
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
File: RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft (raw, json)
Hash identifier: D2KZLXEhw3XRqyrqyrgOAakTzlyhNthHS/YEDs5Kh7M=
Subject key identifier: F2:62:84:8E:61:48:EC:A3:AF:FF:60:A8:7C:4F:16:E4:FB:6C:52:D9
Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
Certificate issuer: /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Certificate serial: 081A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
Manifest number: 101E
Signing time: Thu 16 Apr 2026 21:01:12 +0000
Manifest this update: Thu 16 Apr 2026 21:01:12 +0000
Manifest next update: Thu 23 Apr 2026 21:01:12 +0000
Files and hashes: 1: RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl (hash: rCU2AZywBzr/HFU7wXy3+rrCWOW65FQc865SPgF+26k=)
2: 84FDF25A396711ED8AF52966C4F9AE02.roa (hash: jUqnFx87IlStP4kkY9M0idgA/Hwc78g7kwMihGngNEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl
rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2074 (0x81a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5C49, serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Validity
Not Before: Apr 16 21:01:12 2026 GMT
Not After : Apr 23 21:01:12 2026 GMT
Subject: CN=69e14e18-d2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:0d:ef:6f:2c:14:88:ae:18:ab:82:d8:7e:
60:7a:dd:b7:80:ad:b9:e9:04:19:68:7f:85:dd:5c:
51:41:0b:87:b8:55:27:c2:7b:45:5e:11:31:ee:63:
1f:44:bb:28:88:2e:9e:e2:5e:21:3b:77:fc:38:b6:
28:b7:e5:1a:73:6c:e9:2b:28:6e:3e:6c:73:0f:2d:
76:03:ce:27:e6:bb:09:b0:30:36:7b:59:6a:c2:b7:
5f:b5:48:3a:08:bd:8d:24:6c:92:63:a6:00:a7:9c:
1e:89:37:a6:db:09:84:45:6e:a2:7c:ae:26:4d:fa:
37:d3:e6:c2:a3:13:2d:2a:84:7a:fb:01:fa:0f:5b:
9b:dc:59:6e:07:51:cb:86:93:ef:20:c3:aa:ae:91:
44:38:63:61:18:7e:e8:e3:d9:a4:88:13:3c:37:49:
b8:45:99:8f:b7:7c:2e:b8:ea:fe:48:cc:cf:34:b0:
9d:47:09:a0:4d:24:1f:30:85:97:92:de:e3:a1:8b:
9c:e8:d1:24:4a:ad:77:b5:09:ad:ce:ae:9e:81:89:
78:ad:ab:46:63:8c:fe:73:b2:a3:46:3d:32:f4:3d:
bf:55:17:b5:5a:95:32:1b:ff:f6:98:58:32:3c:2e:
f2:57:a0:7c:cb:03:b3:04:86:c7:6b:7b:df:53:8b:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:62:84:8E:61:48:EC:A3:AF:FF:60:A8:7C:4F:16:E4:FB:6C:52:D9
X509v3 Authority Key Identifier:
keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:a1:40:9b:f3:cd:d1:a7:ce:88:cb:d3:0c:97:e6:69:ad:06:
80:65:95:34:cf:66:c7:43:7f:ec:d4:2d:a4:e8:94:95:98:bb:
2d:b5:06:3c:f1:34:ad:91:2c:3b:c2:a2:04:b1:54:fd:6b:c1:
2f:12:c1:ad:ed:3d:7f:06:be:af:6c:ea:54:a4:cb:1a:f0:c5:
71:88:52:10:cc:18:04:22:a2:80:18:67:04:92:04:60:d9:60:
9f:61:40:38:6c:13:3f:6b:eb:c1:34:3a:6e:3a:37:4d:82:dc:
5c:b5:c8:0d:ce:cc:7e:cd:67:1a:c5:09:62:91:d1:f9:58:92:
b0:e7:3b:fc:eb:06:60:8c:31:f5:05:be:d6:71:3a:17:df:58:
66:2a:04:b4:ec:76:ce:27:5d:8e:9e:5d:e7:48:66:e3:da:fb:
5b:c6:87:16:e7:84:89:ad:e8:b9:e5:fe:53:94:aa:5b:2a:97:
39:7a:4d:d4:06:f2:e4:de:90:ae:0c:74:21:be:da:7c:c5:01:
40:be:6f:a9:1d:75:89:4e:e5:3a:04:cf:c5:e5:ce:4a:2d:96:
b7:e9:f7:c4:0d:80:01:2b:16:d9:ff:3b:0f:58:53:b1:79:f5:
15:05:4e:6f:cb:38:98:27:f8:3a:b4:b7:13:e5:df:65:1f:84:
30:88:a8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:37:16 2026 by rpki-client