
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
File: RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft (raw, json)
Hash identifier: BmVNbtxWAHdy5bszFL3F4FSI6BuxjtOVQwLFZoduCOE=
Subject key identifier: 14:0E:0C:76:1A:1D:8D:73:48:B0:7C:77:6E:31:EA:1D:B3:3B:04:83
Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
Certificate issuer: /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Certificate serial: 082B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
Manifest number: 1040
Signing time: Wed 20 May 2026 21:06:13 +0000
Manifest this update: Wed 20 May 2026 21:06:13 +0000
Manifest next update: Wed 27 May 2026 21:06:13 +0000
Files and hashes: 1: RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl (hash: ECTonbBkb+2VNtvmz/iJpuTfSqhH97Qx5RsYbOLk51s=)
2: 84FDF25A396711ED8AF52966C4F9AE02.roa (hash: jUqnFx87IlStP4kkY9M0idgA/Hwc78g7kwMihGngNEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl
rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:06:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2091 (0x82b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5C49, serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Validity
Not Before: May 20 21:06:13 2026 GMT
Not After : May 27 21:06:13 2026 GMT
Subject: CN=6a0e2245-cb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c7:f9:34:14:3f:db:fc:e6:aa:41:ea:b0:ba:
84:d2:2d:a8:3c:78:ba:b3:31:61:ee:8d:83:2e:2e:
7c:99:82:71:6a:bb:9e:27:52:88:ea:ae:1f:ab:31:
d0:e2:e2:02:be:a2:98:68:e1:fe:88:6c:e3:ab:b1:
33:ea:50:38:dd:fc:20:f6:12:3d:50:74:35:75:d0:
96:bc:70:46:e7:20:bd:6d:21:c8:ec:0a:c2:e6:46:
2d:7f:9a:cd:e1:38:22:7c:bd:64:91:47:b0:24:1a:
2f:a3:a7:6e:c6:b8:5c:c6:a8:52:2a:e9:af:94:81:
3b:a3:63:39:66:29:06:b6:e7:6f:4e:07:cf:1d:b1:
5d:80:82:fc:7b:cc:1b:1c:fa:39:c1:7c:8d:50:47:
18:df:1b:74:70:88:c5:c3:4c:13:f7:da:b7:27:a0:
ae:63:94:eb:73:25:04:15:2e:cf:5a:02:8a:bb:dc:
01:c4:c2:e4:89:ef:5f:26:c5:22:e7:70:4a:83:0b:
50:09:af:e9:f4:09:a3:f8:8d:8a:a4:fa:9f:dd:87:
e9:e2:ac:7a:d4:cb:24:66:7f:51:9a:8f:d3:85:38:
57:87:e8:08:2e:2b:a3:ca:0b:7c:92:7a:2c:2d:88:
28:26:94:ee:e5:58:62:ba:81:85:61:e8:bb:bc:9d:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0E:0C:76:1A:1D:8D:73:48:B0:7C:77:6E:31:EA:1D:B3:3B:04:83
X509v3 Authority Key Identifier:
keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ce:d4:fe:f5:3c:02:c3:e7:74:74:1e:23:39:58:d0:e8:aa:
33:8c:84:8b:57:a4:8c:0a:34:a2:fe:97:64:40:0a:52:08:7e:
0f:15:14:0b:00:64:5b:7b:08:eb:43:c1:42:ec:39:55:0b:8f:
06:d2:c9:98:f8:00:20:88:4c:ca:82:1d:67:ff:91:bf:c0:b4:
f2:30:cb:69:4e:64:31:d6:b3:cb:0d:25:63:1d:31:cd:44:03:
3a:2b:2a:b2:21:48:fa:ca:79:72:71:34:20:6c:5d:ac:1b:f1:
45:31:1c:4c:94:f7:67:6b:22:83:26:c6:71:51:61:0c:77:f4:
21:ae:60:b0:0f:b4:6d:5f:ec:05:9c:e5:f5:89:bb:fb:82:61:
22:d5:6d:2f:d2:e6:47:89:d4:5e:fd:30:b0:51:ca:f0:24:94:
cf:95:1e:c2:72:25:a6:78:e5:16:e2:e6:1e:d0:96:1d:d5:6d:
f3:5c:64:44:18:35:8f:08:8b:b7:07:4e:13:04:f4:6a:34:50:
d6:3e:51:fa:a9:47:e5:77:03:f7:68:43:6d:fe:72:a8:83:6d:
94:b9:e9:bb:e9:0f:65:1d:fe:05:ed:62:5f:e8:b8:71:a6:2e:
b6:9a:7c:15:55:75:1e:22:f2:bf:41:71:ba:6e:9b:42:2d:0d:
ec:88:08:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:02 2026 by rpki-client