
$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
File: bPH0dvRFFGbI_SbiFvMnbMFeLho.mft (raw, json)
Hash identifier: MTODsAK8iRv1eGqqI6OlHAF7H6oVN/F+gcr9e3EYWbM=
Subject key identifier: 68:90:99:3E:90:A8:A4:A9:65:41:23:DD:12:5B:C9:ED:2B:69:02:F3
Authority key identifier: 6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A
Certificate issuer: /CN=A91529DF/serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
Manifest number: 46
Signing time: Mon 27 Apr 2026 08:24:15 +0000
Manifest this update: Mon 27 Apr 2026 08:24:15 +0000
Manifest next update: Mon 04 May 2026 08:24:15 +0000
Files and hashes: 1: bPH0dvRFFGbI_SbiFvMnbMFeLho.crl (hash: 96Bt8OJphUwPG6vEsYuRLPMUrR4JKYBmnGjIWbADMpQ=)
2: E9C84708F67911F0B1D76CE5736F56BC.roa (hash: B9uNDvU5cJoDVtHMnMwD+CGmLLX1Ekokgd9afDF1IlY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl
rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 08:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91529DF, serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
Validity
Not Before: Apr 27 08:24:15 2026 GMT
Not After : May 4 08:24:15 2026 GMT
Subject: CN=69ef1d2f-baf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f9:36:a5:81:a0:db:34:a4:cc:8a:7e:d8:e1:
45:34:03:9e:a2:2a:96:1b:e3:a0:de:60:1b:1f:86:
91:50:68:6d:ae:7e:97:22:b6:c0:c5:c9:43:30:e8:
e7:f9:c7:31:8a:2a:a4:fa:cb:36:8a:b2:a0:2d:e5:
ad:0d:68:2b:17:10:c8:7f:89:d8:be:e1:bf:e0:18:
7d:84:05:b5:29:88:7d:77:72:78:28:cb:3a:b1:7d:
7d:96:a7:c2:a9:fb:74:7a:ec:cd:92:76:fd:0e:71:
6f:5c:ef:aa:67:7a:1a:c7:12:ca:06:62:7b:7d:24:
28:2c:23:47:b6:ce:86:4c:ec:ba:8a:f6:ac:5e:6c:
59:f0:04:48:36:cf:a1:db:36:c9:dc:7f:1b:6d:9d:
4b:b4:f3:a4:9e:45:bc:04:47:8b:bc:c7:74:1c:56:
48:fe:82:f1:8e:0a:e8:fd:30:fa:d4:29:3f:84:ae:
3a:e4:1a:3d:01:43:57:bb:54:69:5e:b1:2b:a3:1e:
a0:87:21:74:1f:db:84:3b:22:dc:84:fd:bd:36:27:
33:5c:54:02:1f:54:9e:c3:06:fd:88:05:0f:38:bd:
75:ad:69:59:83:d3:b6:8e:d4:85:71:e8:35:02:62:
3e:7d:30:06:a9:8f:48:d7:39:19:c4:c8:de:b2:6b:
0a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:90:99:3E:90:A8:A4:A9:65:41:23:DD:12:5B:C9:ED:2B:69:02:F3
X509v3 Authority Key Identifier:
keyid:6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:59:f6:c1:e4:9c:97:2e:75:25:58:25:f2:51:e0:15:1f:30:
77:15:8f:aa:f7:c4:64:97:a6:fe:86:b3:3d:26:f8:e2:0d:ea:
59:20:c3:73:1f:2d:46:1c:b8:d9:5d:6b:59:8e:02:a6:5c:e7:
1c:00:29:3d:8d:e1:02:82:7b:37:5e:a5:33:9f:a8:04:d4:40:
88:9a:d0:ab:80:ed:aa:dc:83:ff:cb:4f:79:c5:8a:9c:6f:ed:
0e:e6:d0:a1:d8:e7:16:5a:95:1a:af:e8:04:9f:9e:c3:48:3a:
1d:6e:df:69:81:7f:c2:00:67:13:3c:24:7d:63:61:a4:1d:29:
0e:3f:4c:76:6b:a9:77:e7:cb:66:37:2b:8b:2e:c3:3f:51:68:
3d:97:1b:fd:b8:10:38:24:4c:c3:15:d6:23:05:b7:40:7d:f5:
f6:fe:8b:9f:98:7b:03:89:1b:05:3b:46:89:4d:14:d4:40:9b:
6b:00:5c:d2:0f:66:5b:93:f1:73:63:c9:0a:5a:6a:7c:72:6b:
2d:b9:f3:5c:1e:56:5c:38:f1:e1:f8:65:fc:59:dd:77:e1:5d:
9b:2c:10:6d:8b:b4:a2:83:9d:51:f7:e1:e0:c1:c0:cb:08:95:
cb:14:69:80:6e:d1:7d:e2:8a:58:89:1d:67:79:25:ff:73:4a:
d1:37:4e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:29:58 2026 by rpki-client