
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
File: 1h14JILiVI0iXRvIiINjk97jmBI.mft (raw, json)
Hash identifier: mZN4Pei+XXbAYnw7j417qNgdLS2Rq6Hjn+RQGyC+Rcg=
Subject key identifier: A3:BF:D2:D8:BB:11:E4:49:C8:B4:C0:6D:73:E8:FC:8F:46:3E:72:06
Authority key identifier: D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12
Certificate issuer: /CN=A91F0A98/serialNumber=D61D782482E2548D225D1BC888836393DEE39812
Certificate serial: 01F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
Manifest number: 01F9
Signing time: Fri 17 Apr 2026 02:54:50 +0000
Manifest this update: Fri 17 Apr 2026 02:54:49 +0000
Manifest next update: Fri 24 Apr 2026 02:54:49 +0000
Files and hashes: 1: 1h14JILiVI0iXRvIiINjk97jmBI.crl (hash: s2alrlk12pCNefGRtCELMvair3QXbEFBNtl4smVjpd4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl
rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:54:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0A98, serialNumber=D61D782482E2548D225D1BC888836393DEE39812
Validity
Not Before: Apr 17 02:54:49 2026 GMT
Not After : Apr 24 02:54:49 2026 GMT
Subject: CN=69e1a0fa-5410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:33:bf:0c:cb:39:cc:00:fa:08:71:15:4a:
98:7a:9f:29:da:a5:fd:9d:68:9c:99:3a:66:17:cc:
bb:59:4b:c0:d0:7c:53:e2:dd:d6:9e:69:89:b6:fc:
7e:cf:c9:80:b5:43:f2:e5:cf:3d:7e:b5:74:d9:11:
6f:d6:46:e4:6f:c2:b1:bb:1a:f3:4a:5a:f8:e1:ae:
42:dc:23:e5:86:38:58:dd:9d:85:73:41:e4:b3:5a:
83:e2:fa:3b:1e:3b:d0:4d:82:9a:3f:88:f9:62:c5:
e3:28:ad:67:8d:51:0f:11:44:12:54:a8:c7:23:c3:
5f:f4:9d:67:8e:c6:75:07:81:98:97:e6:8b:c4:7e:
58:9e:a8:40:17:f2:25:d1:fb:7a:42:97:12:3c:d0:
88:55:44:9f:71:f0:b7:1e:b6:60:20:24:e3:22:9c:
5a:25:ae:50:c5:3d:60:03:45:b7:69:04:b5:ce:2c:
b6:8c:5d:b6:0a:89:13:ea:de:1d:74:6c:c1:bd:aa:
6c:7c:00:01:42:dd:2f:74:19:e9:32:e3:ca:7a:2d:
19:7d:39:ad:ba:03:37:89:fd:99:1e:e9:62:48:31:
2e:0c:9c:75:59:4c:23:67:06:bf:a1:1b:d4:60:d2:
61:d9:18:e5:0a:af:aa:0c:6a:21:22:b0:e8:98:1c:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BF:D2:D8:BB:11:E4:49:C8:B4:C0:6D:73:E8:FC:8F:46:3E:72:06
X509v3 Authority Key Identifier:
keyid:D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:50:7e:3a:ed:a5:fd:05:25:47:2f:e3:4a:2a:57:5c:dc:31:
dc:ca:27:b1:38:61:df:0a:48:26:ad:b1:e8:27:04:5f:9e:5d:
ed:1f:dd:ae:c8:42:75:6c:f6:41:b6:bc:3a:82:9a:6d:7f:19:
5e:17:dc:89:3c:13:af:4f:27:4b:59:9c:0e:e7:fc:cc:50:f5:
20:0b:c9:95:cd:58:f5:e3:6e:c0:c2:93:1a:23:45:e1:d9:cd:
9a:7f:a1:5a:33:eb:10:2c:b2:28:e6:b4:1a:3d:3a:8c:23:c0:
7d:96:51:41:ed:53:2d:55:ea:39:67:ef:e1:57:c4:b7:3a:1d:
51:b3:fe:ef:21:84:78:0f:9d:12:64:13:47:e3:15:39:48:c3:
d6:38:cf:bb:53:db:bd:81:92:d9:c4:7c:5e:9f:bb:ae:63:1f:
98:96:d0:8f:89:05:4a:59:15:e5:0a:78:f4:32:fa:15:0c:8b:
58:e0:28:99:96:74:45:e5:51:b2:85:05:07:7c:52:90:4b:f4:
7c:15:b1:7c:f2:3b:e3:2d:b6:e7:4e:96:86:27:f2:3d:3b:31:
92:3a:0c:e5:c8:94:09:f7:77:10:15:84:1e:31:03:55:a9:57:
5d:a9:83:8f:56:e1:ae:84:3f:b5:9a:8c:8d:b3:ad:e4:b4:75:
f9:80:00:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:49:22 2026 by rpki-client