
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
File: bV1Q6IudZeiv2ijCzqYVAScDhgg.mft (raw, json)
Hash identifier: xd1PtxF4mjgQ0NAxjxk5NRXDcyGcckMfT0Yurdu6HAw=
Subject key identifier: B0:5D:97:41:88:C6:9E:43:0E:B4:D8:BD:48:32:50:42:8F:7D:13:CE
Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Certificate serial: 03D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
Manifest number: 03AD
Signing time: Sun 01 Mar 2026 01:39:42 +0000
Manifest this update: Sun 01 Mar 2026 01:39:41 +0000
Manifest next update: Sun 08 Mar 2026 01:39:41 +0000
Files and hashes: 1: bV1Q6IudZeiv2ijCzqYVAScDhgg.crl (hash: WTqEY82moxPA8R8mWffdIjIDGO069HW78HCSW32jdZE=)
2: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (hash: /TyJbdztz4Y61/Gz2zhowON+Tt9+b5wqgCKpbZ339lw=)
3: 142EA3A84FEF11EF9A822A21C4F9AE02.roa (hash: PsC0/VUJuwAMkmEBhdJkaydKW8CflQBB5EZOYU0cJtQ=)
4: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (hash: SwY/Crs5L/QLrOTdNtWGBh9zEFcoCIW07axxQKOSACI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 985 (0x3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Validity
Not Before: Mar 1 01:39:41 2026 GMT
Not After : Mar 8 01:39:41 2026 GMT
Subject: CN=69a398de-4f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:c1:6a:0c:57:b6:b7:ee:4c:71:d6:9c:da:
e8:29:a2:04:48:2e:47:4f:87:13:8c:a8:ed:46:69:
ef:bd:c6:ad:57:e6:36:cb:c7:4d:96:e0:f9:e5:3a:
6c:ed:4b:70:20:89:4e:9e:a3:5c:50:a2:79:ea:31:
14:27:7d:ed:ca:d4:24:43:6a:10:5e:46:4b:21:05:
f3:e7:f4:4c:91:2b:57:ff:7f:aa:77:67:3b:6a:ed:
83:2d:fa:7b:94:ce:2a:19:54:6e:fa:e3:55:4d:fc:
27:32:70:89:d9:a3:76:12:c9:39:ed:71:e7:60:12:
fa:cb:75:2d:2c:b2:97:f2:f5:40:f7:65:33:e2:d6:
9b:de:2b:c6:27:30:a1:b9:3d:a5:c2:60:73:37:d6:
8b:70:7f:47:43:aa:a4:3a:5a:c7:a6:bf:c2:88:9c:
f5:4f:58:e5:26:c5:f8:e3:77:7c:c8:99:ba:53:b7:
01:84:38:35:bc:bd:f5:1c:b2:d4:ef:13:7d:3a:6d:
1f:f6:1b:03:7d:16:17:13:a8:bc:2f:6a:46:df:8c:
78:27:e4:9c:80:26:7b:e5:9c:ec:1f:24:86:56:8f:
16:02:01:a0:58:a8:aa:f7:75:73:cf:41:f0:ea:2e:
ff:f7:7b:ba:4d:c7:5c:d4:21:fb:ee:bb:3a:2c:16:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5D:97:41:88:C6:9E:43:0E:B4:D8:BD:48:32:50:42:8F:7D:13:CE
X509v3 Authority Key Identifier:
keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:e4:f9:d8:a2:ae:4e:d5:3e:88:9b:18:76:c6:64:d4:06:38:
97:7f:c7:d7:e9:bf:41:df:f0:36:32:eb:a3:7e:b6:5a:61:26:
27:dd:43:85:59:1b:7c:86:73:f5:fa:8b:43:c6:5d:e8:3f:ae:
28:69:7c:02:7e:0a:e2:80:fd:42:79:28:fb:63:a2:dd:90:d7:
42:80:a0:c6:7d:37:c8:3a:b2:b6:49:be:93:1a:dc:2b:40:9a:
2b:66:28:d0:e8:95:c4:f6:c4:85:e4:4f:68:38:7e:39:8b:1f:
e4:64:a3:ba:9a:8a:f2:ba:3b:54:68:63:a9:03:7b:de:cc:13:
c8:0a:dc:34:d9:13:8e:55:bf:5a:8e:bb:27:2d:9f:64:24:19:
f4:e2:87:ff:8b:49:43:62:6c:5f:14:c0:39:6a:62:f5:e6:57:
85:1e:ce:02:58:61:56:b9:02:aa:1f:68:1a:3a:8a:40:3a:d7:
e6:58:99:6b:75:6b:4f:60:0c:d7:df:39:8d:b2:7d:73:62:b2:
47:24:c0:9a:6d:5d:a0:a0:ae:d2:fc:1e:85:dc:33:8c:4e:20:
cf:35:1c:70:1d:84:61:1f:9c:39:55:74:d3:59:1a:fd:ef:70:
11:d8:de:a6:ed:39:5f:be:06:f8:06:5e:68:01:8a:b8:e2:a7:
9c:2d:ae:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:35:37 2026 by rpki-client