
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
File: bODpSXEbID5KyyK2gPP_9H7RbGE.mft (raw, json)
Hash identifier: /j43/c5/gG9d53/QtvdrTSiDD4/mAHDXZPaQ91nCjZ0=
Subject key identifier: 3D:96:9A:0F:4C:A3:FC:84:58:2C:3D:19:23:0C:FF:49:D6:16:1F:B5
Authority key identifier: 6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61
Certificate issuer: /CN=A91BDC3F/serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
Manifest number: 0173
Signing time: Sun 05 Apr 2026 04:17:30 +0000
Manifest this update: Sun 05 Apr 2026 04:17:29 +0000
Manifest next update: Sun 12 Apr 2026 04:17:29 +0000
Files and hashes: 1: bODpSXEbID5KyyK2gPP_9H7RbGE.crl (hash: vKyIRiDMgqmkgJWDAgBoKFF4wC6wOgISDVNpecbe5M8=)
2: 7980C32AA71B11EFA8320136C4F9AE02.roa (hash: fTwgf/z1JlaZSIUWhcpYQ8BO2OuYl7hP0D0SmMwZrI4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl
rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDC3F, serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61
Validity
Not Before: Apr 5 04:17:29 2026 GMT
Not After : Apr 12 04:17:29 2026 GMT
Subject: CN=69d1e259-e1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:3c:ce:f6:df:cd:27:f0:dd:e1:05:05:dc:
b9:04:46:04:3a:1f:a8:91:b4:31:6c:2d:9e:a0:c5:
fe:0c:42:f3:b7:6a:ce:f3:f7:86:2e:32:41:08:77:
25:3b:72:04:b6:91:16:f1:7e:5a:da:d4:26:a3:dd:
7b:2d:60:1b:a6:4c:28:34:a0:e2:34:85:ad:ba:30:
ba:bb:fa:47:81:e0:10:ad:95:eb:7e:40:1d:de:cc:
58:a3:06:2e:c2:85:02:df:d2:4e:67:ae:3c:76:d2:
47:10:5d:1c:95:9b:2e:79:b5:3b:43:a4:37:13:cf:
de:2f:2b:90:51:b6:8a:5f:fd:f1:42:af:19:bc:8a:
cd:47:65:c9:60:39:61:37:e9:29:72:65:a4:19:49:
6e:76:ad:d2:0b:a3:0e:39:f1:c2:23:1c:24:ec:58:
8e:61:64:e5:63:5e:58:e8:66:dd:1f:f0:e1:1e:e5:
6d:a6:3f:07:bb:1e:2a:55:b8:d4:1c:ee:5c:76:d3:
82:d1:c6:27:cd:4b:bd:f3:f1:3d:2e:58:4f:da:72:
cd:47:66:b4:84:32:44:f6:76:65:09:17:8f:be:a1:
ad:48:67:a8:6f:b3:01:8b:9b:e4:d0:81:05:c5:22:
90:ba:b3:53:3e:b1:50:d0:72:05:4f:fe:ff:43:bc:
75:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:96:9A:0F:4C:A3:FC:84:58:2C:3D:19:23:0C:FF:49:D6:16:1F:B5
X509v3 Authority Key Identifier:
keyid:6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:95:fb:9d:69:8f:5a:8d:0f:c5:79:df:f3:69:ca:9d:a6:f7:
12:70:08:a5:13:04:df:f5:56:8c:89:ea:5c:14:a0:69:bb:2b:
a1:5b:23:8b:f3:7c:22:ee:06:83:67:d0:f7:a0:06:40:d7:37:
77:d5:2d:4f:a2:79:31:81:82:37:7e:73:c5:80:dc:7b:66:c7:
68:ab:a4:62:37:d5:8c:f4:4a:6e:b8:70:ab:7f:dc:71:01:d1:
0e:1e:a9:af:ff:cc:7d:e7:d7:1d:12:02:6a:d3:d8:df:de:c8:
08:18:9c:e5:d1:dc:8a:e6:9b:ef:f0:d3:e9:c2:27:71:c8:9b:
ac:db:14:68:70:46:4a:af:f0:5b:a4:df:ae:47:91:79:6a:f9:
2c:76:2e:1d:8b:ab:09:85:2b:be:28:c3:c8:41:b6:cf:7b:90:
0a:aa:34:33:fa:6a:5c:74:de:cf:ec:6d:2b:db:03:d0:3f:68:
f4:e2:98:57:04:23:e7:9c:40:54:a3:27:40:0f:10:fb:ba:73:
75:15:b9:28:30:f0:ae:19:18:81:aa:00:cf:48:24:84:c0:76:
20:ef:5d:d9:96:21:96:ce:69:d9:a5:7f:19:c9:a9:66:c3:57:
33:39:7e:c9:44:f3:2f:3c:02:0f:f6:87:b5:52:35:da:93:aa:
17:58:a5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:06 2026 by rpki-client