
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
File: bb1cTQEh_LMY54xFG29WcyCYYAI.mft (raw, json)
Hash identifier: EJUQFfcnfspUVV/F681uK9r8y29ZXmXYAP183VGlCuE=
Subject key identifier: AA:EE:3C:5D:55:60:34:84:06:D4:5E:CB:0D:95:1B:E3:17:2A:09:53
Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
Certificate issuer: /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Certificate serial: 04D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
Manifest number: 0492
Signing time: Wed 21 Oct 2026 00:16:46 +0000
Manifest this update: Wed 21 Oct 2026 00:16:46 +0000
Manifest next update: Wed 28 Oct 2026 00:16:46 +0000
Files and hashes: 1: bb1cTQEh_LMY54xFG29WcyCYYAI.crl (hash: rcgph0uWQKgbR+Q/2EOZyPm64+iOztfovtU/Vu4CM9A=)
2: AD17704445F611EE97DF317CC4F9AE02.roa (hash: /vhmP+Y6Yb84j9vhzg0Zbk6HCi7aZS+Km8vmqSzsrmM=)
3: 943D15902D1011EFBBEBA67BC4F9AE02.roa (hash: DqvdHy0dVK5CWNPfPNrFUaz/YCxyxg+f1hCph6DAQYE=)
4: 9B0C244C73B611EEB18A0385C4F9AE02.roa (hash: tBey+DH64+Kn32UVWimcmMh2WoGFqT18gD06i2GEZsU=)
5: AEE9F9E6326011ED9031BC4FC4F9AE02.roa (hash: r+lrx7WpAI1BilPAcnEksEUaCu2KnCEQLhymAPB2i1s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 00:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1235 (0x4d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Validity
Not Before: Oct 21 00:16:46 2026 GMT
Not After : Oct 28 00:16:46 2026 GMT
Subject: CN=6ad8046e-0c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7b:c8:27:53:49:5f:c5:60:70:9f:36:29:64:
a1:d4:4b:85:32:33:b4:25:dd:0c:44:3c:6a:79:44:
dc:92:d8:49:39:2d:0f:0b:0e:8c:31:15:43:ce:02:
c8:ec:95:43:1c:df:54:b8:ac:27:43:5d:13:3e:69:
78:2d:e8:68:3e:d2:a7:0e:a4:ba:ce:78:e1:dd:3e:
13:a0:56:02:b0:ed:7a:b0:98:2d:43:49:e0:b3:60:
74:26:d1:51:f8:3f:51:61:87:c3:95:5e:6b:cd:67:
e9:c4:38:af:cf:d2:3c:be:04:ff:19:a2:3b:ef:34:
90:85:8b:8e:6a:88:e9:75:2e:68:4c:6e:61:62:0b:
8b:f4:eb:d4:80:b7:73:8a:3f:b3:8d:fd:62:6d:a1:
f3:26:7b:0f:83:c7:15:21:66:bb:61:2a:06:e1:3f:
ed:3d:c3:eb:ec:77:48:43:c3:8e:bf:0e:76:5d:7c:
c3:65:a6:55:8d:69:01:00:84:44:80:2f:9f:49:a0:
86:5a:78:be:70:56:f8:51:91:44:cc:5d:86:f6:b6:
6a:64:71:b7:e3:49:73:8d:5e:82:ba:27:ad:1b:08:
dd:68:aa:39:51:9d:2d:91:d3:6c:3c:a3:43:fd:a7:
ba:bb:31:01:b6:d9:95:df:5b:70:46:27:9f:54:ac:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EE:3C:5D:55:60:34:84:06:D4:5E:CB:0D:95:1B:E3:17:2A:09:53
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:b1:15:99:e6:ea:74:1a:7d:40:fb:35:ab:cb:a3:47:ba:70:
45:61:4d:39:2f:15:36:e3:7c:88:6c:e1:b9:e8:18:40:bc:7a:
c0:6d:4f:a6:2c:c0:68:a1:0f:75:b5:b0:28:b8:14:5a:db:71:
7c:29:9f:91:a7:36:a6:5b:e3:7b:b3:e2:2d:f4:7d:47:40:00:
d4:a8:6b:4e:a1:60:6b:b7:de:08:b6:28:f1:04:98:0c:35:eb:
ef:22:10:2b:9e:05:a1:71:7e:3a:fe:ba:2c:fc:20:c7:17:1c:
d2:c8:bc:91:29:8f:b1:4b:b2:7a:cd:69:37:ee:e7:db:9f:f8:
fb:92:fd:bf:75:a0:47:11:20:58:5f:7a:2b:56:c0:29:3e:cb:
56:29:71:b6:5b:46:80:11:79:79:08:c1:e8:3f:7e:87:3a:05:
03:89:ee:70:a5:11:48:ba:b5:ea:29:56:3a:fd:f2:cd:22:f7:
f8:2c:15:70:14:e4:6b:54:09:78:bf:fa:ec:ce:aa:72:ca:bd:
4a:d9:6b:28:8f:39:30:72:6e:c2:be:db:28:b1:5b:9c:ef:ee:
d8:0f:74:76:ae:f1:11:c9:62:4a:62:a8:f1:ba:13:db:7d:0e:
b3:de:0a:17:76:b7:d9:98:2e:ab:8b:5a:6b:c1:ff:07:90:07:
51:5e:41:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:08:38 2026 by rpki-client