
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
File: 1bScAI9ih18VJth200lAoJsOnW0.mft (raw, json)
Hash identifier: 2ylpIugHlts9TGakqAY0CR/zejDEc90yve9yExVb8KE=
Subject key identifier: CB:31:36:4C:59:A1:87:97:39:56:8F:79:4D:C7:0E:49:68:C0:48:E1
Authority key identifier: D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
Certificate issuer: /CN=A91FB434/serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
Certificate serial: 15FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
Manifest number: 15E3
Signing time: Thu 16 Apr 2026 16:40:11 +0000
Manifest this update: Thu 16 Apr 2026 16:40:10 +0000
Manifest next update: Thu 23 Apr 2026 16:40:10 +0000
Files and hashes: 1: 1bScAI9ih18VJth200lAoJsOnW0.crl (hash: vadIQHARAbGxNTIGIladpJeyDJB4gLmBsC8/bc+CbWE=)
2: EC796D6C42D411E88EC29742C4F9AE02.roa (hash: /XKpZWxHQtpMnU+ZHwwN48hOrY+K7y+jnl3ND5plgMo=)
3: EB843B92329A11EE89CD8544C4F9AE02.roa (hash: CLUWcZt+49NeH6K62G6A+1bRGb2EpGeJVNtijAJKCTI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl
rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5627 (0x15fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB434, serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
Validity
Not Before: Apr 16 16:40:10 2026 GMT
Not After : Apr 23 16:40:10 2026 GMT
Subject: CN=69e110eb-2c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:4e:5f:e2:42:e3:48:42:34:c7:98:5f:0d:
73:73:f2:0a:d4:3b:03:6c:46:2c:ca:f4:40:96:38:
e0:07:26:87:3f:d0:e0:d7:cd:b5:4d:34:a0:0f:1d:
f6:19:2f:1e:3e:18:b8:51:51:cc:eb:54:89:89:ca:
51:4c:9f:af:3a:fa:af:5d:41:95:30:1c:ef:fb:46:
fb:21:8d:dd:61:6e:c4:59:43:c6:8a:ae:6e:dd:df:
e7:a4:91:27:fa:72:01:54:22:7a:c2:53:72:d5:e9:
c4:23:68:f7:4f:53:72:db:4d:4e:28:ea:e2:61:0b:
76:62:4d:68:1a:18:59:2a:c7:81:68:f8:53:4b:23:
15:66:ea:92:40:8b:65:09:36:44:75:44:ac:82:b1:
f3:81:8f:9a:69:71:37:ad:82:80:59:13:ac:ec:1a:
83:fa:f2:f1:b8:5f:d0:ab:66:ae:a7:ca:85:1e:f9:
b4:d9:5a:25:7c:49:81:13:04:cb:b4:71:88:31:90:
82:84:4d:67:6b:79:80:7a:6a:11:ee:a2:a1:d3:51:
52:d8:3f:39:41:f1:e2:c3:ca:ef:23:47:d9:19:86:
3d:0f:b4:f9:f9:11:6e:5b:ce:0e:00:a1:40:2b:72:
d0:de:3c:5c:a7:f7:a8:33:e8:c0:e5:f8:29:d5:53:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:31:36:4C:59:A1:87:97:39:56:8F:79:4D:C7:0E:49:68:C0:48:E1
X509v3 Authority Key Identifier:
keyid:D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:e5:18:77:85:b4:2e:d1:d7:0e:dd:06:fc:ca:42:92:59:99:
f5:67:3d:70:42:2c:da:b8:86:14:ea:f0:2f:81:80:c2:55:39:
52:16:80:b7:6d:c9:b2:59:e6:fb:6c:1f:c9:a2:f4:0e:79:53:
66:cc:0b:8e:1d:4e:c8:82:a5:bf:32:45:e5:bc:92:12:41:31:
02:d0:7e:6d:fc:8a:91:a3:01:4b:31:a7:bf:69:9f:6d:7b:df:
9d:85:79:b4:4d:95:31:c4:14:0b:7b:61:b5:7a:93:ff:b2:a8:
f8:0a:57:58:3e:c3:b9:7b:49:73:72:12:b8:34:c1:78:17:ae:
1d:a1:b8:c3:c7:49:18:66:be:98:33:14:39:6c:bd:cf:5d:5a:
26:14:11:80:33:29:b8:db:2e:43:40:5b:04:0b:e0:7f:5d:51:
88:4d:e7:3d:da:b6:e7:d0:db:31:5e:c1:c2:4d:f6:b9:9f:e7:
88:c3:47:24:e1:44:9a:aa:1d:b3:02:89:e1:e1:60:63:11:19:
4f:e3:de:11:fa:65:4e:b7:cb:38:a7:32:fb:10:47:26:58:59:
03:fd:af:e3:67:31:ce:69:eb:21:02:9d:5e:04:ac:66:c2:54:
5d:ea:72:66:8d:47:aa:4d:d4:d4:3e:2d:8a:ac:96:e1:ac:56:
66:f4:b1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:20 2026 by rpki-client