
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
File: 1BN478zNyo5lN-lfJ6o7NTdYCvM.mft (raw, json)
Hash identifier: 7VjFumKW8QH3h0pF1AeFKGH+038e4paelB63NHuq058=
Subject key identifier: 40:A5:5C:E9:B1:C3:62:1C:3E:74:93:21:9A:CB:3A:CD:C1:A4:BD:85
Authority key identifier: D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3
Certificate issuer: /CN=A91F2E76/serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3
Certificate serial: 081D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
Manifest number: 0817
Signing time: Sat 28 Feb 2026 21:24:01 +0000
Manifest this update: Sat 28 Feb 2026 21:24:00 +0000
Manifest next update: Sat 07 Mar 2026 21:24:00 +0000
Files and hashes: 1: 1BN478zNyo5lN-lfJ6o7NTdYCvM.crl (hash: xsdXZ7GK4G7P+ghUDqqDQFEfLggpIXbdIgK/wmYytHw=)
2: 86AE60140D7A11EB9D346C48C4F9AE02.roa (hash: IYriA7iqlPrIGEwVZWLwnn3g/0OVL8pkTIBJVf9/TyA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl
rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2077 (0x81d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2E76, serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3
Validity
Not Before: Feb 28 21:24:00 2026 GMT
Not After : Mar 7 21:24:00 2026 GMT
Subject: CN=69a35cf1-797d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f0:d3:3a:f1:32:36:36:36:e5:93:6d:e5:1b:
d8:a6:ee:46:9b:37:0c:96:65:37:28:b4:f0:8f:4b:
35:27:90:7c:bf:5b:f0:2f:6f:fc:df:c7:0c:03:7b:
f5:41:1c:5c:78:ba:9d:b8:74:36:a5:52:62:fc:f2:
23:95:b9:d6:73:bc:2e:a1:b7:ad:e4:e4:8e:c2:17:
d4:f5:e9:db:7a:d2:91:81:4a:3c:09:05:84:dc:a5:
e9:3d:78:bf:0a:ce:70:aa:04:57:5c:25:7d:d3:e2:
8c:da:23:16:58:10:7c:86:ff:d9:5c:4d:8f:e8:2a:
2b:16:b9:d3:b0:a0:d0:68:d4:60:80:47:02:7d:59:
29:90:02:d2:75:ff:c4:2e:9b:92:02:ca:f4:c9:9e:
e7:fb:e3:84:31:78:68:dd:ca:45:b7:a7:23:77:95:
e3:c7:1d:fe:b2:91:1b:7d:e4:e3:30:3f:1a:99:08:
41:c5:2e:7e:58:b6:b5:56:98:72:47:7f:b8:be:66:
1d:a2:6a:9f:d9:97:3d:1d:95:f4:e5:72:c8:1c:48:
ef:3f:d9:b6:45:d0:72:e0:32:e2:30:dc:f4:30:ba:
cc:72:7d:a2:17:7a:9c:59:7b:50:45:d5:9b:79:3b:
6b:46:a7:6f:38:cf:7a:37:54:5b:9f:4e:4b:dd:79:
a3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A5:5C:E9:B1:C3:62:1C:3E:74:93:21:9A:CB:3A:CD:C1:A4:BD:85
X509v3 Authority Key Identifier:
keyid:D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ff:7b:20:c1:0f:27:e6:c0:20:34:9c:e0:9c:37:e4:c3:a1:
5c:93:50:76:a6:ac:d3:99:ed:7e:5d:fc:6a:95:f5:78:90:17:
45:d1:75:d3:da:c4:60:1c:c3:f2:19:f4:a3:b8:cd:d7:29:f7:
ea:8a:28:12:b4:b6:40:61:fa:bb:41:d3:06:63:fe:c1:aa:a7:
77:87:d8:71:e8:be:bd:ab:da:ff:8b:d6:a5:d3:38:33:a6:2e:
e2:bc:3b:d0:e8:4c:d7:a3:3c:77:57:44:32:8e:9a:ef:df:5d:
99:75:9f:59:3b:43:dd:44:0c:86:ec:27:58:0c:ed:dc:d5:62:
38:68:f8:6b:df:22:da:a3:f9:66:54:b0:a9:41:e9:4a:7f:cc:
35:5c:bb:b2:6d:69:a9:c7:8a:1f:b1:f6:d1:c5:f4:be:00:ee:
fa:c2:43:b0:86:67:3e:5a:9d:ae:a6:af:d6:cf:4f:4f:f0:b4:
12:ff:cc:7c:8c:4e:ab:25:cb:00:e8:97:da:6b:96:3c:36:88:
60:53:96:b4:e7:11:2a:03:f2:0d:4a:51:ab:a4:63:3c:43:4c:
59:20:ce:16:e8:ba:ce:5a:cd:94:aa:32:76:ea:71:02:49:9f:
4b:41:64:26:16:c1:80:81:fa:8e:ab:65:c4:97:e2:b3:f9:99:
e7:38:1a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:36 2026 by rpki-client