
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
File: fBlP7bilyMl2697IST3zw_CMyOI.mft (raw, json)
Hash identifier: /r/9Tb+K9egdTUWa5Tt8HdyIWCYr/hv2RkU7cgyDtKg=
Subject key identifier: 71:A6:D7:21:CA:12:A7:F6:2C:CF:0F:E5:79:BB:56:73:7C:26:DC:06
Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
Certificate issuer: /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
Certificate serial: 01DA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
Manifest number: 01D1
Signing time: Tue 28 Jul 2026 23:28:31 +0000
Manifest this update: Tue 28 Jul 2026 23:28:30 +0000
Manifest next update: Tue 04 Aug 2026 23:28:30 +0000
Files and hashes: 1: fBlP7bilyMl2697IST3zw_CMyOI.crl (hash: KCYJpuQpaWOy8myxg4OnEkqcpG1Pm+6raY5aofwir8E=)
2: C7AAEA76637311EF97465324C4F9AE02.roa (hash: GPOp4w2ZvKNt+x+91lwiugP/PaS/3PPwDU9MX+UN6Qg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl
rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 23:28:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE056, serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
Validity
Not Before: Jul 28 23:28:30 2026 GMT
Not After : Aug 4 23:28:30 2026 GMT
Subject: CN=6a693b1f-44da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:99:a7:58:91:35:2c:2c:15:af:a7:31:82:
7e:03:1d:62:c6:36:b3:43:ab:c3:7a:7a:b3:04:73:
c8:d2:ca:70:55:d2:f6:d0:ea:b2:d4:00:dd:b6:e2:
92:2c:e4:a4:ea:3e:e2:71:d5:8c:07:bb:30:8f:85:
fb:28:32:ef:d4:74:c4:15:3a:9c:1a:52:21:92:e0:
5a:e7:47:9f:e7:86:28:6e:fc:c3:70:ad:d5:23:8b:
1f:1e:69:ea:2c:30:d0:72:03:9e:96:d1:21:75:7e:
9e:bb:4a:ea:7b:26:90:1f:25:38:4f:0a:4f:25:8f:
37:a9:63:73:75:87:9f:ad:f9:67:7c:d8:62:33:90:
52:86:a1:2d:d5:8a:4e:ef:c2:94:bd:51:62:4e:ae:
88:b2:92:0a:71:13:ce:94:89:6e:23:0f:66:01:4e:
c8:3c:66:f3:52:ef:64:31:b9:42:46:16:46:34:76:
de:71:b7:c3:3a:8a:88:de:8a:f6:c9:2e:22:8d:7a:
5b:cd:e9:65:4c:cf:85:0c:35:22:93:0f:0b:2c:44:
d8:06:21:03:60:40:57:41:29:83:81:d1:d2:6a:8d:
38:28:9f:bb:f8:1c:7c:28:ee:cc:a0:51:be:02:12:
29:da:1c:27:62:29:b6:f9:ed:76:bc:e4:a8:47:a6:
a0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A6:D7:21:CA:12:A7:F6:2C:CF:0F:E5:79:BB:56:73:7C:26:DC:06
X509v3 Authority Key Identifier:
keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:04:be:4a:7e:75:69:42:68:15:a7:e0:d8:a9:10:be:f9:aa:
64:d0:65:0b:ed:a7:07:b0:96:1f:07:d9:09:46:e8:fa:be:42:
f0:c6:a3:fa:8e:4f:88:81:b5:5a:07:5e:c0:03:e9:bf:4e:3a:
8c:4f:5a:30:a4:a2:4a:57:6c:a9:41:58:2e:ae:fa:80:0b:0b:
cb:3b:95:25:02:08:6a:14:32:1c:b5:19:d0:3a:10:6d:96:95:
bf:3b:39:05:7b:79:7b:23:6b:b6:cb:c0:e6:7f:f0:6b:c5:aa:
58:cf:71:14:c9:f9:8a:da:81:4b:a1:42:39:30:d5:d7:84:3e:
fd:4d:95:5a:17:f4:b3:b4:7c:0b:02:72:93:91:ce:8e:fe:d7:
9e:41:0e:de:7e:b3:32:30:d6:42:9a:39:c5:1d:72:f6:3f:39:
8d:73:81:17:79:e0:19:d7:0f:69:e1:4a:fb:bc:b1:64:37:35:
02:b3:c0:ff:f8:b3:bc:eb:d9:7d:4f:33:b4:51:74:31:ba:d3:
33:2a:cf:4d:11:45:f1:8d:84:88:b1:7c:92:8a:98:a0:cf:38:
28:26:e4:6d:33:56:d6:b8:a7:f8:2f:c3:15:e7:a1:cb:87:af:
91:a2:c7:2a:10:5b:f9:af:7c:00:32:37:c9:e0:76:87:58:a9:
8e:95:4e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:53 2026 by rpki-client