
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
File: bXwian3LhfL0kha367ANXwOmBcM.mft (raw, json)
Hash identifier: wuesl/GzgtKeLdUqn8BqXACQVEAmQOI7Hhouad/omCc=
Subject key identifier: 81:28:72:51:20:DD:6A:EC:13:09:D6:19:83:0E:9F:EF:F6:5F:70:23
Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Certificate serial: 149B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
Manifest number: 146A
Signing time: Sun 04 Oct 2026 16:55:09 +0000
Manifest this update: Sun 04 Oct 2026 16:55:09 +0000
Manifest next update: Sun 11 Oct 2026 16:55:09 +0000
Files and hashes: 1: bXwian3LhfL0kha367ANXwOmBcM.crl (hash: qkB9V134Lc79tFw1ynG7mvhpG5tdzuh9dOQKR4PJBnA=)
2: 3DC8B712E14411EFBECFB90BC4F9AE02.roa (hash: oW5xPqhnSUJe48jQjGtylEFHBsxZeS24fYoONgDBpQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5275 (0x149b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91809AD, serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Validity
Not Before: Oct 4 16:55:09 2026 GMT
Not After : Oct 11 16:55:09 2026 GMT
Subject: CN=6ac284ed-bfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:79:a4:84:d1:e5:66:e6:f7:4b:f1:52:d8:
fa:ec:0a:6a:b6:ff:b3:c7:cc:9c:33:27:ef:d3:4f:
19:ca:41:f9:7d:3c:2d:eb:45:c6:af:ef:02:9f:58:
d2:14:c4:49:55:3f:9e:35:3f:97:c3:fc:42:33:1c:
6e:ff:76:8d:00:5f:3b:49:36:16:42:f1:98:4f:ae:
24:86:e4:85:42:8e:6e:ab:b2:71:13:f0:f5:49:a6:
fa:a8:9b:45:3f:f7:71:b1:f3:2b:93:2e:ef:83:ef:
55:f5:4d:1e:ed:d7:2b:e9:73:f3:0a:ef:56:e7:71:
e2:d0:64:a4:55:dd:a9:ec:fa:51:aa:fb:70:87:d9:
06:4b:b8:62:25:a2:79:24:42:6f:cc:c7:43:a2:6a:
24:32:03:0a:e8:1c:bc:68:1e:6f:ca:de:53:59:12:
d1:04:60:89:4b:e8:41:c1:de:f5:8c:61:2a:46:1a:
78:d2:33:b9:a1:a0:70:08:47:d7:66:11:7e:9a:10:
7a:5e:49:37:ed:e0:80:fe:7a:8a:fb:f8:bf:a7:2b:
8f:2e:af:ba:c2:11:99:f3:64:83:3b:f4:57:be:02:
12:f9:31:33:9a:98:56:8e:4e:52:90:35:5d:c8:7b:
96:d7:da:a6:fa:e7:85:77:b4:92:4a:fb:99:14:b6:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:28:72:51:20:DD:6A:EC:13:09:D6:19:83:0E:9F:EF:F6:5F:70:23
X509v3 Authority Key Identifier:
keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:73:02:58:c1:45:97:d7:02:66:41:5c:22:cf:20:7c:d7:91:
e6:9f:ac:fb:9d:6b:60:8c:02:d8:11:3a:71:cf:48:30:d6:b9:
cc:6b:f3:10:aa:ba:d9:00:f2:fb:79:9d:a6:e8:dc:6d:e1:75:
c6:56:3d:fc:76:3b:61:4b:8e:9a:a7:dd:8a:2b:fe:0e:45:0a:
06:29:15:0a:16:a3:12:f2:1d:13:ad:40:2c:85:63:25:ca:d6:
a0:be:c0:fc:15:92:fe:f9:9c:3f:7d:c4:7e:e6:a1:10:b0:05:
d9:de:35:09:84:e9:6f:ea:03:0a:00:8d:66:84:46:7a:63:52:
2a:cd:71:01:1c:8c:5d:1c:b3:07:0d:db:1b:c8:5d:e7:16:92:
f8:ae:45:85:be:ec:d5:36:a0:c3:f7:67:06:94:e6:2c:f0:ef:
fc:36:96:58:d1:27:62:63:a9:4c:c3:b8:d5:2a:00:df:e3:51:
b1:a3:4a:48:2f:42:ee:86:38:20:40:bb:2e:e8:03:08:c0:08:
6a:5b:8c:15:4a:1e:7e:53:6b:5f:e5:6c:31:2e:69:9a:e0:18:
76:de:94:1e:48:cf:9f:19:4f:de:13:58:46:ba:4f:1a:81:35:
38:d7:0a:61:84:ce:8e:07:d4:8c:b8:d2:10:65:ea:bb:e3:66:
2d:d5:23:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:58:25 2026 by rpki-client