
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
File: 1bScAI9ih18VJth200lAoJsOnW0.mft (raw, json)
Hash identifier: sse9hOUhLWLnw99KMTTOZRgYCzzOfG15roL5vIQzBx0=
Subject key identifier: 8A:3A:B8:13:FC:1C:01:85:DB:95:0A:28:DC:07:46:85:38:03:83:AD
Authority key identifier: D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
Certificate issuer: /CN=A91FB434/serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
Certificate serial: 160C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
Manifest number: 15F4
Signing time: Wed 20 May 2026 16:43:14 +0000
Manifest this update: Wed 20 May 2026 16:43:13 +0000
Manifest next update: Wed 27 May 2026 16:43:13 +0000
Files and hashes: 1: 1bScAI9ih18VJth200lAoJsOnW0.crl (hash: GLYS/MyPIEn0cX2JjQ7QGhX8nj9H+ACAXVr/+qiIkmk=)
2: EC796D6C42D411E88EC29742C4F9AE02.roa (hash: /XKpZWxHQtpMnU+ZHwwN48hOrY+K7y+jnl3ND5plgMo=)
3: EB843B92329A11EE89CD8544C4F9AE02.roa (hash: CLUWcZt+49NeH6K62G6A+1bRGb2EpGeJVNtijAJKCTI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl
rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5644 (0x160c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB434, serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
Validity
Not Before: May 20 16:43:13 2026 GMT
Not After : May 27 16:43:13 2026 GMT
Subject: CN=6a0de4a2-fd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:47:91:dd:b8:c9:6b:b5:7f:e9:bd:6b:83:
c8:6b:02:ab:85:8a:0d:8d:56:d2:dc:57:56:d4:6b:
08:2a:ec:1c:81:0d:32:7a:b7:2e:36:96:e8:5f:ab:
60:75:da:d8:5e:42:f1:c7:99:99:70:43:e8:c8:ab:
de:ec:fb:23:f4:d2:67:62:e8:77:e3:85:4d:27:07:
e4:e7:e7:05:85:d9:6d:eb:02:b0:9c:a1:1d:f3:db:
0c:64:ee:e5:0d:2c:06:a3:25:69:09:5c:63:c5:ad:
55:f9:76:04:26:63:5c:1d:b7:0a:1b:2e:5d:f7:83:
d3:8e:ec:01:1e:f2:ee:72:33:57:ea:44:c1:29:89:
cb:c6:f7:81:6f:fc:a4:22:b7:89:bd:fe:e7:ba:df:
79:eb:4b:71:55:3f:ae:8d:06:03:e6:58:c5:9f:79:
d4:02:14:11:03:6e:0c:db:fa:73:7b:4a:1d:95:d7:
85:e4:3f:58:fc:a8:34:ca:61:70:ca:ff:03:84:50:
37:5e:a7:de:25:36:65:01:82:a8:bc:72:1c:60:f7:
a2:aa:22:ab:d5:58:4e:0e:92:2a:37:89:fb:6f:8f:
7b:d8:90:fb:04:b7:ab:6c:2b:16:2b:c8:43:32:f9:
9d:3c:4c:b2:1c:79:1f:92:e4:ca:40:94:87:93:be:
5d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3A:B8:13:FC:1C:01:85:DB:95:0A:28:DC:07:46:85:38:03:83:AD
X509v3 Authority Key Identifier:
keyid:D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:64:ee:78:b1:5d:19:de:ff:33:17:7e:70:5e:5f:76:84:07:
59:a7:84:9d:62:18:99:75:a1:e9:9f:4e:91:d4:98:e6:61:fb:
79:a4:d8:a6:6c:97:8c:ad:05:ad:39:6c:26:0e:1f:1b:fb:15:
30:5b:8e:c9:3b:fd:96:c6:1a:94:94:f4:fb:25:e0:a8:8a:06:
c5:44:68:3e:d1:69:79:c9:07:13:f5:0b:28:bf:81:e2:a6:11:
9e:46:a8:79:45:ce:e7:69:e6:e6:94:12:28:fe:45:2a:19:1f:
6a:82:a1:fa:7c:c7:f0:7f:8f:55:3f:ed:dc:5b:8a:88:0f:de:
7e:96:33:fd:bf:bd:98:72:6b:32:7b:2c:7b:55:e9:1e:72:49:
42:59:03:44:63:4f:4b:4e:2f:63:35:18:8f:a3:2d:cd:cc:34:
b4:d0:3c:c2:7c:c7:05:87:86:91:f0:65:f0:0f:8b:90:ce:49:
5f:ac:b2:82:aa:21:2a:75:92:8e:62:d8:37:1a:77:49:97:51:
4c:0e:11:a0:73:53:42:1f:90:a6:98:8f:bb:11:62:0c:71:8f:
67:0a:c2:08:eb:f1:0e:a1:f3:d6:cc:3f:92:5c:49:17:e6:f9:
b1:74:7b:44:a8:d7:c1:af:b0:09:43:6d:72:bb:30:7e:99:ec:
1d:07:17:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:38 2026 by rpki-client