
$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
File: bXwian3LhfL0kha367ANXwOmBcM.mft (raw, json)
Hash identifier: 12/wXsMqe+Qhib0uw2SgDYn2K0EZEP0AR7Py3nn6F0Y=
Subject key identifier: 95:D6:A0:88:C1:74:B0:C2:6B:4B:C9:1A:2F:40:E5:B5:E9:DE:D0:EE
Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Certificate serial: 1426
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
Manifest number: 13F7
Signing time: Sun 01 Mar 2026 22:34:17 +0000
Manifest this update: Sun 01 Mar 2026 22:34:16 +0000
Manifest next update: Sun 08 Mar 2026 22:34:16 +0000
Files and hashes: 1: bXwian3LhfL0kha367ANXwOmBcM.crl (hash: 1aO9628ETy+XusyePOacE/WOLY9bsvOFFWqeb3vShHM=)
2: 3DC8B712E14411EFBECFB90BC4F9AE02.roa (hash: /opDjyqnkzPqfLmMUvw/7EQ9PTKNpIy/7L1DfTTvO0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5158 (0x1426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91809AD, serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Validity
Not Before: Mar 1 22:34:16 2026 GMT
Not After : Mar 8 22:34:16 2026 GMT
Subject: CN=69a4bee8-f744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:95:90:5d:77:b9:f6:a0:5f:a5:8d:90:6f:
b7:c0:7e:fb:b4:cc:73:9a:6e:2b:92:9f:a6:90:2d:
a6:ad:0e:b9:69:7f:7d:8c:1b:c0:5a:49:36:c3:24:
52:97:bf:a8:fc:1a:c9:76:9a:13:f2:9d:7f:63:a2:
da:ff:e4:b4:5c:a8:6f:32:c9:29:49:61:fd:08:49:
c2:1b:1a:6e:46:f6:b7:47:b7:02:1f:6c:84:db:4f:
4d:c7:c8:c9:ee:e0:bc:94:2e:ca:9d:ff:cf:1d:b8:
1a:5b:92:d6:77:09:04:0a:91:17:75:d5:03:4c:81:
2d:0b:a8:23:81:e5:fa:dc:af:29:f3:19:46:2a:fd:
d5:bd:3b:43:67:9f:bb:aa:70:2a:42:7a:8b:a0:af:
0e:96:93:fa:9a:7f:5f:b2:02:08:79:03:c8:ff:33:
54:6c:82:a1:db:83:ba:ee:92:b9:db:6c:5a:a5:23:
5c:a5:3f:5b:7a:9f:8c:d5:b5:18:7c:f7:41:3c:cb:
55:4b:97:12:17:b2:0d:0c:3f:de:53:a6:d0:92:ab:
8e:d5:6b:49:d2:48:ad:b3:dd:af:ea:e3:e3:1b:91:
8e:c0:2c:44:8c:f7:f6:e6:16:e3:9c:36:9c:6b:81:
18:7b:a9:83:d2:b3:5c:9a:46:63:a4:8b:87:c5:4e:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D6:A0:88:C1:74:B0:C2:6B:4B:C9:1A:2F:40:E5:B5:E9:DE:D0:EE
X509v3 Authority Key Identifier:
keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:89:12:24:9e:99:72:26:ed:28:6c:d5:5b:ca:3f:4b:1d:1c:
16:8c:e9:3e:e1:f3:2b:e2:05:e6:be:bc:76:1a:52:bf:c1:8d:
79:e6:53:0f:3f:3c:04:fe:78:a6:b6:a9:d3:f4:15:a6:78:70:
26:00:0b:9f:91:98:67:07:55:53:8e:bc:5b:be:95:af:1e:e3:
64:89:b9:09:e7:d7:aa:ce:9c:fc:75:5c:47:1c:28:c9:ff:dc:
22:76:f9:36:b5:bb:f6:21:ac:2b:97:ed:7e:f1:1b:69:cb:42:
ea:f8:a7:5f:bc:e5:15:60:a5:f5:37:48:3b:d0:1b:28:a8:80:
19:2e:25:2d:d5:46:3a:2f:c5:c0:3e:53:70:7a:79:a0:f5:87:
f4:b0:0a:af:6b:1d:80:e1:fe:ef:8d:02:4c:58:5d:cf:71:0b:
c2:6d:c7:7f:66:f0:fe:e1:f0:eb:e6:5b:c3:aa:dd:0f:7a:e3:
ec:0e:8f:ab:bc:30:5b:5c:df:99:23:55:41:7b:1c:19:4e:99:
e2:b4:16:fb:6d:90:3a:60:98:bc:fa:d7:03:62:42:f8:91:a5:
b0:1b:11:d3:13:24:2e:6f:f2:8d:32:25:cb:bb:7a:cb:6d:e8:
57:4e:70:4e:04:77:56:b0:54:09:55:a3:57:e6:a8:b8:d2:7d:
a1:f3:df:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:35:15 2026 by rpki-client