
$ rpki-client -vvf rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
File: bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft (raw, json)
Hash identifier: GZwFLT7C9vh7O3SxVAnbPg6aS7OHKjhg0vRRVYkMLjo=
Subject key identifier: 51:4F:A4:05:4C:EF:4E:04:AB:79:7E:C6:26:19:03:B1:DA:A4:93:3E
Authority key identifier: 6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54
Certificate issuer: /CN=A91626D2/serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54
Certificate serial: 01AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
Manifest number: 01A3
Signing time: Wed 29 Jul 2026 05:26:52 +0000
Manifest this update: Wed 29 Jul 2026 05:26:51 +0000
Manifest next update: Wed 05 Aug 2026 05:26:51 +0000
Files and hashes: 1: bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl (hash: E0bwfLLptqqygHPwR5pkSIoRY5zbIaUE5IAOHFw86Vs=)
2: 8093CCBA13F611EF8ED7D71EC4F9AE02.roa (hash: xPyb9jdVPxFNqu7DjwvZN/gxmMuIyOp+jROsuWdv+So=)
3: B88A958007B611F1BF9DF7EA143D8C67.roa (hash: EzgQAPl/vUlyh5AjsIyBAeaJMqrmt2E1TV7jxVlr6ZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl
rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 05:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91626D2, serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54
Validity
Not Before: Jul 29 05:26:51 2026 GMT
Not After : Aug 5 05:26:51 2026 GMT
Subject: CN=6a698f1b-4d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2e:7f:9f:3f:90:e6:64:54:9a:89:e4:8b:fd:
b7:52:a6:82:8e:aa:06:90:7e:c0:c3:e7:4d:e4:19:
6a:94:2e:61:66:c3:b7:72:29:84:10:ff:11:79:a4:
d8:97:89:f7:f0:0e:46:dc:1f:29:3b:50:01:3d:39:
e0:94:38:e7:72:30:a0:87:29:32:47:16:0c:4d:63:
30:ca:ff:9e:77:e6:64:5f:ac:7f:0f:c2:f1:c8:a1:
e8:38:39:f3:08:25:af:8a:9f:70:3c:58:3c:24:93:
54:e9:7c:da:d3:87:69:5c:27:e5:ea:85:46:69:c6:
1c:7d:11:66:cd:af:9b:84:57:66:e8:e7:ac:1b:f4:
45:76:10:3a:a2:57:01:f9:85:31:de:00:da:16:d9:
ab:06:9e:c3:5a:d0:55:1e:b2:f3:eb:fd:e6:d7:a2:
2f:ad:d5:f9:9a:1d:0d:72:b4:8d:58:94:a6:83:d1:
b4:41:e7:7c:f7:4e:e1:2e:5e:18:37:af:f3:5e:aa:
ee:6e:07:44:1b:fc:b9:7e:03:eb:d2:8a:c3:ee:eb:
98:b0:13:25:3c:ff:62:53:22:c0:ee:17:05:b9:56:
11:e4:c6:de:64:f2:7f:41:6a:44:58:87:0f:09:de:
5e:a6:d7:f2:62:d2:bf:1e:09:79:90:aa:aa:03:69:
29:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4F:A4:05:4C:EF:4E:04:AB:79:7E:C6:26:19:03:B1:DA:A4:93:3E
X509v3 Authority Key Identifier:
keyid:6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a6:4e:da:ba:56:77:b0:f0:eb:ec:87:97:77:a1:79:3c:fd:
48:71:73:5e:8f:c7:23:f8:d2:48:c4:03:c6:b1:6d:4e:05:99:
1a:3a:8e:19:ba:37:4e:3e:b9:32:59:19:e9:48:66:5b:f6:43:
9c:44:4c:dd:e5:cd:bd:bb:30:46:4e:9a:58:81:1f:3a:83:98:
c4:8c:39:c6:48:6d:9f:2c:7a:fa:0f:62:4b:be:a9:9a:6e:62:
c9:41:71:eb:ad:fb:2f:23:e4:0e:96:eb:e0:68:77:67:72:c6:
e3:5c:df:96:61:10:31:53:f1:33:19:85:5f:61:7c:c0:f2:86:
e8:c6:d8:b3:f2:97:a3:bb:ed:74:81:f5:f2:79:4d:f9:c9:8f:
b8:da:b5:ac:2b:65:4a:37:cf:ee:a7:4c:85:5c:fc:a9:0b:d0:
eb:61:3a:9e:42:c1:33:0c:f9:3b:35:cc:d2:f7:e4:b7:e3:2e:
49:c3:b8:10:a9:cb:5b:12:ff:a2:1e:4f:c5:1d:43:57:86:33:
28:a8:bd:86:e2:88:34:e2:33:9f:78:b7:d0:a3:a6:ed:ad:c1:
03:74:0e:e4:b1:66:80:f8:e5:cb:ff:23:14:99:79:16:ad:99:
f9:ca:8b:d7:b2:d0:ef:56:f2:fa:70:be:98:76:ed:66:4f:a6:
b3:96:02:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:42:32 2026 by rpki-client