
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft
File: Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft (raw, json)
Hash identifier: Xu1ea+S6zm6ismu+O/JZulhrziTiDGyGvb643PywRMs=
Subject key identifier: B9:A0:30:E2:1F:9E:0A:48:49:19:3F:B3:7D:CF:38:35:CC:BC:8B:30
Authority key identifier: 05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7
Certificate issuer: /CN=A91D795B/serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7
Certificate serial: 05B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft
Manifest number: 05AF
Signing time: Mon 02 Mar 2026 01:14:53 +0000
Manifest this update: Mon 02 Mar 2026 01:14:52 +0000
Manifest next update: Mon 09 Mar 2026 01:14:52 +0000
Files and hashes: 1: Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl (hash: erL16UWT3Yx3SDsdT59BemcGDiPLTEx4VTdCPso7qrs=)
2: 7C05ACEE75B311EF83EC6F78C4F9AE02.roa (hash: OrGWOjKaq8LbnZvZB603X7/PZgRovjlf9H8990xA32M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl
rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:14:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1463 (0x5b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D795B, serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7
Validity
Not Before: Mar 2 01:14:52 2026 GMT
Not After : Mar 9 01:14:52 2026 GMT
Subject: CN=69a4e48d-b14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:d6:61:cc:fb:98:7a:74:44:f2:5f:c2:ee:
fd:f2:d1:4e:b2:03:13:53:24:2a:55:f9:1e:df:c2:
8d:82:af:9b:ef:32:d6:a9:40:16:54:56:1c:aa:76:
fa:a9:3f:d2:de:ad:23:42:af:d5:df:f3:fe:55:e9:
a2:97:7b:8a:6c:99:5b:56:03:58:c6:d5:a0:38:38:
52:27:e3:de:4a:23:de:f3:9d:d9:db:e3:1e:a3:cc:
86:77:20:13:77:75:19:57:7c:d2:7a:0f:55:9c:7b:
ac:41:39:64:93:5f:ce:35:b8:a8:ad:9a:24:ef:1a:
d1:68:28:f9:ad:ec:79:9f:fe:92:93:7d:12:29:0b:
d3:3f:e9:17:5c:b1:50:3d:d8:82:03:f1:8e:6e:ab:
fa:a0:95:17:9d:47:3c:79:d6:2e:da:15:c2:f4:60:
09:6a:db:64:86:40:b1:ae:c8:d1:13:5b:6b:f8:81:
f1:dc:49:09:fb:5d:80:72:a7:59:cf:57:3b:25:96:
76:7f:76:a4:22:d3:02:55:88:30:4b:b9:c6:7e:0f:
27:98:b9:36:bb:90:57:2f:10:99:50:01:fd:9d:ef:
a5:86:82:0c:96:ae:39:85:e8:68:b1:05:cf:d8:5b:
63:28:33:9e:e1:05:33:e8:72:5d:85:6a:30:77:23:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A0:30:E2:1F:9E:0A:48:49:19:3F:B3:7D:CF:38:35:CC:BC:8B:30
X509v3 Authority Key Identifier:
keyid:05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:e1:f9:e2:c2:a2:8a:8c:02:22:53:bf:a7:cc:f8:62:16:bb:
43:c1:47:1d:d2:af:7a:f0:54:a0:0b:be:13:17:31:a9:4c:a5:
3c:7d:7e:cd:f3:23:f4:2d:6c:c2:7b:01:e3:4c:76:6f:b5:41:
98:cd:e2:8a:ce:9e:b0:85:9a:51:ee:7e:00:6b:b3:02:1c:cd:
e8:92:12:a0:ab:4a:82:a6:86:ca:52:b1:35:b0:18:1c:66:22:
b4:a4:45:ec:01:34:94:1a:7d:24:af:1c:69:39:ee:5e:99:5a:
7c:8f:28:0a:e4:a5:f6:38:0b:5d:ed:13:b0:06:e3:34:ba:aa:
05:f9:29:1a:b4:7c:ae:c2:ae:73:45:3e:04:51:26:70:fa:4f:
8e:fc:4a:69:87:fc:fc:e2:e5:4d:85:84:e4:d4:55:5b:55:10:
e2:06:f5:a9:30:57:c0:45:43:b9:77:30:bc:d3:7c:8d:b7:89:
18:8d:8c:22:ac:71:5d:bb:9a:9f:e8:ff:74:f6:ff:ed:74:35:
11:5b:ab:cd:59:dd:28:0f:fa:42:ee:fd:5f:ae:9e:4c:a1:1a:
54:db:89:cb:2a:40:92:25:ea:47:9d:f3:a1:1a:d7:96:ec:e2:
cc:27:65:b2:cd:f5:06:ae:ae:cd:28:7d:fb:14:e1:f4:ce:89:
5e:9b:4c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:11 2026 by rpki-client