
$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
File: bXwian3LhfL0kha367ANXwOmBcM.mft (raw, json)
Hash identifier: Ndk19cGKgOYJDY28LCv8EaZL/ArxQJX9K4Joh0AkOiA=
Subject key identifier: 5A:37:A6:9A:D0:C8:82:D9:F1:3F:25:13:5D:AD:4B:94:4E:91:3E:5A
Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Certificate serial: 1438
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
Manifest number: 1409
Signing time: Sat 04 Apr 2026 16:50:15 +0000
Manifest this update: Sat 04 Apr 2026 16:50:15 +0000
Manifest next update: Sat 11 Apr 2026 16:50:15 +0000
Files and hashes: 1: bXwian3LhfL0kha367ANXwOmBcM.crl (hash: 9OSogrvudRcPNxqNepUtGwBTsSNnztn9wE8YiK240zo=)
2: 3DC8B712E14411EFBECFB90BC4F9AE02.roa (hash: /opDjyqnkzPqfLmMUvw/7EQ9PTKNpIy/7L1DfTTvO0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5176 (0x1438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91809AD, serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Validity
Not Before: Apr 4 16:50:15 2026 GMT
Not After : Apr 11 16:50:15 2026 GMT
Subject: CN=69d14147-b309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:a9:b4:2c:a4:80:1b:8e:8b:35:80:9e:a0:
f5:1e:0a:1c:8b:cb:d7:dc:5e:e4:38:7b:19:4e:3f:
6b:c3:d7:8c:76:b0:81:63:44:52:58:b4:72:c6:44:
43:f3:dd:13:cd:f0:43:f5:b5:d4:ba:40:c8:63:5a:
55:fd:57:6a:0d:16:43:bb:f7:c3:33:55:bd:bd:e5:
e3:ec:54:c8:07:f0:d0:02:11:af:17:97:e3:82:57:
3b:43:a7:6c:77:cb:7c:d0:0d:87:33:bd:3f:65:a0:
d6:3b:ef:6f:12:24:0c:d4:9b:71:88:8a:0e:df:b8:
62:02:dd:60:83:bc:e5:72:15:7c:a6:ea:34:8f:c2:
52:58:19:70:14:a9:2f:95:09:ce:b9:d4:d4:e8:c8:
b0:d5:6e:24:74:dd:86:f0:07:8c:30:ed:f4:f3:2d:
19:95:ca:58:7d:83:c0:97:fc:7f:2e:92:8c:2f:53:
79:36:e8:cb:c3:01:2e:1e:c9:46:0c:fd:f3:56:1e:
64:3f:5b:69:f3:c1:ba:09:05:82:92:b7:dc:0d:fe:
87:5a:50:30:bd:11:ef:7f:ea:2e:73:08:12:8f:5c:
a7:cb:52:99:59:cb:94:d8:47:06:02:20:c7:36:85:
cf:8b:56:6e:52:36:af:0f:c0:d6:99:f4:f8:6e:4e:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:37:A6:9A:D0:C8:82:D9:F1:3F:25:13:5D:AD:4B:94:4E:91:3E:5A
X509v3 Authority Key Identifier:
keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:4a:a2:3e:9f:e4:e3:8a:4c:37:75:3d:42:09:c0:05:a4:fa:
b2:76:2c:93:0c:f8:87:52:d5:aa:76:3e:c7:3e:f3:3e:5b:1f:
eb:cd:6a:d7:d6:09:6c:44:5a:ac:b4:58:6b:af:9a:14:2c:68:
be:40:96:b2:36:7b:8d:64:d2:69:13:1a:a4:55:02:c3:f4:3a:
6a:0a:bb:44:9e:74:0b:bc:f4:d7:0a:be:c4:6c:e3:cb:7b:e2:
01:47:f6:c0:f6:89:8d:db:cc:fb:d7:78:49:d2:01:92:7e:26:
40:72:fa:14:a8:e8:fa:ee:cd:d3:ba:a9:84:66:aa:eb:99:c2:
11:a7:a1:83:02:b0:4f:fc:68:71:39:43:cd:fd:2c:7c:15:ed:
d3:2e:73:d4:2f:26:5c:8b:64:92:a7:7b:a1:7e:70:c9:f0:ef:
7d:2e:a9:f4:4f:2e:4c:f8:ab:cc:c8:ab:09:8f:a1:c7:c1:4a:
2e:e7:c9:2f:22:67:42:04:0f:25:fe:94:b5:08:98:64:0d:c8:
84:c5:50:28:b2:57:f3:2d:9a:eb:9e:59:33:ae:ad:b7:c2:f6:
93:05:86:75:7e:41:f0:b2:d5:b8:27:26:9f:b0:ce:63:1f:b9:
c9:63:9f:bf:e7:6f:2f:55:be:8f:58:f5:61:e5:29:78:60:fc:
50:ba:36:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:32 2026 by rpki-client