
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
File: 1vBnJNCWhwftHfr9uyJYArPaoZQ.mft (raw, json)
Hash identifier: a0Y6XlF7oBdOoqRVBNlsZDAqnbm5tlgcXU6hq+8PrI0=
Subject key identifier: 84:41:B5:75:1A:FA:60:FC:8E:30:CB:DA:AA:8E:F3:6C:E4:75:E0:74
Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
Certificate issuer: /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Certificate serial: 0317
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
Manifest number: 0309
Signing time: Mon 27 Apr 2026 01:12:20 +0000
Manifest this update: Mon 27 Apr 2026 01:12:20 +0000
Manifest next update: Mon 04 May 2026 01:12:20 +0000
Files and hashes: 1: 1vBnJNCWhwftHfr9uyJYArPaoZQ.crl (hash: Y8ceTnv1bM+1FpEiPpx3zl6Vd2jan4tIEpZYhkeHoco=)
2: 834FFE88679911EEB8243436C4F9AE02.roa (hash: ME7+zEz0Jsw4n7cBlOx4YfFdzfleALyDaomuxZAGAFI=)
3: C965E8C4679911EEB466ED36C4F9AE02.roa (hash: bDrcCfIunOv3Ox8MoCryqHWYdLJQz+jVsJlwtnaxXwA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 791 (0x317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Validity
Not Before: Apr 27 01:12:20 2026 GMT
Not After : May 4 01:12:20 2026 GMT
Subject: CN=69eeb7f4-f294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:3b:f4:39:3d:f7:b0:1c:61:39:f3:7f:55:
e2:98:6f:fe:bf:a7:43:e6:ae:a4:e8:f1:5d:64:56:
2e:fd:25:3f:a2:64:51:2c:30:d2:19:0a:15:13:68:
31:22:66:7c:4c:61:bf:86:27:36:55:14:1a:39:e5:
81:d2:46:1d:79:4b:e3:34:42:c6:b3:eb:e0:f1:29:
3f:79:d8:87:ec:38:11:ee:f2:7e:3b:58:16:89:ba:
9e:fe:7b:09:aa:68:df:44:f7:64:13:d9:3e:b0:ee:
d9:5c:0f:43:9d:1f:23:af:34:81:fa:4c:b2:ba:f6:
a9:d0:98:6f:04:c5:bf:2b:a7:b1:de:de:6a:2b:3d:
c7:30:6e:df:d0:f4:03:a9:89:66:88:44:4b:b1:9f:
0b:f3:de:7c:cb:1e:2e:81:7d:18:3d:f7:f6:05:1e:
da:51:d5:3d:fd:61:19:e5:a3:e1:f7:1f:72:df:93:
c2:60:01:ef:a3:0a:5c:e5:84:56:fb:a6:5a:4c:fa:
62:ed:66:d8:4a:b0:1c:2d:90:bd:cf:a2:02:95:41:
9b:e4:d3:b1:de:c8:6d:5f:4e:9e:c3:50:38:a4:07:
f2:8e:62:95:1b:af:d8:be:bc:b7:7a:0d:f9:12:58:
02:9d:f9:ae:a4:41:06:fb:b3:62:9d:72:12:8b:85:
82:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:41:B5:75:1A:FA:60:FC:8E:30:CB:DA:AA:8E:F3:6C:E4:75:E0:74
X509v3 Authority Key Identifier:
keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:b4:f6:d8:1d:54:6b:fb:46:50:d6:1c:19:97:4e:41:55:ce:
99:b5:7b:fa:d4:88:c0:79:e0:0d:08:85:99:98:1e:b7:d3:ad:
da:68:93:7e:79:67:dd:8a:2c:a0:37:d5:25:ec:06:7b:03:d6:
08:af:37:95:d6:40:0f:3f:c7:83:1c:4a:87:45:00:7c:e0:74:
a1:01:e0:90:87:b6:b0:07:91:32:e9:b5:02:de:51:09:15:3b:
bb:39:94:d7:68:16:96:b1:a4:ef:c2:62:86:fc:ce:de:85:6b:
00:a9:1e:eb:8b:7d:ef:03:b0:ad:92:b8:37:cc:70:92:b6:21:
f0:1a:96:42:8e:ab:44:31:76:84:23:9d:d6:f4:0c:17:a6:93:
d9:44:51:35:15:2f:45:42:6d:0b:51:2d:51:31:72:9f:82:16:
81:05:03:1f:31:9d:b6:e2:57:d9:bb:7e:87:77:e4:76:08:a8:
cd:c3:c6:6a:61:b1:11:15:4f:4f:f4:52:90:62:fb:4a:37:53:
c3:d6:e6:c6:1b:49:df:07:1f:0d:3b:41:7d:ab:30:24:34:b2:
55:44:27:5e:e2:97:d8:7a:1d:f7:2e:91:28:16:ea:62:54:6d:
f0:29:7e:8e:b0:e8:13:aa:80:63:50:8f:ba:2d:77:6e:45:14:
01:bc:31:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 11:38:36 2026 by rpki-client