
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
File: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft (raw, json)
Hash identifier: LY3Lh2Jw4IDSMZ5rvwVviFUf5icEZ3G9DZfLOinNc24=
Subject key identifier: AE:34:5E:BE:C4:09:74:38:47:C6:18:13:5A:06:01:77:56:B6:2F:16
Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D
Certificate issuer: /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
Certificate serial: 01AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
Manifest number: 01A5
Signing time: Sun 01 Mar 2026 05:00:28 +0000
Manifest this update: Sun 01 Mar 2026 05:00:27 +0000
Manifest next update: Sun 08 Mar 2026 05:00:27 +0000
Files and hashes: 1: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl (hash: C9wRMOZWeyMXqcuYeOQLChhkMfiPDzjGUPG79Prm9LI=)
2: 134D519098B711EE99FD1F09C4F9AE02.roa (hash: E76XAORV5ru79qm809Iipb+GZ/aZqgzSbLj/HMdntw8=)
3: 13E4471298B711EE99FD1F09C4F9AE02.roa (hash: ldg+jyQG1XLsPn0219B9bkdGrOsxkUVoi2DOn5mORcQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl
rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3526, serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
Validity
Not Before: Mar 1 05:00:27 2026 GMT
Not After : Mar 8 05:00:27 2026 GMT
Subject: CN=69a3c7eb-2895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:80:3f:05:89:6c:de:58:5f:28:4c:b7:bc:
07:28:51:e7:3d:a0:fd:7e:70:55:53:bf:8c:11:20:
46:71:f7:93:4d:46:19:50:65:12:f0:a0:e0:3f:e5:
67:c1:b8:2c:73:08:57:fa:04:b8:92:01:08:be:9b:
5f:24:43:42:3c:c9:4b:bb:ac:27:4e:b8:14:ef:bb:
c0:55:0d:c9:c4:c6:d7:85:07:fc:32:a9:a8:4b:64:
77:ed:7d:22:f1:f9:6e:28:94:ba:ce:da:c0:d4:8a:
90:8f:84:d7:ec:c3:d0:a0:ae:e7:ae:3b:f4:4c:79:
27:12:e9:ea:b4:6c:74:00:68:5f:6f:10:e7:c3:d0:
46:45:18:7c:09:56:a2:fc:b4:16:01:67:88:92:85:
6b:20:0e:ce:44:38:ee:4b:a5:f8:a0:aa:21:b2:53:
58:a4:c0:2e:1c:c2:7e:a9:17:df:de:c0:48:6d:71:
e9:d6:cb:90:31:b1:32:d7:23:69:04:96:c0:ec:7a:
7f:65:08:4b:39:d4:8d:52:cf:c3:7c:ea:eb:70:d2:
df:e3:04:5a:73:df:ca:44:31:99:e3:04:85:15:4a:
d2:0f:24:f0:28:59:22:cd:71:dc:e1:33:58:ac:9f:
54:d6:b9:30:7f:ae:c8:04:82:99:9a:9a:f5:5e:de:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:34:5E:BE:C4:09:74:38:47:C6:18:13:5A:06:01:77:56:B6:2F:16
X509v3 Authority Key Identifier:
keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:49:ec:4d:79:2c:67:c3:3f:91:d4:f7:3d:cc:f0:74:fa:37:
38:5b:93:88:a8:d0:85:85:ef:cf:2d:a7:ce:ef:09:3f:7b:c1:
d4:86:7e:01:81:57:7d:1c:31:b7:7c:44:1e:8d:07:58:3a:1b:
c5:ac:5f:72:6c:5a:88:e8:da:7b:fa:60:91:60:3e:8f:74:ce:
74:dd:96:18:f4:12:e4:cf:0d:6a:98:3f:1d:7c:d3:c7:88:fc:
4f:51:02:36:be:cb:47:54:c3:02:c7:18:b1:c0:bb:94:e2:e3:
75:b0:58:39:de:80:42:5d:d5:b4:bc:44:fc:e5:22:1b:a2:a6:
ce:f4:50:69:69:ad:4d:e4:46:48:00:0c:30:64:2b:c1:5f:39:
0f:fe:2c:73:be:b2:8b:d0:a5:c9:6b:de:09:36:9d:6e:ad:02:
30:5f:fa:79:ef:d9:8e:b3:35:6f:48:94:6c:88:0a:49:ba:94:
af:cc:62:99:55:c5:53:f6:75:e8:4e:18:08:f9:47:74:93:41:
85:0a:cf:56:11:cc:14:0b:91:89:aa:30:52:74:fe:4a:ec:4e:
77:c3:1a:a4:80:04:38:92:8d:24:ce:87:5a:57:b4:e7:d8:ed:
73:ce:0e:4c:ae:73:91:aa:49:db:e3:6d:68:0c:e6:1d:27:59:
7f:67:ba:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:47 2026 by rpki-client