
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
File: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft (raw, json)
Hash identifier: pQ2P+h4KX36fpnM8UFQisYb5WQJfnSJrgV075R5QSJg=
Subject key identifier: 21:E4:B6:E4:A2:27:30:06:06:50:A3:A8:56:D1:79:89:5E:76:6D:87
Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
Certificate issuer: /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Certificate serial: 0738
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
Manifest number: 071B
Signing time: Tue 28 Jul 2026 22:37:26 +0000
Manifest this update: Tue 28 Jul 2026 22:37:25 +0000
Manifest next update: Tue 04 Aug 2026 22:37:25 +0000
Files and hashes: 1: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl (hash: K5mzi8lfLLDdZgUw2d4YwMntRG3uCCV/IDs9Cj1s+nE=)
2: 3D0E47EC7EAF11F1AD3956B567A30FBC.roa (hash: hwBBWpZCce93zQCmTKn/kHh0n1NiFx0Q0/r/Ql0rGy8=)
3: 3C74428C7EAF11F1AD3956B567A30FBC.roa (hash: 6LZ4bPT9bZsQt1NMk36EUX/7nrjtc4AN+ODrl8tZWGg=)
4: C6D6364E125111F1B8BE3F1A2A3D8C67.roa (hash: 6zIL5/XoQTIyk3Jr0VGLPqv9G9qbae/PYGD1mNfyaeU=)
5: 3BD522E27EAF11F1AD3956B567A30FBC.roa (hash: mlnAl1IpbI+Gu2EUhn4HWE9P+hbIJZwcPBC54TT0gKs=)
6: 3B31153A7EAF11F1AD3956B567A30FBC.roa (hash: +FSo/bLhL935Bd0K6YMZLsxFgcC1GeAnpkcOFnacIto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:37:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1848 (0x738)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Validity
Not Before: Jul 28 22:37:25 2026 GMT
Not After : Aug 4 22:37:25 2026 GMT
Subject: CN=6a692f25-3c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:b5:96:67:0a:31:ec:c2:b6:c1:b4:4c:16:
ac:b5:c9:6a:25:5e:78:05:2f:ff:d0:5b:67:9f:55:
2f:1d:e8:bf:ff:aa:d2:b9:cc:42:25:df:fd:e2:21:
60:c0:49:0d:d0:b2:72:3e:e8:f2:59:11:bb:0a:c9:
3f:54:7a:cb:da:d5:3e:32:51:01:0a:87:3b:af:91:
ef:0a:ae:01:18:76:d7:1c:2c:3b:c1:79:39:a3:eb:
46:d6:a4:6c:70:47:8a:04:73:b8:4f:34:39:ae:de:
81:c4:5f:5f:7b:f1:8f:e0:13:61:3c:4d:d8:e3:66:
d7:45:05:2a:46:ba:ee:b8:06:69:96:b0:1e:a9:f3:
61:c7:48:5c:52:db:73:1a:9b:4a:ef:d4:f1:f6:da:
8c:47:bc:e6:ea:6c:8f:f6:f6:6d:40:5b:cf:d1:b6:
2d:3f:1e:30:f1:64:9e:91:3d:5e:79:b3:c2:66:0b:
28:f2:e8:9f:8d:82:1a:9d:81:c9:69:7d:4e:76:74:
0c:92:e6:dd:5d:e1:3c:48:e9:a3:85:b7:37:23:ae:
27:cb:1f:95:ba:29:b3:74:74:1c:84:74:70:82:ce:
ba:ab:31:72:40:66:f4:fe:7c:16:d7:b5:31:14:67:
f7:2f:3d:85:9a:91:e9:90:b6:16:9e:05:d4:72:10:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E4:B6:E4:A2:27:30:06:06:50:A3:A8:56:D1:79:89:5E:76:6D:87
X509v3 Authority Key Identifier:
keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:b1:52:b8:9a:9a:50:25:42:1c:08:7c:2c:85:ff:25:7b:f3:
49:ca:2f:9b:4a:37:e8:d3:9a:8a:b3:6f:a0:79:80:84:fb:50:
59:3f:6f:d7:35:e7:b9:01:f1:3c:c6:f1:33:80:74:05:03:5f:
21:2b:5c:b8:c6:52:34:4e:8f:f4:f4:a2:88:99:d7:07:21:ba:
ed:9b:f9:ac:04:d0:0e:5b:c0:1d:f3:fc:b1:93:f8:b5:ef:ca:
2c:e8:b0:5f:34:e8:d1:d8:0b:cb:85:2f:b1:74:01:6b:27:ae:
6d:bb:f2:dc:ee:95:08:aa:d9:bd:23:e1:d9:dd:af:7c:82:31:
1a:a6:bd:aa:fa:09:5e:36:71:eb:86:dd:62:d0:0f:bd:62:12:
25:bf:2c:59:91:f4:47:1f:39:d0:d4:d9:83:c8:39:cf:c7:3c:
30:80:a5:77:55:95:fe:26:49:e3:5f:cd:c4:46:7f:c2:e2:da:
b4:c8:5a:b4:d7:0f:27:12:ff:d4:4e:8e:c8:84:14:3d:27:59:
2b:40:79:37:3a:72:71:35:be:c9:6f:f3:b3:64:05:ad:5e:bf:
8a:34:4a:f8:08:a8:02:24:81:ab:ab:2a:80:13:eb:1a:4b:b0:
67:7c:8d:2b:36:9c:a1:8e:f9:27:5e:26:dd:ba:bf:bc:e8:7a:
d2:f3:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:47:14 2026 by rpki-client