
$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
File: 1bTWxIC76WuryHIkhQJdTEX-x4o.mft (raw, json)
Hash identifier: Svsv1eVc3BQnq5O8jK+hp2lPSwI6mOLkOUwkssWgCuM=
Subject key identifier: 36:21:9E:66:00:1E:D7:B1:DD:55:D8:AC:1C:C6:F8:84:32:68:74:B3
Authority key identifier: D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A
Certificate issuer: /CN=A91907D3/serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A
Certificate serial: CA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
Manifest number: C2
Signing time: Mon 27 Jul 2026 09:09:47 +0000
Manifest this update: Mon 27 Jul 2026 09:09:46 +0000
Manifest next update: Mon 03 Aug 2026 09:09:46 +0000
Files and hashes: 1: 1bTWxIC76WuryHIkhQJdTEX-x4o.crl (hash: ef/2oveALHWA8wq/lgHkEiksDUvtECLLetOIx8ufKo4=)
2: 38361A086DD311F08BB89272C4F9AE02.roa (hash: uh6KJ/OW/GxbSk2l8pUK2EK9DN4vYvajaw+WfmQZPV4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl
rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:09:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91907D3, serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A
Validity
Not Before: Jul 27 09:09:46 2026 GMT
Not After : Aug 3 09:09:46 2026 GMT
Subject: CN=6a67205b-7bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:d1:82:b9:e4:1f:63:42:af:62:90:de:13:
2c:ed:03:ba:1f:5a:b9:8d:18:59:a6:0e:39:f8:bc:
c5:e4:f5:a2:18:50:44:50:4e:11:d9:1c:2a:13:22:
cc:ee:0e:db:fa:66:74:c9:9d:fb:4f:72:54:b9:4e:
c7:19:e8:c0:c3:b7:12:68:c1:c6:04:01:92:33:87:
9b:a6:b0:41:51:96:d8:4a:5d:79:6b:ec:7c:19:c2:
c7:7f:ba:6d:83:f6:90:af:a1:ad:49:1e:ab:5e:0d:
81:34:73:cf:28:0d:91:a0:da:ac:b8:db:0c:51:94:
53:5d:e9:85:fa:34:fc:e9:92:fa:c4:e7:a1:d2:b5:
8e:11:a4:69:5e:0b:ce:c9:10:16:47:29:f9:e3:f3:
d0:ce:5e:5e:e4:27:06:4b:93:f7:9d:eb:38:6e:26:
03:4a:4b:96:0c:24:c1:43:78:ae:0f:a3:0f:74:93:
f5:45:e9:bc:87:ab:07:9b:33:f0:9f:b8:af:0a:a5:
46:bc:12:a9:71:47:10:1c:b8:41:22:6f:47:30:82:
b8:cc:fb:fb:dc:b4:a6:e3:12:43:86:db:bd:c6:48:
b0:f7:87:d2:d6:01:a7:e9:e9:13:a3:ee:81:df:99:
11:d4:bf:40:f9:41:5d:e1:a8:5c:a6:74:14:ca:d8:
b4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:21:9E:66:00:1E:D7:B1:DD:55:D8:AC:1C:C6:F8:84:32:68:74:B3
X509v3 Authority Key Identifier:
keyid:D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:bb:1a:d5:2f:f7:28:5b:9d:f7:00:0e:fc:18:c8:75:67:66:
12:10:7b:a0:1a:07:f5:2b:ae:fb:b4:74:04:a2:6a:a7:97:41:
72:3d:79:d5:4d:44:e4:4b:5e:2e:b2:d2:9d:68:68:a4:16:50:
e8:ee:54:76:61:12:40:54:a2:09:78:9c:4e:09:86:a1:3b:3d:
24:51:8c:3b:5a:45:b2:15:d9:af:c9:5b:c8:35:c8:ec:57:69:
b5:ea:47:a2:3a:7c:12:67:49:f9:23:b5:27:17:ae:fc:5a:38:
db:a4:e7:f8:25:cb:d4:9f:82:d6:b5:7a:8e:50:64:ac:09:1b:
cf:5f:27:35:46:e0:d2:de:2c:5c:d7:66:94:64:0a:49:5f:f4:
fd:28:1b:8d:99:01:cc:59:3a:c4:38:5c:ce:84:ed:4b:9e:09:
d7:a2:1c:db:d6:fd:6b:63:05:9e:d5:2e:29:9b:40:e0:fc:5e:
c8:be:d1:bf:c8:ad:bf:f0:40:66:90:80:5a:3b:23:bf:64:c8:
8a:2c:62:37:df:a2:93:ce:8c:ef:89:aa:17:96:56:51:2f:5d:
13:d4:51:9d:f0:11:d3:b2:1b:fc:7e:75:7b:0f:89:f3:78:34:
78:4b:1a:17:99:d6:20:34:78:a0:5f:ef:0c:db:33:40:24:33:
b2:4e:57:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:32:00 2026 by rpki-client