
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
File: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft (raw, json)
Hash identifier: RUm2zVLXUDcwxKHQNTgNrsHQxtOt0znCICh9t56Lvkc=
Subject key identifier: 07:4C:2D:C5:D6:7D:79:C6:18:81:99:9B:AE:2F:0A:CA:EB:CF:74:99
Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D
Certificate issuer: /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
Certificate serial: 01CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
Manifest number: 01BF
Signing time: Fri 17 Apr 2026 03:39:24 +0000
Manifest this update: Fri 17 Apr 2026 03:39:23 +0000
Manifest next update: Fri 24 Apr 2026 03:39:23 +0000
Files and hashes: 1: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl (hash: tHR3Ds9Jx0u3fRIh17pHnt+6L2W1yssdDsMvKrbfn0Y=)
2: 134D519098B711EE99FD1F09C4F9AE02.roa (hash: TP4JixOOcg9YnuGelQlIMV1MqlMNS4cHb5eiwzX8uV8=)
3: 13E4471298B711EE99FD1F09C4F9AE02.roa (hash: CSGjDy/wdYYzGXyvOOUl98bHiR5LO+1hU3+jdzF0bhY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl
rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:39:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3526, serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
Validity
Not Before: Apr 17 03:39:23 2026 GMT
Not After : Apr 24 03:39:23 2026 GMT
Subject: CN=69e1ab6c-93ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e9:a8:af:25:89:ab:c0:fb:0d:f7:fc:5f:f2:
56:1f:3b:c5:16:76:0d:b9:ed:b5:83:8a:04:b3:19:
bf:25:30:b7:b6:0f:f7:d2:8f:3b:ed:fb:54:d6:8b:
63:d0:46:c5:e7:c2:60:29:1e:d3:01:c0:58:fc:43:
38:8f:e0:52:8e:b9:32:1d:36:3b:c9:18:00:39:b5:
f0:54:45:92:19:29:95:c2:26:b9:ac:25:24:68:17:
74:19:9d:9c:f2:a1:77:2b:d2:02:58:8b:d5:14:b7:
e6:b5:1a:ab:6e:0e:a5:af:0b:14:3e:27:72:20:b7:
3a:95:07:b0:16:4b:fb:20:ae:67:0a:f2:86:74:d5:
55:b3:5e:f7:7a:1a:64:5e:32:66:a9:78:79:8c:c8:
e6:84:ac:38:ea:46:7c:79:2b:99:b8:1b:e2:bc:93:
42:79:6a:67:b0:fd:9f:1b:1e:ef:bf:76:50:17:9e:
e1:bf:f9:b1:d0:2d:8c:d0:ee:47:11:2f:f8:67:43:
ff:2a:aa:a8:ac:19:92:7e:9c:51:78:d3:d6:ca:39:
0a:35:62:c0:fe:cb:09:14:62:ac:ea:22:21:53:13:
2d:d7:d1:7c:17:84:48:99:85:7f:b4:5b:48:b5:b4:
bb:bd:03:0a:26:44:a1:a4:ae:38:d8:94:71:cf:d8:
53:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4C:2D:C5:D6:7D:79:C6:18:81:99:9B:AE:2F:0A:CA:EB:CF:74:99
X509v3 Authority Key Identifier:
keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:a3:74:c1:08:72:c1:a8:5b:93:1c:27:3e:65:b8:c7:31:25:
31:b3:57:2b:d4:b9:c0:20:db:0a:b5:c8:96:4e:e7:4e:83:5f:
76:46:51:65:b4:52:3d:c5:f8:f9:09:98:6b:18:5d:dc:30:e9:
d8:37:60:15:a0:24:c4:fa:ca:15:61:73:32:0e:3f:9b:59:9a:
75:be:85:36:de:91:0f:81:0c:4a:fe:55:9b:6f:dd:d2:47:f8:
4d:ab:1d:03:5a:9f:32:21:89:36:96:55:3f:f0:0b:95:3e:d1:
31:92:30:7a:65:ce:9b:4a:c5:ec:a8:54:61:e7:d2:f9:c0:d4:
b7:b5:53:7e:03:fd:83:45:8a:6f:32:0b:df:69:b9:c0:17:7f:
d5:80:bb:c3:0f:30:b3:8a:25:14:c9:2c:88:91:f2:eb:01:f7:
a8:95:71:10:71:9d:81:5e:d1:c4:cb:24:f4:df:17:30:da:d7:
b0:e6:9e:07:3b:b8:30:c5:a2:99:0f:21:42:3e:0e:c8:be:c6:
45:6f:e0:94:1d:e3:e0:47:41:d5:4b:df:5c:eb:19:d2:71:a3:
f3:a1:9c:1e:dc:8c:29:46:df:a4:83:f2:4d:a7:51:cd:ed:da:
40:66:e9:09:aa:c8:09:12:3f:ad:a1:d8:aa:1c:fb:94:df:5e:
a3:40:66:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:03:36 2026 by rpki-client