
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
File: bb1cTQEh_LMY54xFG29WcyCYYAI.mft (raw, json)
Hash identifier: 0Y3n87LM2oMvA78ToKKJ8zA1rqtf8gmQRPjzutrp9fo=
Subject key identifier: B1:8F:5C:97:BE:DE:F3:B6:38:94:46:AF:51:C2:0B:4F:C9:32:7A:DE
Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
Certificate issuer: /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Certificate serial: 0467
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
Manifest number: 0427
Signing time: Sun 29 Mar 2026 00:25:47 +0000
Manifest this update: Sun 29 Mar 2026 00:25:46 +0000
Manifest next update: Sun 05 Apr 2026 00:25:46 +0000
Files and hashes: 1: bb1cTQEh_LMY54xFG29WcyCYYAI.crl (hash: 0m+mW+sBvS2u8ouvXM4N675m37NUff1DYfpMR2AHzyI=)
2: AD17704445F611EE97DF317CC4F9AE02.roa (hash: /vhmP+Y6Yb84j9vhzg0Zbk6HCi7aZS+Km8vmqSzsrmM=)
3: 943D15902D1011EFBBEBA67BC4F9AE02.roa (hash: dPxIUNEqYuFtJskM6HAN9FGSFnQOEAtn06dnZBLnvG8=)
4: 9B0C244C73B611EEB18A0385C4F9AE02.roa (hash: tBey+DH64+Kn32UVWimcmMh2WoGFqT18gD06i2GEZsU=)
5: AEE9F9E6326011ED9031BC4FC4F9AE02.roa (hash: r+lrx7WpAI1BilPAcnEksEUaCu2KnCEQLhymAPB2i1s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 00:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1127 (0x467)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Validity
Not Before: Mar 29 00:25:46 2026 GMT
Not After : Apr 5 00:25:46 2026 GMT
Subject: CN=69c8718a-ce09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:63:fd:53:10:94:cc:4e:c4:6a:cb:76:bb:df:
38:a8:f4:a9:e2:3e:83:46:b6:71:46:36:ac:61:4c:
d1:32:be:8c:18:1e:ee:23:ed:93:d5:96:6e:60:28:
f4:59:e7:e7:1c:61:c8:54:8e:ba:ec:35:a3:c0:af:
84:b0:32:50:e4:79:da:13:6c:b7:4f:50:b1:7e:f4:
7c:f7:2a:a6:9f:ef:9d:d8:60:45:78:c9:26:eb:0d:
1f:a8:68:79:5b:af:96:dd:0a:66:b5:22:7c:04:cd:
c2:95:65:67:7d:85:7b:33:ae:93:8a:65:00:75:7d:
f2:6d:04:57:9d:db:dc:77:ea:c4:80:bc:d7:62:1d:
90:27:13:df:00:16:b8:a4:88:13:7f:5a:5a:d9:37:
f7:3b:f8:f4:11:c2:f7:67:bb:f7:e0:5a:f3:ce:1c:
05:d2:92:ef:27:21:96:14:2d:5f:9b:d7:41:a6:be:
92:31:d2:d6:22:78:ef:7b:c9:5b:09:a8:c1:94:19:
06:9e:ad:52:cb:f4:34:df:31:14:f7:b4:75:33:6d:
c4:6a:c4:55:4f:ec:74:8f:53:3e:f9:ec:28:ac:b8:
d4:b0:7f:7f:02:5c:8d:26:5c:cb:bc:3d:d8:3f:b0:
31:92:6c:57:93:24:aa:ff:f3:48:e0:51:16:1d:2f:
44:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8F:5C:97:BE:DE:F3:B6:38:94:46:AF:51:C2:0B:4F:C9:32:7A:DE
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:2e:d6:c5:88:64:86:81:72:da:3f:f8:79:5f:a4:0f:75:fe:
ef:af:66:6f:34:64:d3:98:96:67:20:75:60:e1:a4:35:35:62:
51:90:45:47:1c:5f:e5:83:83:43:12:b7:0b:10:ac:ca:99:71:
cf:e9:1a:fb:26:fa:3b:d7:8c:6c:92:bf:ba:9d:c2:44:fd:71:
97:79:eb:33:59:08:19:25:57:30:50:c0:3a:a8:a4:f5:ea:52:
09:ef:c8:a5:56:a8:14:20:32:e0:a6:10:99:e7:c9:df:89:f6:
11:8f:7a:33:ea:8b:a7:1c:bb:11:70:db:f0:9b:23:96:73:cd:
df:d5:03:82:fe:89:f1:be:b0:fb:68:8f:3c:a9:e3:02:a2:bf:
16:7a:b2:0b:2e:f4:b8:84:e2:7e:df:fa:e9:ef:5e:d0:f0:b2:
bf:ab:d6:c8:f8:1c:64:7f:3e:50:49:cb:dd:7f:51:91:08:55:
a9:3a:24:73:0f:eb:5d:17:5f:4a:a2:6e:eb:d7:7a:66:25:2b:
3f:93:48:fd:d4:b0:61:96:25:74:ed:9e:7a:a5:c8:d3:40:94:
d6:8e:a2:e5:13:18:84:5f:f3:10:fa:88:36:d5:02:57:6a:33:
f2:10:67:11:3c:45:c1:04:6b:40:e0:ed:85:e0:a6:08:87:a7:
20:90:2d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 06:37:16 2026 by rpki-client