
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft
File: 1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft (raw, json)
Hash identifier: 02XG2FLUJ5xahEY5kQXhBHi7LMe6z4hDYJoR9QQeoxM=
Subject key identifier: 2E:B0:D3:3C:0C:E7:0F:41:B4:F5:A1:6A:45:1C:EF:E6:13:58:87:8E
Authority key identifier: D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9
Certificate issuer: /CN=A9116B0C/serialNumber=D5B16768914A80C93124629610CC40502AAED0E9
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft
Manifest number: 44
Signing time: Wed 13 May 2026 08:36:11 +0000
Manifest this update: Wed 13 May 2026 08:36:11 +0000
Manifest next update: Wed 20 May 2026 08:36:11 +0000
Files and hashes: 1: 1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl (hash: U/tz1oo4C24/w6jrbC9cYLGGsWpUT102U0dsOF/KNlo=)
2: 2235EF78F12011F0BFBF3F154E6F56BC.roa (hash: PdAz+4W9gV7DG5blKrt0fnM9lwbclCTxlZE4svm7VgA=)
3: F5568448F11C11F0AC52AD484D6F56BC.roa (hash: FSRnxAS3d/oxWCt/mXgTvn1rm5+e0wMamnNqPiiIkGI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl
rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116B0C, serialNumber=D5B16768914A80C93124629610CC40502AAED0E9
Validity
Not Before: May 13 08:36:11 2026 GMT
Not After : May 20 08:36:11 2026 GMT
Subject: CN=6a0437fb-33e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:84:8e:5e:d4:c6:35:7b:af:2c:c6:ac:81:
c9:3f:db:a8:15:4f:fb:c9:06:0b:6d:cb:08:76:2e:
35:b6:36:b0:2b:a8:80:0b:06:ab:16:ef:3e:18:91:
10:85:1c:88:74:9e:cb:91:ff:f0:7b:30:cd:62:69:
c8:f7:05:e7:83:58:8e:06:cb:8a:b8:27:98:75:38:
68:b6:84:04:ec:40:a8:4f:b5:7d:06:b8:63:9d:0b:
f4:64:29:3e:72:fc:93:5a:84:f4:4b:13:2b:62:28:
12:f1:91:28:f5:15:94:7f:c6:9d:58:cc:31:0a:e8:
f2:f6:e9:cf:b8:db:1d:88:31:df:96:57:ed:b0:31:
a9:07:1d:de:60:67:aa:22:2a:5e:5d:95:e2:e3:a3:
40:0f:ea:b8:0a:08:02:15:a2:13:c8:b3:31:67:16:
3d:e1:14:05:33:20:21:a3:f8:e6:22:f3:44:49:4e:
73:85:f5:c6:71:3f:7a:8c:45:b8:38:60:03:cf:8e:
de:d3:33:61:88:d3:49:56:f3:45:73:3c:a9:5a:f9:
76:5f:59:2d:e3:9d:02:f6:2e:77:cb:97:d9:95:f2:
09:8f:fd:b4:7f:a9:f0:bd:d6:40:72:6c:6a:40:63:
01:8a:b9:87:ac:55:de:eb:ee:7b:14:5c:b3:c8:94:
e7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B0:D3:3C:0C:E7:0F:41:B4:F5:A1:6A:45:1C:EF:E6:13:58:87:8E
X509v3 Authority Key Identifier:
keyid:D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:c0:45:f9:e0:c3:41:67:de:76:09:e2:34:4a:fc:eb:0d:db:
f6:ac:51:34:25:e0:4b:a3:03:ae:d3:03:cb:e8:a8:36:44:52:
f5:95:aa:8f:f8:42:9a:23:16:6b:89:5f:dc:dc:c6:15:29:fa:
e0:c1:f8:67:e9:28:7f:e5:5d:07:3a:a5:b2:6a:cf:0d:97:a0:
0f:51:d0:35:39:31:e0:7d:73:31:50:36:e3:95:b3:14:bc:da:
67:33:1f:b3:29:e4:51:47:32:c0:08:2e:5b:52:f6:c5:06:09:
0d:87:3b:35:a2:a8:33:2e:ef:ea:c8:15:92:61:ff:9a:82:31:
86:03:28:22:b6:a8:92:3f:7e:ed:be:76:e7:03:66:65:a8:2d:
08:0f:de:64:47:83:89:22:c1:09:a0:5c:c0:78:a8:93:15:6f:
f6:d8:02:38:48:8e:a6:a0:48:d6:cd:27:a3:b6:4d:aa:62:43:
96:7f:f4:f7:2c:02:16:20:03:ef:ac:ff:e9:12:b9:22:8c:37:
4b:c7:66:eb:d9:cd:22:89:da:61:68:02:4b:a8:dd:aa:9e:42:
b7:78:6a:d3:e3:80:0d:0e:20:15:d6:cd:0d:08:42:6a:7b:15:
04:84:eb:5e:00:50:0a:af:e3:f5:30:bc:03:db:dd:64:e7:87:
24:99:58:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:13:27 2026 by rpki-client