8:7b:48:68:a2:2e:a8:a1:8a:09:
87:8e:8a:8c:46:f9:70:50:e6:12:dc:7e:c0:1e:6f:
84:ad:ef:d6:19:03:5e:a7:0e:45:7b:00:83:d2:d4:
85:c4:2d:36:fc:5d:9d:dc:95:8f:24:12:80:36:79:
48:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E8:E8:09:18:3A:F3:CB:67:1B:C5:30:DC:C9:12:28:13:E8:38:ED
X509v3 Authority Key Identifier:
keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:c6:29:9d:48:3e:27:e7:1b:8e:9b:7f:40:16:b8:d3:b8:6e:
7d:b9:e2:89:a3:48:45:a0:a2:d6:d8:5a:56:b4:2e:63:0d:95:
e3:f1:6d:c0:b0:27:20:f6:e7:70:a8:b4:a8:11:19:61:d4:3b:
e4:4b:86:6f:04:e8:25:1c:ea:73:e4:be:89:12:77:a7:93:6b:
61:f0:79:38:01:48:3c:75:3b:8d:42:36:95:bd:69:63:18:d9:
4f:ea:48:21:0c:99:ef:04:2c:7d:f1:89:98:5b:92:d9:bc:f0:
93:6b:bf:3e:d9:e6:ea:77:40:e6:d1:c7:92:50:61:96:22:3f:
b1:cc:7f:7a:6d:9b:a5:da:d2:8d:60:4b:8b:77:89:63:e9:1a:
c2:ca:96:e8:27:c3:00:cc:ff:c8:9d:ae:64:cf:d9:6c:f2:65:
b6:bc:06:b2:4a:ef:62:dd:2c:ca:11:0a:ba:b4:52:8f:d7:be:
07:65:02:34:81:84:09:d8:7b:4e:05:c0:72:05:6b:04:c3:6f:
4a:18:1f:e5:a1:64:62:bd:cb:81:b8:7f:22:57:e9:88:a3:61:
81:93:b5:31:7c:1d:45:df:8c:48:6a:cc:bc:1e:4b:1c:04:01:
7e:dd:8a:01:fb:5c:5e:64:d0:8c:e5:4f:be:88:23:3f:43:6f:
b6:fe:7c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:35:50 2026 by rpki-client