
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
File: b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json)
Hash identifier: +Mu1lNjcHibte6VyPgep2/2zU++GZBB2JDMCQpXTy9g=
Subject key identifier: CC:0E:9D:93:A6:93:F2:14:AF:D8:F8:2E:BD:D8:31:EA:29:0F:5A:A6
Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE
Certificate issuer: /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
Certificate serial: 0BE4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
Manifest number: 0BD8
Signing time: Thu 16 Apr 2026 18:49:39 +0000
Manifest this update: Thu 16 Apr 2026 18:49:38 +0000
Manifest next update: Thu 23 Apr 2026 18:49:38 +0000
Files and hashes: 1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: mAPzaF2iq9Vozmtc9X4OoWYCPYredV57ZAjvJmz2VtE=)
2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: j3+FqbIbEZA5ldhomHT9hdMFU4oqErbqw6qxTyWi9S0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl
rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3044 (0xbe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
Validity
Not Before: Apr 16 18:49:38 2026 GMT
Not After : Apr 23 18:49:38 2026 GMT
Subject: CN=69e12f43-2055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:e1:d7:75:7b:59:63:9f:20:13:db:27:d8:
c8:9d:93:a2:80:8b:13:ca:94:c0:fd:b3:7a:43:4a:
49:4c:eb:21:cb:12:67:92:90:5b:73:82:21:d6:8e:
4c:d3:e0:ab:af:6a:58:87:72:ec:0c:d3:72:5e:3b:
e4:f4:d6:9e:9e:5a:99:82:58:db:b8:45:72:9f:ab:
be:18:70:0b:f2:f7:f0:fc:53:c8:bd:22:c8:fc:0d:
75:5b:f3:fd:69:e9:b3:7a:db:3c:68:1e:f7:e6:33:
b8:2a:b0:be:62:ec:89:a6:6f:c6:8a:dd:dc:fc:a5:
ee:38:a3:00:41:ff:48:1e:9f:c8:20:30:b9:d0:e2:
b1:e1:16:0f:6f:90:47:90:45:72:69:08:ad:8a:25:
45:0e:89:bb:2d:7c:9b:b9:7c:67:b5:fe:a7:f3:04:
5f:01:6c:28:4a:79:36:86:b2:99:6f:1f:97:6a:24:
bc:9d:8c:0e:0f:7b:4f:a1:38:3d:25:94:3b:86:46:
f1:bc:3b:f1:fe:b7:d5:0e:6a:4a:33:c8:63:7f:c6:
a7:f5:43:42:4a:eb:25:7a:fa:cb:51:5c:85:99:e1:
7e:1f:c4:0b:c7:ea:04:ac:e1:61:a6:be:13:e8:26:
87:6c:c1:41:68:51:b1:81:d8:50:a9:f3:64:20:77:
71:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0E:9D:93:A6:93:F2:14:AF:D8:F8:2E:BD:D8:31:EA:29:0F:5A:A6
X509v3 Authority Key Identifier:
keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:96:9f:f8:94:e7:3c:d7:9f:66:ac:61:47:7a:88:ab:24:d2:
c9:1f:d7:9a:37:b1:d6:ad:2e:8e:f2:d4:16:18:5f:cc:1e:8d:
a9:0c:36:4b:6e:62:97:e8:b0:19:b7:bf:46:07:56:94:cd:05:
09:01:23:c1:af:60:18:ea:7b:a0:af:8c:9a:cb:ef:cf:f0:ab:
ee:0f:35:be:08:49:ce:08:a9:30:36:75:05:a6:6d:62:96:5f:
c1:01:cc:f2:24:16:f9:ee:9b:b8:1a:ff:54:4c:3b:18:3a:19:
27:ab:71:e1:c9:5b:67:b9:4f:42:27:84:20:09:f7:2b:3b:24:
54:82:6c:0c:92:28:e3:f6:30:c3:0a:e8:6d:70:4b:76:a7:02:
25:8e:f6:06:41:6c:24:b0:c0:92:1f:59:e3:a9:7d:b3:b2:6e:
fa:ff:88:13:66:59:0b:5a:41:e4:f0:cb:80:9d:8c:9b:d6:f1:
9e:0e:5f:ed:b9:f6:cf:f5:32:29:89:43:2f:7b:52:b8:5a:05:
ac:6e:6b:93:c7:a1:d1:bc:be:8a:5d:ca:3a:b9:c6:a0:f0:99:
eb:b3:e2:c5:6e:67:e6:b9:7c:b8:5f:fa:6f:e3:5d:fa:aa:6a:
ea:4a:ec:42:33:60:97:78:6d:1b:0d:73:94:37:5e:35:5a:0f:
5b:fd:fd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:51:07 2026 by rpki-client