
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
File: 1bm7ozBeiMAA9WKTnROLpQYieyo.mft (raw, json)
Hash identifier: mpWlb397ePb+C1pYr/E1Z2JZ9dny1W/RPlzQah7JFU8=
Subject key identifier: 6C:CD:75:EF:DF:E1:9F:DF:86:50:3F:E8:D5:F2:76:52:3C:06:1D:3A
Authority key identifier: D5:B9:BB:A3:30:5E:88:C0:00:F5:62:93:9D:13:8B:A5:06:22:7B:2A
Certificate issuer: /CN=A91EAF4B/serialNumber=D5B9BBA3305E88C000F562939D138BA506227B2A
Certificate serial: 0C08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
Manifest number: 0DF7
Signing time: Sun 04 Oct 2026 19:00:07 +0000
Manifest this update: Sun 04 Oct 2026 19:00:06 +0000
Manifest next update: Sun 11 Oct 2026 19:00:06 +0000
Files and hashes: 1: 1bm7ozBeiMAA9WKTnROLpQYieyo.crl (hash: aL0VKB8VW0ea4kOui/0mQVVpRsMp0vrTVVBjLgL6aro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.crl
rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3080 (0xc08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAF4B, serialNumber=D5B9BBA3305E88C000F562939D138BA506227B2A
Validity
Not Before: Oct 4 19:00:06 2026 GMT
Not After : Oct 11 19:00:06 2026 GMT
Subject: CN=6ac2a236-6b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:35:27:81:9b:0d:ed:82:84:93:75:d5:27:09:
72:6c:f5:9f:49:26:af:9b:c2:19:ac:09:bf:36:e7:
26:7a:a9:86:c3:f4:8c:29:6b:a8:74:5b:d1:0b:85:
51:65:5b:59:78:b0:62:66:be:99:a2:0d:7f:ff:a1:
bb:b6:4c:e3:79:95:e9:9c:e7:86:9c:ac:32:29:e1:
42:f8:ba:e7:c0:5b:bc:c8:06:4e:78:68:4f:51:87:
47:be:ba:c8:8f:db:8e:16:6b:15:82:79:e3:bb:e6:
1b:7a:9b:cd:fe:7c:2e:9a:fe:9c:3e:44:43:d0:04:
cd:d6:c1:8b:dd:43:e6:e6:70:60:49:42:7e:c8:14:
e9:90:53:ce:cc:50:41:0a:3b:4b:69:5e:03:04:cf:
6c:7f:a5:97:6a:b3:53:e5:f2:48:f4:ca:91:56:47:
80:1e:28:38:36:f4:b1:f7:c6:8a:4d:19:f9:18:a0:
c5:d1:da:b1:35:b3:f0:59:7a:af:c0:dd:16:a0:16:
7e:9d:e0:f4:78:11:39:c5:b6:95:a6:72:0b:ca:b3:
bf:48:0a:84:bb:8b:a8:14:de:f1:49:be:b7:56:b8:
f0:5f:a4:fb:40:10:36:d8:4b:31:3a:2a:9e:4b:0a:
2e:76:06:c3:12:eb:24:1c:59:0c:49:7e:d6:03:4e:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CD:75:EF:DF:E1:9F:DF:86:50:3F:E8:D5:F2:76:52:3C:06:1D:3A
X509v3 Authority Key Identifier:
keyid:D5:B9:BB:A3:30:5E:88:C0:00:F5:62:93:9D:13:8B:A5:06:22:7B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0a:f2:e8:8e:06:a8:19:21:2c:b0:a8:53:84:93:ca:eb:9f:
af:96:58:89:c2:4b:35:ef:75:2a:33:65:b3:e9:e9:32:94:11:
55:8a:5a:10:32:78:79:33:f5:65:e4:04:26:0a:d2:ff:6a:f1:
2b:ec:b9:37:91:e5:df:e8:7a:97:bf:7f:c6:e6:3d:70:35:bf:
b0:22:89:d8:9d:b3:66:06:64:af:de:e0:c7:70:d2:9c:a9:6d:
6d:16:ae:0a:49:eb:26:20:b0:f1:6f:e8:88:08:ee:ec:a2:07:
e9:d0:f3:32:cb:9b:19:c4:dc:d1:ce:c5:43:ba:49:c5:fe:e2:
2f:a8:e8:ea:d9:7a:3f:a5:ee:f4:ff:a3:b1:e9:8b:68:fd:26:
ab:b3:a1:a4:14:f3:d0:0e:58:b5:89:9c:1d:b7:9d:a3:32:59:
e8:1a:cf:b5:6b:94:b1:5d:4f:bf:5b:12:87:f7:4a:b9:41:10:
99:1a:f4:31:35:43:c4:41:ef:a9:c0:25:03:d9:df:dc:8a:9e:
eb:f9:5e:07:7b:a6:1b:64:75:b3:4a:1d:75:d8:22:a7:fb:9e:
e9:c9:95:d5:68:01:a8:6f:6b:c2:73:ce:17:c6:10:90:05:79:
9d:d2:65:aa:fa:13:05:c3:15:ee:48:8e:bb:40:d8:e0:9e:91:
81:dd:dc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:46:44 2026 by rpki-client