
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
File: 1bScAI9ih18VJth200lAoJsOnW0.mft (raw, json)
Hash identifier: N+jQZMIB0wWo1qIwyuIJ6/xJ8fM+v50eMyzSo9cftFU=
Subject key identifier: B9:E5:45:C6:F3:95:36:81:8F:C6:4D:2D:8B:CB:7B:8D:70:89:16:C0
Authority key identifier: D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
Certificate issuer: /CN=A91FB434/serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
Certificate serial: 161A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
Manifest number: 1602
Signing time: Tue 16 Jun 2026 16:43:01 +0000
Manifest this update: Tue 16 Jun 2026 16:43:00 +0000
Manifest next update: Tue 23 Jun 2026 16:43:00 +0000
Files and hashes: 1: 1bScAI9ih18VJth200lAoJsOnW0.crl (hash: XWfPWZ+vaOP5DE3APb/99dE4gO12KOQyM82qXTDchWE=)
2: EB843B92329A11EE89CD8544C4F9AE02.roa (hash: CLUWcZt+49NeH6K62G6A+1bRGb2EpGeJVNtijAJKCTI=)
3: EC796D6C42D411E88EC29742C4F9AE02.roa (hash: /XKpZWxHQtpMnU+ZHwwN48hOrY+K7y+jnl3ND5plgMo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl
rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5658 (0x161a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB434, serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
Validity
Not Before: Jun 16 16:43:00 2026 GMT
Not After : Jun 23 16:43:00 2026 GMT
Subject: CN=6a317d14-b754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:c1:7f:e4:a4:77:15:d8:ca:51:c6:12:5d:
b7:ca:b8:cc:f7:39:07:65:89:4d:39:9d:7c:57:29:
b1:9e:87:9f:1f:09:6f:fd:0d:28:32:f7:f5:ed:72:
bf:4d:0f:12:70:04:10:16:30:73:1e:d9:50:6f:37:
1d:1e:2d:6d:72:7f:00:c2:ad:c8:57:2b:87:40:ff:
3c:31:c9:ef:b8:8d:89:13:e7:43:72:b4:31:df:0f:
ee:d0:67:ab:23:ec:9c:69:0e:f3:ee:9c:a8:57:d5:
bc:7f:fb:00:b7:8c:7b:fb:8a:db:e5:6d:b9:e8:e8:
b1:8c:14:03:39:62:f9:68:dd:45:26:2c:e9:56:20:
f4:72:3a:16:86:3f:71:c5:fd:75:0a:91:48:dc:08:
41:a4:b8:b2:8a:c7:52:cb:28:56:68:3e:e2:81:b8:
55:66:39:48:89:23:42:3f:c2:4b:1a:e1:7f:49:4a:
a9:26:37:a1:72:f1:fd:30:c5:9f:a7:87:21:a4:58:
c3:18:f0:16:03:86:c6:2c:31:ba:c6:41:1d:3c:39:
b9:09:ea:6b:b7:3b:5a:49:62:d0:c1:17:7e:a2:ec:
a6:52:61:7d:f1:50:df:ee:e4:3a:a8:d0:59:d6:77:
70:45:d3:b6:96:a4:c6:18:b0:27:51:8b:ec:7a:24:
5f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E5:45:C6:F3:95:36:81:8F:C6:4D:2D:8B:CB:7B:8D:70:89:16:C0
X509v3 Authority Key Identifier:
keyid:D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:ec:fa:9d:8c:a7:ba:ad:f0:d9:96:93:f6:b4:90:29:a2:9e:
08:1b:2e:11:53:70:20:67:a3:a2:b2:76:15:d3:93:ed:2d:72:
5d:ef:16:66:4b:70:91:64:ba:36:d1:64:f5:93:84:83:dd:f3:
2e:09:6b:1e:c4:7f:d7:e6:8a:dd:de:93:8f:15:cd:62:0a:c5:
22:ba:7b:ac:0f:25:75:25:78:d9:8f:ca:dc:e9:47:ff:42:e6:
d4:14:f1:28:2c:f7:71:65:b1:08:78:22:63:f6:45:55:2e:eb:
7a:28:8e:cd:a3:4a:80:4b:c1:ef:ca:f6:f5:77:a4:4d:95:e7:
7f:b0:12:df:86:e9:c5:3e:39:ba:62:ac:b1:a0:a9:4f:2b:67:
f0:e1:2b:49:45:df:ee:fc:95:0d:2f:7a:62:a8:88:3d:ae:12:
21:f1:ae:01:1d:d4:48:d5:ab:6e:39:01:b2:a0:c0:ce:40:a8:
8b:4e:18:fd:52:5b:0b:04:b8:d5:0b:ca:ff:d8:5a:d3:54:f6:
96:23:16:85:5e:36:3a:32:22:c4:0c:f9:18:6e:8a:45:05:60:
fa:f8:af:34:c6:7a:b7:08:6f:ec:7a:0f:5d:d4:c7:cb:bd:76:
f3:ac:ee:dc:1a:d3:b6:67:00:85:a0:b9:82:f6:60:b3:d2:e3:
ab:e4:14:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:36:55 2026 by rpki-client