
$ rpki-client -vvf rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
File: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft (raw, json)
Hash identifier: IH0bDH5uIYBjwIWqNLHN5ZCKEG6y8gGJiK0lkLQGq2w=
Subject key identifier: EE:BC:2C:D3:4F:BE:15:D2:41:79:55:09:C1:70:C5:CE:05:92:B3:B8
Authority key identifier: D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D
Certificate issuer: /CN=A91174ED/serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D
Certificate serial: D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
Manifest number: C8
Signing time: Thu 23 Jul 2026 08:43:39 +0000
Manifest this update: Thu 23 Jul 2026 08:43:39 +0000
Manifest next update: Thu 30 Jul 2026 08:43:39 +0000
Files and hashes: 1: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl (hash: xRNLdRLJm+YzLZVQyKa0nllaFXZ2cpG0ymscFNKo4Uc=)
2: E7BD97EE5D9311F0AFF08443C4F9AE02.roa (hash: wMqZyUHwFnm2prR30bhRvxTQaRsk2FAxurhzAGgKS+I=)
3: FE892768620711F0BE75F534C4F9AE02.roa (hash: w6R9tkWMN6zGFTVsCrdtlZOXuO5ohHrK0PqrImTn4O4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl
rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91174ED, serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D
Validity
Not Before: Jul 23 08:43:39 2026 GMT
Not After : Jul 30 08:43:39 2026 GMT
Subject: CN=6a61d43b-a2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:4d:3c:ab:b6:5f:af:fe:84:7c:c0:70:f6:
fe:35:79:e8:1a:ad:31:13:35:59:0a:37:57:f5:6a:
b7:71:a0:4f:d2:18:b0:fb:be:00:ed:6b:c4:0d:68:
dd:c7:8f:a3:e7:f8:30:ab:c8:85:8a:6e:66:e4:36:
a2:3d:dd:f4:50:04:80:55:e6:20:67:4a:77:3b:07:
1b:ed:f5:9c:d2:12:75:8e:54:05:45:d7:5c:a0:5d:
09:22:76:97:89:19:34:50:f3:fb:f9:24:32:66:ac:
7a:3a:f3:e5:c8:49:63:e2:29:29:f2:27:3f:3b:db:
b2:bd:f5:82:74:67:48:15:2b:1f:ba:ac:5b:d3:0d:
8e:f2:91:ae:60:ea:85:b1:55:de:74:59:4e:2b:bd:
a9:55:5d:c8:91:76:41:1d:b5:ed:d8:30:fb:19:be:
70:42:36:53:67:bc:d2:b1:2e:b2:46:2a:c1:8d:ec:
1e:30:ec:4b:94:96:cb:e4:7b:7c:4e:d1:3e:70:dd:
77:e5:f1:c2:7b:dd:d4:7a:10:8f:f5:d4:bf:4f:22:
b2:b5:c5:b4:80:59:5a:26:26:72:1c:39:1c:aa:5a:
cf:d3:00:aa:3f:0b:5b:ca:91:cd:d2:2b:d0:aa:0e:
5f:b5:6f:0a:dd:6f:05:70:03:50:62:4d:3a:f0:5e:
23:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BC:2C:D3:4F:BE:15:D2:41:79:55:09:C1:70:C5:CE:05:92:B3:B8
X509v3 Authority Key Identifier:
keyid:D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ad:36:a3:a2:ea:a6:7c:5a:f4:23:e4:ab:15:dc:82:58:e0:
ac:6a:c8:ee:06:f3:e9:06:13:f1:cb:a0:de:97:93:84:33:b4:
71:c8:24:65:32:c4:ff:51:6d:59:66:fa:d6:e9:b9:bc:4d:10:
ec:23:59:cc:0f:cd:4c:cd:4e:13:77:14:89:44:79:71:25:82:
22:26:5e:83:78:b3:64:f0:ff:db:42:f8:c7:bc:81:3e:f1:6c:
d5:49:ea:aa:4d:b2:05:ce:f3:ea:0f:a9:c6:ef:30:08:0a:ee:
e5:47:a0:d5:24:06:70:47:cf:38:a1:b7:74:22:c7:0d:08:dc:
1b:8a:d3:54:48:2c:fa:4e:b5:8d:89:b6:3d:06:5b:f8:d2:78:
8b:87:83:ed:05:ca:30:92:88:4e:b7:42:a1:00:b0:8c:fa:0f:
c0:be:bc:29:49:8b:88:1c:31:1c:d4:a9:e3:0f:d8:68:1f:17:
74:f9:f8:cc:15:d3:5c:75:8b:15:e7:ed:36:3d:60:fc:d5:a9:
54:ed:0b:aa:04:24:e3:be:b5:9b:99:23:35:6a:57:27:04:90:
38:b3:63:56:61:51:cd:28:07:0a:c0:c1:ef:9c:5d:60:74:3e:
45:c4:ed:c1:1b:4e:88:4d:c7:40:bc:08:0d:47:a1:a4:e4:27:
b4:56:fc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:50:18 2026 by rpki-client