
$ rpki-client -vvf rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
File: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft (raw, json)
Hash identifier: raOJEau3ONguURgWu+ZREgLZVk50do9FsLm4kFIfeMA=
Subject key identifier: AE:90:1A:04:C9:4F:E8:B4:A4:DD:DE:72:E1:EC:E9:83:B0:0C:62:29
Authority key identifier: D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D
Certificate issuer: /CN=A91174ED/serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
Manifest number: 80
Signing time: Sun 01 Mar 2026 23:05:10 +0000
Manifest this update: Sun 01 Mar 2026 23:05:10 +0000
Manifest next update: Sun 08 Mar 2026 23:05:10 +0000
Files and hashes: 1: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl (hash: 9y1JgU3E0CK+nEUjd/eI6X585byKYpbZS1YharragVQ=)
2: E7BD97EE5D9311F0AFF08443C4F9AE02.roa (hash: wMqZyUHwFnm2prR30bhRvxTQaRsk2FAxurhzAGgKS+I=)
3: FE892768620711F0BE75F534C4F9AE02.roa (hash: w6R9tkWMN6zGFTVsCrdtlZOXuO5ohHrK0PqrImTn4O4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl
rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91174ED, serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D
Validity
Not Before: Mar 1 23:05:10 2026 GMT
Not After : Mar 8 23:05:10 2026 GMT
Subject: CN=69a4c626-b095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:46:96:8e:ae:22:92:8c:29:3e:c6:37:1a:
fe:bc:5a:e9:5e:6b:f7:48:24:8c:8a:cd:96:6b:bd:
cf:0e:83:f2:25:e1:b5:bf:50:8d:3c:0b:8b:53:09:
ed:56:b6:dc:22:9e:50:35:ca:a0:dd:d2:eb:10:ae:
e8:21:c0:1f:d0:61:cc:4a:d6:42:ae:09:a0:71:7d:
60:32:28:de:66:7c:08:33:7d:ae:8d:bb:31:db:e9:
44:c4:c2:ba:56:96:dc:12:c8:f9:6e:fb:47:6f:3d:
52:a2:88:0d:35:95:7d:92:20:28:45:86:03:56:ce:
c8:2f:42:85:12:e3:c4:02:0b:54:6c:16:86:4c:06:
27:de:f1:dd:5f:4b:f7:e5:8d:d3:da:3b:78:5b:f4:
ee:d5:6e:b3:ff:55:08:95:c1:fc:0b:4f:71:a2:64:
ee:ef:48:26:71:52:68:9a:9d:39:80:23:42:87:28:
23:bc:84:a9:59:62:33:75:f5:41:d3:72:6e:6d:9b:
3d:02:b4:12:a6:c1:dd:f5:e8:5f:d7:ba:46:54:e3:
c3:db:2d:4c:8d:06:d2:c5:5d:97:a1:50:44:ad:9a:
d0:49:ad:1f:9f:89:fb:2a:6a:5c:4e:d1:9c:5d:8b:
db:00:50:75:7d:49:e6:dd:6f:08:2f:8a:17:19:41:
00:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:90:1A:04:C9:4F:E8:B4:A4:DD:DE:72:E1:EC:E9:83:B0:0C:62:29
X509v3 Authority Key Identifier:
keyid:D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:42:69:85:59:98:de:2d:63:46:05:3e:7f:54:17:76:39:31:
e7:44:36:22:3b:7c:ce:63:5b:40:44:3c:e1:55:0f:5f:a4:f1:
1f:93:26:3d:e0:a7:69:ad:d5:10:c8:4c:b8:f2:cd:f2:3a:e0:
da:fa:85:72:b3:e2:6f:77:66:9d:ea:e0:30:ff:26:35:60:47:
fe:f3:82:e2:f9:2c:bb:d1:14:94:c7:90:71:ba:02:6a:bb:5d:
24:80:04:7d:f2:58:72:6d:c5:b8:1e:09:0a:eb:6b:5e:23:a8:
5b:7e:09:11:ff:71:0c:51:36:a3:ad:91:40:8d:d0:6e:72:ca:
3e:c0:a5:05:0a:2f:6d:15:3a:cc:d8:fe:25:4a:8c:c9:76:06:
e8:57:38:a1:8a:e4:f2:f3:b4:be:70:a6:b1:84:f5:47:9b:b6:
ff:fa:6c:c2:04:f7:1b:66:aa:58:f7:9a:3e:53:02:6c:02:9e:
57:02:b6:f1:cd:c5:ea:d6:2d:d3:e5:35:55:0b:dd:56:6c:60:
56:77:85:68:ac:73:86:d2:a6:68:e9:74:b5:6b:d2:12:1d:19:
10:21:d3:12:87:b8:31:97:cf:0c:0d:2a:fd:8c:0a:bb:de:0f:
6b:0e:a4:d6:12:62:33:28:be:a1:d2:5b:47:d2:90:19:42:25:
9d:c1:9f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:00 2026 by rpki-client