
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
File: 1N8l4OzS44CPaHDuVvcPJVgYkz4.mft (raw, json)
Hash identifier: vLWqpW/6/tbxqETH9tKx9U3QWd8wu6KHvqib9065iIg=
Subject key identifier: 92:5A:55:E9:6D:8D:4A:2E:9E:87:9F:69:50:5F:7E:E8:5F:9B:9E:BD
Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
Certificate issuer: /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Certificate serial: 0152
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
Manifest number: 014C
Signing time: Fri 17 Apr 2026 04:53:20 +0000
Manifest this update: Fri 17 Apr 2026 04:53:20 +0000
Manifest next update: Fri 24 Apr 2026 04:53:20 +0000
Files and hashes: 1: 1N8l4OzS44CPaHDuVvcPJVgYkz4.crl (hash: bC6jaxjGXK3KgK/GMqrx0vb7xCbaNf6ZgMa9wZW+71A=)
2: 5415D510C68E11F0BC83973CC4F9AE02.roa (hash: aIjDJK06Sydwpu827vCSPgKtmMJrBazpUw0z+Gr+fHs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl
rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D260A, serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Validity
Not Before: Apr 17 04:53:20 2026 GMT
Not After : Apr 24 04:53:20 2026 GMT
Subject: CN=69e1bcc0-8810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f4:53:a6:2b:c6:32:5e:aa:e5:60:d2:d2:30:
c0:5a:c9:0b:71:aa:9c:24:ca:83:b3:22:ac:0c:45:
81:c7:42:10:ca:2d:23:51:88:dd:93:f8:a0:58:f0:
d2:a1:78:e6:4d:41:e1:f8:fe:74:39:20:e0:0b:2a:
b6:fa:fe:98:ab:2c:5e:df:08:a1:d5:4f:9e:47:15:
bd:ad:a1:67:8f:01:9d:5c:7e:6a:dc:7a:a5:ac:9e:
6b:61:b2:7a:a6:eb:a0:e9:92:b7:fc:75:98:92:ce:
cf:a8:b0:e0:bc:a1:2f:4c:a4:08:91:fc:de:c2:ad:
8f:7a:b0:74:69:9e:0b:02:a8:41:91:44:d8:ed:99:
30:ba:91:0f:69:e1:a3:ee:4e:54:8d:b1:39:c3:43:
1e:c1:77:22:f8:99:5f:d7:ac:10:2c:ba:f7:5a:65:
17:a0:55:4c:01:b0:f4:99:3b:45:c0:b4:db:9e:2d:
07:78:13:40:93:08:7f:69:33:8f:67:ee:70:0c:3f:
e9:0d:d2:bd:a1:1c:ce:d9:6e:eb:54:25:e4:b9:1f:
02:66:8d:f0:4c:d4:8e:33:80:d2:9f:97:5b:b7:28:
7b:a9:64:d3:75:b6:d2:e0:75:3f:f5:f7:6e:fb:bb:
c6:2a:b5:a4:9b:c5:88:82:cb:d5:23:2c:df:1d:bf:
a7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5A:55:E9:6D:8D:4A:2E:9E:87:9F:69:50:5F:7E:E8:5F:9B:9E:BD
X509v3 Authority Key Identifier:
keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:38:8e:0a:93:b3:c6:0d:15:d0:a2:75:80:4f:a1:18:d7:bb:
1a:46:0b:ed:e1:d8:03:8e:58:92:47:3a:a6:9c:04:5a:f4:72:
f4:15:c8:48:90:f1:83:36:a7:b8:c0:08:16:2e:e6:a3:ff:cc:
d9:32:3b:ac:25:f9:94:b0:30:00:3f:61:a3:24:b6:cc:3a:11:
d7:c1:6d:59:3a:f7:af:a3:fe:76:1e:f3:ef:99:33:4d:69:77:
ee:c8:93:90:59:1d:55:ff:c8:3c:fa:71:b6:47:fb:e6:46:4b:
9d:a1:85:68:16:da:26:16:5d:73:af:0b:c3:88:b7:74:34:d8:
b3:ac:9a:91:c1:97:7f:72:c9:f1:78:1a:38:32:6e:d4:97:bd:
9b:bc:20:36:0d:88:8d:1a:73:59:53:5a:ae:12:cd:11:e2:1f:
5c:d7:71:b9:d2:fc:02:70:e4:15:13:a9:ff:cf:80:fa:fb:34:
f1:b3:35:7f:62:85:1e:76:d1:fa:4d:ae:30:f1:22:91:ab:a7:
b3:df:29:bc:ee:f5:4c:51:8d:17:0f:3b:ba:1e:a4:4a:ed:39:
22:85:7c:cf:40:91:87:f1:36:ab:f9:d7:c5:a1:2f:6f:19:b4:
b1:34:08:ba:59:c8:25:27:8b:ee:c7:52:1a:96:8d:a9:51:6e:
d6:be:f1:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI2MEExMTAvBgNVBAUTKEQ0REYyNUUwRUNEMkUzODA4RjY4NzBFRTU2RjcwRjI1
NTgxODkzM0UwHhcNMjYwNDE3MDQ1MzIwWhcNMjYwNDI0MDQ1MzIwWjAYMRYwFAYD
VQQDEw02OWUxYmNjMC04ODEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9fRTpivGMl6q5WDS0jDAWskLcaqcJMqDsyKsDEWBx0IQyi0jUYjdk/igWPDS
oXjmTUHh+P50OSDgCyq2+v6Yqyxe3wih1U+eRxW9raFnjwGdXH5q3HqlrJ5rYbJ6
puug6ZK3/HWYks7PqLDgvKEvTKQIkfzewq2PerB0aZ4LAqhBkUTY7ZkwupEPaeGj
7k5UjbE5w0MewXci+Jlf16wQLLr3WmUXoFVMAbD0mTtFwLTbni0HeBNAkwh/aTOP
Z+5wDD/pDdK9oRzO2W7rVCXkuR8CZo3wTNSOM4DSn5dbtyh7qWTTdbbS4HU/9fdu
+7vGKrWkm8WIgsvVIyzfHb+nKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJJaVelt
jUounoefaVBffuhfm569MB8GA1UdIwQYMBaAFNTfJeDs0uOAj2hw7lb3DyVYGJM+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjYwQS9CNkRDRjFEQzQ0
OTUxMUVGQTQ1OTBDM0RDNEY5QUUwMi8xTjhsNE96UzQ0Q1BhSER1VnZjUEpWZ1lr
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFOOGw0T3pTNDRDUGFIRHVWdmNQSlZnWWt6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjYwQS9CNkRDRjFEQzQ0OTUxMUVGQTQ1OTBDM0RDNEY5QUUwMi8xTjhsNE96UzQ0
Q1BhSER1VnZjUEpWZ1lrejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHTiOCpOzxg0V0KJ1gE+hGNe7GkYL7eHYA45Ykkc6ppwEWvRy9BXISJDxgzan
uMAIFi7mo//M2TI7rCX5lLAwAD9hoyS2zDoR18FtWTr3r6P+dh7z75kzTWl37siT
kFkdVf/IPPpxtkf75kZLnaGFaBbaJhZdc68Lw4i3dDTYs6yakcGXf3LJ8XgaODJu
1Je9m7wgNg2IjRpzWVNarhLNEeIfXNdxudL8AnDkFROp/8+A+vs08bM1f2KFHnbR
+k2uMPEikauns98pvO71TFGNFw87uh6kSu05IoV8z0CRh/E2q/nXxaEvbxm0sTQI
ulnIJSeL7sdSGpaNqVFu1r7xmg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:17:57 2026 by rpki-client