
$ rpki-client -vvf rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
File: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft (raw, json)
Hash identifier: VyYHiDs8eriIkfrHtVriESIYHtY3Z8LvW3aWCCp4Aow=
Subject key identifier: E6:B5:6B:AC:96:4C:A7:9E:3C:EF:7E:9C:B4:D1:9C:EA:FD:AE:91:97
Authority key identifier: D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D
Certificate issuer: /CN=A91174ED/serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D
Certificate serial: B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
Manifest number: A8
Signing time: Tue 19 May 2026 07:06:54 +0000
Manifest this update: Tue 19 May 2026 07:06:53 +0000
Manifest next update: Tue 26 May 2026 07:06:53 +0000
Files and hashes: 1: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl (hash: x5vd6ecUXVlGPhb83gIo00mWchcMigwXExB9vjOXZRA=)
2: E7BD97EE5D9311F0AFF08443C4F9AE02.roa (hash: wMqZyUHwFnm2prR30bhRvxTQaRsk2FAxurhzAGgKS+I=)
3: FE892768620711F0BE75F534C4F9AE02.roa (hash: w6R9tkWMN6zGFTVsCrdtlZOXuO5ohHrK0PqrImTn4O4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl
rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 07:06:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91174ED, serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D
Validity
Not Before: May 19 07:06:53 2026 GMT
Not After : May 26 07:06:53 2026 GMT
Subject: CN=6a0c0c0e-b19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:11:7f:45:e7:f0:79:2f:6e:5d:b2:be:3f:
44:4e:2e:8b:cf:49:55:17:86:f8:94:fb:b9:ac:63:
0f:2f:7f:2f:0f:0c:b6:72:bb:f0:0d:4d:0b:ee:a2:
df:6b:48:89:e2:a3:03:5e:5d:fd:4e:df:a1:6a:9d:
cb:d4:9d:ec:7b:bd:33:c7:a8:20:65:39:38:c6:69:
89:a3:d6:4f:e6:92:d7:ca:41:0f:ec:c7:01:fc:0f:
b2:9f:77:e9:73:99:79:41:65:e4:37:5f:56:85:17:
64:e7:8b:10:f5:68:51:a6:93:31:11:ea:d9:40:a0:
c9:66:fe:5a:3d:bf:d4:9f:be:41:eb:20:f4:e1:70:
98:c8:5c:b6:cb:5d:3b:46:2c:3f:80:de:ae:56:ba:
0f:9f:2a:57:b2:a0:a6:de:24:82:c8:f9:44:d5:99:
0f:ae:4f:32:e7:64:98:51:6f:76:f2:bc:88:9b:42:
e3:18:17:23:f8:79:e8:fc:b1:85:b2:7f:c8:09:65:
cd:c3:9f:e6:38:f2:9a:5b:bf:af:e6:40:33:e4:1f:
ee:85:f7:ce:15:16:55:fc:c7:cf:00:b5:ad:0e:c7:
10:bd:ff:0b:d1:d0:57:2d:7a:6d:27:18:8b:57:47:
c1:0d:ab:76:7a:b5:f6:c1:41:d6:fb:0b:72:d9:f8:
a7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B5:6B:AC:96:4C:A7:9E:3C:EF:7E:9C:B4:D1:9C:EA:FD:AE:91:97
X509v3 Authority Key Identifier:
keyid:D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:81:38:71:a1:15:31:09:3f:13:ad:4e:8f:25:21:29:86:4e:
d6:2b:78:f6:16:89:6d:3a:16:a0:97:d1:24:1f:61:b2:85:c0:
68:f6:ec:b4:3d:8f:6d:de:16:ee:f2:cb:30:1a:80:ea:74:8c:
67:b9:b5:a7:7f:b5:8f:5a:66:77:80:f1:d4:ff:b2:b0:c7:0d:
12:01:0f:6d:cc:d4:01:0c:70:14:b0:05:54:ef:d7:cf:c4:66:
4c:45:68:de:e8:02:95:07:e4:89:4d:4c:54:05:00:95:6a:5e:
98:bf:7e:3e:7c:d7:b5:b1:25:9b:1e:ae:cb:1e:f1:1e:11:39:
c3:e7:16:71:85:66:48:62:6d:cb:08:5d:ca:b7:8d:09:75:fc:
e0:34:58:0a:b0:fc:72:e3:92:2d:17:a5:2f:e9:95:df:7d:b0:
5a:b9:63:7c:02:2b:f9:57:b3:68:55:cc:4f:2d:72:31:4c:3c:
02:d0:6c:d3:ad:41:d4:d9:e4:c3:d6:b0:4e:4d:7f:8a:89:17:
e8:d3:4f:49:73:6a:fa:e2:da:36:4d:d2:90:cc:67:07:02:3b:
8b:87:54:39:1a:1f:d0:82:b8:15:89:a2:10:3b:e5:8b:64:f6:
d9:8c:3a:eb:17:5c:1c:ac:6e:c6:66:66:33:9d:4c:0f:eb:7d:
22:44:25:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc0RUQxMTAvBgNVBAUTKEQ1QkM3OTBBQjAzN0I4N0RERjYzOTNENzQxMzZCRjA3
N0ExRDI5OUQwHhcNMjYwNTE5MDcwNjUzWhcNMjYwNTI2MDcwNjUzWjAYMRYwFAYD
VQQDEw02YTBjMGMwZS1iMTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvi4Rf0Xn8Hkvbl2yvj9ETi6Lz0lVF4b4lPu5rGMPL38vDwy2crvwDU0L7qLf
a0iJ4qMDXl39Tt+hap3L1J3se70zx6ggZTk4xmmJo9ZP5pLXykEP7McB/A+yn3fp
c5l5QWXkN19WhRdk54sQ9WhRppMxEerZQKDJZv5aPb/Un75B6yD04XCYyFy2y107
Riw/gN6uVroPnypXsqCm3iSCyPlE1ZkPrk8y52SYUW928ryIm0LjGBcj+Hno/LGF
sn/ICWXNw5/mOPKaW7+v5kAz5B/uhffOFRZV/MfPALWtDscQvf8L0dBXLXptJxiL
V0fBDat2erX2wUHW+wty2finmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOa1a6yW
TKeePO9+nLTRnOr9rpGXMB8GA1UdIwQYMBaAFNW8eQqwN7h932OT10E2vwd6HSmd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzRFRC8xNDM1ODE2MjVE
OTIxMUYwOTBERjM4MzZDNEY5QUUwMi8xYng1Q3JBM3VIM2ZZNVBYUVRhX0Izb2RL
WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFieDVDckEzdUgzZlk1UFhRVGFfQjNvZEtaMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzRFRC8xNDM1ODE2MjVEOTIxMUYwOTBERjM4MzZDNEY5QUUwMi8xYng1Q3JBM3VI
M2ZZNVBYUVRhX0Izb2RLWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa4E4caEVMQk/E61OjyUhKYZO1it49haJbToWoJfRJB9hsoXAaPbstD2Pbd4W
7vLLMBqA6nSMZ7m1p3+1j1pmd4Dx1P+ysMcNEgEPbczUAQxwFLAFVO/Xz8RmTEVo
3ugClQfkiU1MVAUAlWpemL9+PnzXtbElmx6uyx7xHhE5w+cWcYVmSGJtywhdyreN
CXX84DRYCrD8cuOSLRelL+mV332wWrljfAIr+VezaFXMTy1yMUw8AtBs061B1Nnk
w9awTk1/iokX6NNPSXNq+uLaNk3SkMxnBwI7i4dUORof0IK4FYmiEDvli2T22Yw6
6xdcHKxuxmZmM51MD+t9IkQl5Q==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:14 2026 by rpki-client