
$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
File: bPH0dvRFFGbI_SbiFvMnbMFeLho.mft (raw, json)
Hash identifier: k8/N2fw+u22YVkdcbwIBm2c4RidNK2kEiDxCa+Z5tnM=
Subject key identifier: 9E:69:D0:AB:B0:EA:82:69:D3:BE:E5:2C:C8:80:4A:A6:A1:2C:4C:BF
Authority key identifier: 6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A
Certificate issuer: /CN=A91529DF/serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
Manifest number: 72
Signing time: Sat 25 Jul 2026 09:49:37 +0000
Manifest this update: Sat 25 Jul 2026 09:49:36 +0000
Manifest next update: Sat 01 Aug 2026 09:49:36 +0000
Files and hashes: 1: bPH0dvRFFGbI_SbiFvMnbMFeLho.crl (hash: +z6E+U4P5jY0DP0fWE4a9N+fqZEsq3B/OX1Pvh1LNCU=)
2: E9C84708F67911F0B1D76CE5736F56BC.roa (hash: B9uNDvU5cJoDVtHMnMwD+CGmLLX1Ekokgd9afDF1IlY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl
rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Aug 2026 09:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91529DF, serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
Validity
Not Before: Jul 25 09:49:36 2026 GMT
Not After : Aug 1 09:49:36 2026 GMT
Subject: CN=6a6486b1-6ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ed:d1:5e:3e:eb:a5:9e:19:81:88:32:33:13:
82:0f:ec:d9:75:f8:6f:9c:db:28:2d:41:52:a0:fe:
91:8a:e8:43:a9:d4:c2:2d:9a:30:5a:79:b3:39:28:
b9:9a:6d:87:0c:7b:48:86:a4:6b:f7:ce:84:2a:80:
21:98:66:c6:fa:7a:f7:0c:fa:ef:bc:1c:dc:f8:05:
dd:f5:89:ab:41:19:18:89:24:5d:e1:e3:47:b4:ed:
ea:3e:56:07:97:bd:53:dc:9f:4c:4d:1d:25:95:d7:
29:f5:dd:f1:6c:0f:ea:41:17:42:d4:7c:a8:60:4f:
4b:c8:1f:79:07:55:4c:8d:7a:13:1b:4a:08:26:13:
0e:bd:c7:a6:08:01:f6:46:fd:0f:04:1c:71:5c:e8:
b0:06:4c:05:a8:1a:92:68:8a:de:d4:aa:fb:fe:79:
be:8e:47:4d:f5:b9:6b:0f:72:0d:8c:07:69:6c:47:
c0:a1:b4:86:d3:1d:3e:e8:93:87:fd:05:9e:e7:c4:
6a:ed:17:55:ed:cb:2c:63:82:b4:bc:2f:d8:40:16:
6f:09:8a:1c:eb:5d:e6:ce:fe:da:2f:40:5f:69:e8:
56:db:73:30:22:a8:c6:8f:69:cc:a5:42:b1:de:d1:
57:7b:27:95:a6:b5:1d:05:d3:fc:d8:91:4c:8e:01:
5f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:69:D0:AB:B0:EA:82:69:D3:BE:E5:2C:C8:80:4A:A6:A1:2C:4C:BF
X509v3 Authority Key Identifier:
keyid:6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:52:d0:c6:87:88:d7:b2:0b:82:ec:7e:8b:68:59:74:7d:f7:
2a:5b:2e:b5:a3:73:79:48:ff:cf:a4:94:3c:1a:61:38:e0:ed:
