
$ rpki-client -vvf rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
File: bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft (raw, json)
Hash identifier: snRKh6+FTzDLOPUO5z3+vXTAfvvRomN29vOYv6lWmdo=
Subject key identifier: AB:05:11:D1:E0:A2:D9:E9:4E:76:15:7A:25:49:51:84:96:FC:E9:4D
Authority key identifier: 6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54
Certificate issuer: /CN=A91626D2/serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54
Certificate serial: 0158
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
Manifest number: 0154
Signing time: Sun 01 Mar 2026 06:06:59 +0000
Manifest this update: Sun 01 Mar 2026 06:06:58 +0000
Manifest next update: Sun 08 Mar 2026 06:06:58 +0000
Files and hashes: 1: bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl (hash: lzz5TtRN4HWvQJzd4km5EomiqMPCO2FVKkgvqATMA3Y=)
2: 8093CCBA13F611EF8ED7D71EC4F9AE02.roa (hash: 0kvvg3VxeQsSYW2AslXzd6Nvmpy66lanlut3303hVL0=)
3: B88A958007B611F1BF9DF7EA143D8C67.roa (hash: MypZozje9jZXB1eaQ0+B7Oks+wJWUOenzt3vK3jLfu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl
rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:06:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91626D2, serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54
Validity
Not Before: Mar 1 06:06:58 2026 GMT
Not After : Mar 8 06:06:58 2026 GMT
Subject: CN=69a3d782-cc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:e1:54:b2:aa:b5:11:cd:9d:23:99:c8:ca:
d1:44:48:c2:b2:db:be:69:da:47:60:e0:c1:bc:8a:
c5:f8:e4:47:37:8a:88:5b:20:dc:8a:3a:a1:71:36:
d2:3e:07:50:38:14:af:ad:a1:fa:8e:96:82:35:8a:
44:e7:c8:60:fa:c9:6b:09:43:38:2b:5b:33:6f:de:
2f:fd:c2:c1:cb:78:11:34:a1:4e:6e:af:1a:2f:70:
b5:7a:f3:2b:56:5a:9a:8c:3d:a0:9c:e8:d4:21:88:
d1:59:f3:70:f5:9a:e9:8b:37:2f:f8:f3:3c:b7:3b:
0f:9e:4f:fd:aa:4a:c3:1c:6c:3c:60:06:fa:57:50:
2d:06:de:4c:48:9e:d9:b7:5f:15:c6:82:ef:19:c8:
95:8a:c5:b7:05:10:73:98:d6:38:b2:c4:6f:10:51:
4a:20:80:be:fc:88:6c:3e:d6:76:e8:a0:34:40:a9:
4c:66:cc:9b:63:00:f7:c1:13:26:aa:42:69:ea:1b:
f2:89:dc:fb:22:d6:cc:16:73:51:8d:7e:ea:08:92:
0e:ff:c4:fb:69:59:41:79:e3:f2:13:ad:a7:20:07:
85:eb:12:bc:d5:24:ea:80:16:e3:bc:02:de:ce:25:
f2:e5:99:e1:98:ac:48:30:1d:d8:c5:51:ab:87:64:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:05:11:D1:E0:A2:D9:E9:4E:76:15:7A:25:49:51:84:96:FC:E9:4D
X509v3 Authority Key Identifier:
keyid:6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:da:0b:90:94:f0:e0:a2:d0:a4:c9:25:d1:9e:7c:03:37:05:
cb:2c:0e:33:c6:db:f8:6f:24:4c:97:8d:8d:c8:2d:f9:28:e4:
36:b0:3b:33:55:56:7d:99:ae:e0:c0:f2:c0:77:c9:12:bc:d5:
18:d9:fa:77:b2:e7:69:09:5b:a9:7a:3a:51:a2:c6:65:ad:3d:
b2:e5:47:83:e5:55:02:4a:f2:a4:94:9d:df:d6:fd:30:34:62:
81:ba:af:9c:15:67:a3:47:05:1d:84:cd:22:11:13:9b:84:54:
b7:a4:80:80:0d:59:fb:83:17:f3:50:51:e2:7b:04:a0:27:fa:
61:ab:89:c4:08:39:57:6d:e2:ba:f8:80:bf:65:83:f8:c2:17:
83:6a:50:29:98:c6:9a:dc:15:06:9a:5b:05:32:ad:15:60:8e:
9b:d8:9b:eb:c9:ec:53:c9:df:ec:8a:e8:af:14:15:fd:02:7f:
6d:e2:12:43:4e:f8:7f:84:5c:f9:68:15:94:73:d7:07:ee:a2:
d1:e4:31:ff:9c:fd:ab:c0:2d:c9:00:1a:0d:15:9c:18:69:36:
b0:d1:dc:95:f8:92:4e:c6:ea:e3:e2:eb:44:39:61:7f:c7:d8:
0f:bb:f2:60:67:ae:8f:f0:d3:ac:46:60:a7:e0:2e:25:ed:fa:
3f:4e:b2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:12:15 2026 by rpki-client