
$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
File: bPH0dvRFFGbI_SbiFvMnbMFeLho.mft (raw, json)
Hash identifier: 4EIjKOu+CwpWncnkrn1dx40ZEWgh84crgDxzAu9H/zs=
Subject key identifier: 8B:55:57:47:FE:87:8F:C7:B1:9D:67:0B:D2:38:2F:A5:6C:C8:83:26
Authority key identifier: 6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A
Certificate issuer: /CN=A91529DF/serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
Manifest number: 2E
Signing time: Wed 11 Mar 2026 07:35:30 +0000
Manifest this update: Wed 11 Mar 2026 07:35:30 +0000
Manifest next update: Wed 18 Mar 2026 07:35:30 +0000
Files and hashes: 1: bPH0dvRFFGbI_SbiFvMnbMFeLho.crl (hash: HY5/MDBXjn0BbOCXtBIXPyEMQTj5G06PuW9tAvprCbc=)
2: E9C84708F67911F0B1D76CE5736F56BC.roa (hash: B9uNDvU5cJoDVtHMnMwD+CGmLLX1Ekokgd9afDF1IlY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl
rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 07:35:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91529DF, serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
Validity
Not Before: Mar 11 07:35:30 2026 GMT
Not After : Mar 18 07:35:30 2026 GMT
Subject: CN=69b11b42-c9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f9:a6:19:1c:86:f0:e1:70:49:7c:43:b7:d7:
8b:c0:ae:f1:54:db:36:82:64:42:8d:4b:93:41:b6:
8c:0b:d4:7e:cd:bf:24:6e:73:af:04:2a:30:f8:28:
48:44:46:24:f8:75:12:a5:5f:a0:b4:d2:3a:83:9d:
67:8c:83:ba:e7:57:01:b8:c4:08:7e:a1:b2:46:33:
eb:55:77:18:9c:59:26:ac:6b:de:a6:04:ea:ef:ec:
f8:d1:de:85:02:ba:b2:e1:42:9a:30:ab:38:eb:f3:
95:66:3c:aa:b0:fb:bf:a2:9f:70:97:4c:44:6a:3b:
d1:5e:e6:b2:29:e4:98:0c:4e:4c:22:93:76:c7:e6:
72:0d:3d:9a:5a:fe:9b:19:44:a9:46:e1:ff:2c:8f:
7a:61:f8:15:7c:e8:12:33:14:32:23:2c:55:dd:59:
c5:d9:19:98:0a:8c:b2:f3:ec:b1:bf:a7:74:d8:21:
28:da:d5:ed:07:47:e0:98:25:7c:0f:0a:41:9a:d8:
1a:3d:5d:28:f1:5d:8e:19:79:e9:ea:56:3a:84:e9:
2b:1d:3e:e7:33:39:6b:82:5e:1c:13:62:a7:0d:c2:
93:71:df:e3:d5:ee:75:0d:48:59:9f:2c:26:83:3e:
9a:c9:4d:91:94:36:3b:29:46:3a:45:2c:71:80:93:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:55:57:47:FE:87:8F:C7:B1:9D:67:0B:D2:38:2F:A5:6C:C8:83:26
X509v3 Authority Key Identifier:
keyid:6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:b7:8e:2d:c7:c3:45:97:a2:4d:28:97:53:4a:c0:26:02:f0:
b8:6d:79:0c:4b:cc:19:eb:ef:69:64:15:51:bb:a8:f4:b0:63:
d8:4d:c3:93:3b:7e:fb:54:e9:9f:db:cb:c7:a6:e4:4e:b8:24:
bf:c2:84:88:48:d2:49:e2:a1:87:20:bb:c1:f8:82:99:35:6a:
fb:6b:11:a9:de:ec:a5:ce:e6:e0:22:f0:ce:3c:67:04:36:cd:
ba:2b:77:7f:c6:33:08:d5:3c:1d:33:68:08:46:0b:c6:ab:fb:
c9:f4:fe:84:b2:0c:e8:32:55:0a:02:4f:d9:99:f5:12:ae:3c:
3b:47:54:24:b0:6d:14:b3:84:2a:b0:6e:c1:2d:ec:f1:8e:e0:
dc:f9:91:df:e7:56:34:95:04:d2:8e:06:37:e0:0e:06:6a:4a:
ae:73:60:2f:ce:bb:23:2b:e5:b1:70:1f:3b:29:2b:96:bd:79:
14:bb:6c:e2:a9:55:43:34:f9:bc:29:4f:a9:06:7f:e9:be:60:
76:e4:d9:ab:a5:bd:4b:50:de:33:df:d0:ae:6a:59:d7:39:a7:
0d:bf:c0:c8:7c:1c:99:c5:2c:6c:6a:44:d3:bc:11:bd:9e:56:
ee:5e:d0:24:91:1c:4b:52:a8:fd:e7:ec:9a:32:39:c7:52:ac:
4a:e5:c7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 10:37:58 2026 by rpki-client