
$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
File: b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft (raw, json)
Hash identifier: GZqDmwIAbt3OGp+ieHAHW07GBZI1LnQnaCsMlBwkBq4=
Subject key identifier: F1:F8:6D:1A:B8:8A:0A:D4:55:8B:5C:8B:DD:92:76:00:42:71:DB:2C
Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00
Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
Certificate serial: 1277
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
Manifest number: 1236
Signing time: Wed 10 Jun 2026 17:07:49 +0000
Manifest this update: Wed 10 Jun 2026 17:07:48 +0000
Manifest next update: Wed 17 Jun 2026 17:07:48 +0000
Files and hashes: 1: b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl (hash: QRt4trOWgRgp3zyESnny5/SwxL3x+bid6+SIdnSgwTk=)
2: 531C6440CF9A11E9ABB7C168C4F9AE02.roa (hash: GhuUSpOGOhzvETrGv1dHX21uJs7ntpLxSC2vf2RVN+U=)
3: 8497885E04F911E9AF13ED31C4F9AE02.roa (hash: cjMy4xbcc0iF8UGid1RrwsR5uCyoVa/GUkRSBBNBNwU=)
4: F85A5EB6C33911E9A9463781C4F9AE02.roa (hash: O4GHZYhhhQeQ6LqkXDZz5RCZWlPH2Yu/syycOtJ+aIo=)
5: 603AD1D0AB1211EAB4E7101BC4F9AE02.roa (hash: cQrRnhokY0nhbBJt3bSGZ86zJIUfmyJNDbVOoL1xxrY=)
6: 95D40AE2497311EAB4873B63C4F9AE02.roa (hash: BXGE/iZvvWL+dWAxPX7NLNenWS6dQrMTwGLNphzL3Ik=)
7: F8D520505D0E11EA89C55D65C4F9AE02.roa (hash: xGiIPlMqdMQ/AkBHGhYb6Ef9QmEy6xUaWuUDzw5uJV4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl
rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 17:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4727 (0x1277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
Validity
Not Before: Jun 10 17:07:48 2026 GMT
Not After : Jun 17 17:07:48 2026 GMT
Subject: CN=6a2999e4-f1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:08:e1:11:ef:c6:a1:91:e0:1e:2c:30:41:6d:
47:1f:34:b6:8a:64:67:87:b3:56:9b:64:d3:f7:fb:
0d:a4:eb:49:42:a0:2a:be:31:1e:b6:cd:cf:86:be:
34:15:a8:b0:02:7f:34:ac:c2:b7:54:0e:f3:14:13:
47:63:66:a9:ae:f5:ce:cd:1a:e1:2c:6b:bb:e7:03:
90:09:4e:92:bb:e0:32:10:f7:46:3c:93:5a:14:c7:
e1:99:3d:ab:d9:e5:6d:68:41:1f:1a:21:62:81:20:
26:98:a2:be:7b:62:2c:89:e9:f6:46:7a:60:14:78:
42:c5:25:ab:19:1b:2c:53:e8:a2:45:f4:c1:d6:fd:
93:81:4f:a3:be:22:80:79:ab:21:ef:a1:cb:a5:a3:
e6:de:07:cd:0e:45:21:f5:fd:0c:f0:b8:8a:f2:0a:
6d:af:94:00:ed:08:21:dc:7b:5d:01:8d:b0:9c:de:
2e:ac:02:8b:e2:75:32:62:52:69:b2:26:0c:6f:c7:
73:75:b7:2e:31:14:80:6d:1e:89:da:af:2c:1d:16:
77:0e:24:fc:98:85:c7:d1:7f:7e:f7:f5:44:23:9a:
5a:a6:5c:50:b9:66:5b:98:73:6f:89:5b:32:50:44:
da:dc:25:9e:81:1a:c8:ac:c7:99:c4:65:6c:cc:ee:
dd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F8:6D:1A:B8:8A:0A:D4:55:8B:5C:8B:DD:92:76:00:42:71:DB:2C
X509v3 Authority Key Identifier:
keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:ff:85:2c:cf:f4:98:30:8d:ca:72:b0:ef:1b:8d:96:84:79:
ed:a2:af:8a:10:b3:31:03:14:d5:c0:83:11:92:84:a3:5b:e1:
12:4f:b9:f8:8d:f9:bf:9c:42:56:bd:0a:d6:20:a6:ea:7a:d5:
40:76:48:f1:e5:20:d3:83:70:26:d2:92:4b:de:6b:cb:69:34:
50:f8:93:ec:2b:a8:07:76:f0:34:1f:40:fe:f7:dc:04:57:ce:
c7:96:5d:62:0a:f7:6b:f0:ae:c3:fb:2d:c9:62:27:c1:fc:45:
3f:80:65:70:91:07:4e:68:ab:15:f5:c5:51:5b:e0:58:07:2d:
d6:8b:25:b4:e7:b7:36:61:cf:83:22:33:07:16:01:44:65:8a:
82:c2:c0:4a:a7:50:1b:47:ca:03:22:65:30:c4:61:b7:e8:5f:
67:e3:df:2d:43:0e:16:0f:9c:ba:ae:07:b7:a6:2f:74:26:79:
bb:24:de:1e:73:c2:cd:a5:ff:3a:0d:4d:a6:c5:80:c7:d9:c8:
25:52:67:fe:96:a9:40:b0:b4:37:dc:c9:5e:33:19:f4:0e:8c:
b9:cf:d3:e3:52:06:a0:32:99:e6:7e:9c:52:58:e3:55:bf:aa:
96:b7:4f:91:d7:f6:db:71:7f:57:21:86:3c:cd:a7:23:98:3b:
c2:c1:fd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:49 2026 by rpki-client