e2:74:c8:6b:c2:43:0c:92:20:a7:1b:ca:aa:76:37:4c:bd:7f:
59:de:d3:f2:18:7b:bf:8f:bf:86:ac:81:d0:c1:ea:f1:9d:64:
25:0b:b8:0d:50:d7:1d:b9:01:4b:d2:42:92:ea:a5:f9:6d:19:
41:07:06:f9:95:65:be:26:b6:31:50:1a:6a:3f:07:04:e3:d2:
3b:5d:5c:8d:d7:93:93:d8:92:34:42:17:fd:12:d7:8e:c5:f1:
32:4b:90:d1:ab:c9:ce:63:a3:cd:3a:cd:f4:4b:d4:2b:7a:f0:
ce:1f:72:ad:ad:53:a3:ea:aa:61:4c:bd:2b:96:10:56:90:4c:
a7:78:a5:2f:08:5c:6a:8d:53:03:6e:0f:2a:33:ca:47:b7:a1:
a5:10:88:bc:f1:07:8b:7a:11:94:fa:eb:1c:37:2e:35:e8:a0:
5a:e7:07:fd:0b:59:8e:2e:0d:7a:d2:b0:f4:0d:90:67:84:84:
ff:5f:cb:83:8e:96:05:9a:90:09:85:df:05:cb:13:00:51:a3:
5e:26:b2:da:4e:08:7a:01:42:43:7b:92:3d:92:a2:6f:e1:0b:
93:05:e0:d1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MjlERjExMC8GA1UEBRMoNkNGMUY0NzZGNDQ1MTQ2NkM4RkQyNkUyMTZGMzI3NkND
MTVFMkUxQTAeFw0yNjA3MjUwOTQ5MzZaFw0yNjA4MDEwOTQ5MzZaMBgxFjAUBgNV
BAMTDTZhNjQ4NmIxLTZhZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCN7dFePuulnhmBiDIzE4IP7Nl1+G+c2ygtQVKg/pGK6EOp1MItmjBaebM5KLma
bYcMe0iGpGv3zoQqgCGYZsb6evcM+u+8HNz4Bd31iatBGRiJJF3h40e07eo+VgeX
vVPcn0xNHSWV1yn13fFsD+pBF0LUfKhgT0vIH3kHVUyNehMbSggmEw69x6YIAfZG
/Q8EHHFc6LAGTAWoGpJoit7Uqvv+eb6OR031uWsPcg2MB2lsR8ChtIbTHT7ok4f9
BZ7nxGrtF1XtyyxjgrS8L9hAFm8JihzrXebO/tovQF9p6FbbczAiqMaPacylQrHe
0Vd7J5WmtR0F0/zYkUyOAV/TAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnmnQq7Dq
gmnTvuUsyIBKpqEsTL8wHwYDVR0jBBgwFoAUbPH0dvRFFGbI/SbiFvMnbMFeLhow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyOURGL0VBQ0NBOTE4RUQy
RTExRjA4MEM0NjAzMjQ3NkY1NkJDL2JQSDBkdlJGRkdiSV9TYmlGdk1uYk1GZUxo
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYlBIMGR2UkZGR2JJX1NiaUZ2TW5iTUZlTGhvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy
OURGL0VBQ0NBOTE4RUQyRTExRjA4MEM0NjAzMjQ3NkY1NkJDL2JQSDBkdlJGRkdi
SV9TYmlGdk1uYk1GZUxoby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAlUtDGh4jXsguC7H6LaFl0ffcqWy61o3N5SP/PpJQ8GmE44O3idMhrwkMMkiCn
G8qqdjdMvX9Z3tPyGHu/j7+GrIHQwerxnWQlC7gNUNcduQFL0kKS6qX5bRlBBwb5
lWW+JrYxUBpqPwcE49I7XVyN15OT2JI0Qhf9EteOxfEyS5DRq8nOY6PNOs30S9Qr
evDOH3KtrVOj6qphTL0rlhBWkEyneKUvCFxqjVMDbg8qM8pHt6GlEIi88QeLehGU
+uscNy416KBa5wf9C1mOLg160rD0DZBnhIT/X8uDjpYFmpAJhd8FyxMAUaNeJrLa
Tgh6AUJDe5I9kqJv4QuTBeDR
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:03 2026 by rpki-client