
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
File: 1bm7ozBeiMAA9WKTnROLpQYieyo.mft (raw, json)
Hash identifier: D8i+s9xtkWHO4BPzKT8j4kjtqA/SP7EMweIs6AVqC8A=
Subject key identifier: 85:11:F6:F7:6A:9F:00:40:A8:9D:B3:B7:AE:1E:9A:13:62:27:EB:38
Authority key identifier: D5:B9:BB:A3:30:5E:88:C0:00:F5:62:93:9D:13:8B:A5:06:22:7B:2A
Certificate issuer: /CN=A91EAF4B/serialNumber=D5B9BBA3305E88C000F562939D138BA506227B2A
Certificate serial: 0B97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
Manifest number: 0D05
Signing time: Mon 02 Mar 2026 02:48:00 +0000
Manifest this update: Mon 02 Mar 2026 02:47:59 +0000
Manifest next update: Mon 09 Mar 2026 02:47:59 +0000
Files and hashes: 1: 1bm7ozBeiMAA9WKTnROLpQYieyo.crl (hash: xr4+nKcuyZPwdfwEmo8fO5lRSrYbLL0T6NaELItm3wc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.crl
rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2967 (0xb97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAF4B, serialNumber=D5B9BBA3305E88C000F562939D138BA506227B2A
Validity
Not Before: Mar 2 02:47:59 2026 GMT
Not After : Mar 9 02:47:59 2026 GMT
Subject: CN=69a4fa60-278d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f4:65:87:e6:5c:e9:86:9f:67:94:f6:81:31:
72:b5:0c:32:cf:ca:c5:bc:8c:ad:b2:b7:9a:d6:a1:
26:54:73:29:e5:14:86:26:6e:3c:c2:fb:4a:b8:90:
2d:7f:b4:41:bc:d7:03:90:81:58:4f:1e:24:72:64:
a5:62:91:2b:4f:b4:4f:56:a6:42:e8:72:6b:1f:29:
df:08:bd:59:a0:5e:4f:ec:25:e0:3e:00:23:25:90:
f6:81:d9:b0:07:3c:34:e5:16:d7:30:e6:77:49:7f:
1e:90:9f:8f:dc:99:cb:ff:f0:a3:70:be:e9:4c:ae:
6e:e1:bb:b0:fb:db:15:bc:31:6f:f5:9b:81:03:b6:
19:07:48:56:e5:e9:20:27:a3:a6:89:ba:f9:f1:f2:
c6:bd:53:7b:05:97:f8:e1:45:8f:82:ad:5d:69:8d:
a7:8f:b3:4c:e1:78:72:bf:40:df:66:87:e9:92:60:
ed:66:2c:b8:46:ad:79:95:cc:a5:c4:fc:9f:28:b9:
da:85:22:8b:e9:86:16:63:cb:19:98:54:d9:83:4e:
ec:a0:ab:4c:22:b2:64:d4:f2:ac:42:50:04:b6:bf:
fe:ff:8f:e6:54:8e:2e:cc:52:c2:cb:ce:09:70:06:
5d:f7:35:3f:f2:84:d3:f9:37:0a:f3:d2:60:22:3a:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:11:F6:F7:6A:9F:00:40:A8:9D:B3:B7:AE:1E:9A:13:62:27:EB:38
X509v3 Authority Key Identifier:
keyid:D5:B9:BB:A3:30:5E:88:C0:00:F5:62:93:9D:13:8B:A5:06:22:7B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:19:87:10:c1:c7:dc:ad:e9:27:c2:d1:db:30:0e:8d:ab:77:
31:67:04:3b:d8:a9:cb:05:42:74:1b:5f:8c:b4:15:ce:8f:de:
2b:03:7e:37:81:23:75:06:f4:9a:db:7e:84:09:cd:6c:05:25:
62:bd:76:80:86:5c:9a:92:9e:4f:e9:13:0d:b7:7f:be:c5:ca:
e9:dc:f3:4b:69:a5:49:65:11:a8:38:1d:a2:42:5e:18:30:26:
56:a7:29:68:7c:9c:17:ff:dd:63:f6:27:37:d4:0b:0c:36:58:
a7:07:28:e6:a5:88:07:69:e6:0a:cd:7c:06:4c:54:3b:27:5c:
cd:87:20:00:b6:2d:72:5e:d7:24:59:22:1f:18:a8:f1:7e:ab:
30:83:2e:17:35:c4:f1:e5:09:e3:53:00:a3:9e:4d:2e:1e:f7:
6f:17:9e:56:4b:4e:c3:1b:a3:b8:de:db:2c:23:7e:af:fd:83:
92:33:be:a1:72:c7:99:c7:90:85:64:e8:84:4c:60:1d:d2:e7:
84:5d:aa:83:83:19:9f:06:74:6c:02:9b:6b:60:ab:63:2e:00:
21:2f:ad:bf:53:07:c4:04:a7:fa:55:4c:05:02:7c:15:29:f1:
63:f7:99:1e:b0:08:2b:b4:97:8f:b5:b2:22:3d:c1:37:31:8b:
6a:da:91:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:05 2026 by rpki-client