
$ rpki-client -vvf rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
File: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft (raw, json)
Hash identifier: M+JlQjZ4WBP12ceAJEMdViNO4YTNkCi8nNArvUxnUiw=
Subject key identifier: 20:10:4C:90:4F:CF:C6:5E:A6:43:B2:DE:59:BF:4D:EE:F1:EE:B6:56
Authority key identifier: D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D
Certificate issuer: /CN=A91174ED/serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D
Certificate serial: 96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
Manifest number: 8C
Signing time: Wed 25 Mar 2026 06:49:40 +0000
Manifest this update: Wed 25 Mar 2026 06:49:39 +0000
Manifest next update: Wed 01 Apr 2026 06:49:39 +0000
Files and hashes: 1: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl (hash: ud/H+yaoBex5EVycYhvbaNGBNAsaOGkXyJCwg472f5g=)
2: E7BD97EE5D9311F0AFF08443C4F9AE02.roa (hash: wMqZyUHwFnm2prR30bhRvxTQaRsk2FAxurhzAGgKS+I=)
3: FE892768620711F0BE75F534C4F9AE02.roa (hash: w6R9tkWMN6zGFTVsCrdtlZOXuO5ohHrK0PqrImTn4O4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl
rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91174ED, serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D
Validity
Not Before: Mar 25 06:49:39 2026 GMT
Not After : Apr 1 06:49:39 2026 GMT
Subject: CN=69c38584-99b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:f0:a0:94:c9:a6:fd:8b:a9:ba:7b:72:31:
97:c0:58:b5:d2:72:58:1d:e5:56:64:e2:07:b2:5e:
4b:68:da:92:e9:52:85:02:56:38:13:7f:06:c9:91:
19:d1:cb:c7:b1:e1:3e:ee:6f:5e:37:40:b5:8c:b4:
ec:a8:44:67:74:48:9c:e9:3a:f7:56:61:f2:af:85:
61:ed:d0:ac:e1:88:21:98:40:b8:b5:3b:72:90:1b:
5a:f0:31:5d:b0:a1:2d:ed:6b:9c:db:a1:0b:59:07:
83:6e:11:d5:c3:25:0e:df:41:1f:91:bb:83:0c:99:
17:2b:65:12:6d:1b:0d:c1:64:ef:53:72:4e:fb:83:
95:0e:d4:ec:d6:67:c0:a2:04:6b:23:19:e8:5f:ad:
20:ef:0e:ee:d6:08:6c:02:35:63:48:72:ff:9c:71:
8a:f7:53:f3:0f:4f:a9:c6:e7:4d:bf:53:db:65:d0:
66:35:8b:f9:a2:8c:c1:e1:a0:17:5f:5d:1e:75:9f:
36:9f:f6:26:08:22:b7:9c:7b:ef:cb:ca:fc:e0:3a:
4a:04:17:18:0b:28:b4:99:8f:0f:ba:f3:46:23:26:
88:9a:86:b1:01:ea:86:8e:64:cc:43:65:26:1f:6a:
4a:a0:e4:0e:5b:07:e3:37:61:a8:16:c9:34:40:ce:
eb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:10:4C:90:4F:CF:C6:5E:A6:43:B2:DE:59:BF:4D:EE:F1:EE:B6:56
X509v3 Authority Key Identifier:
keyid:D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:11:1d:55:ea:89:50:39:0c:84:8c:fe:d9:f1:df:01:6c:09:
da:6c:7a:2c:dc:9c:e8:e4:fd:c0:48:13:23:ad:e6:08:4a:ff:
75:34:94:4b:da:e0:84:78:63:0c:3b:b8:5a:ec:e3:e5:57:c6:
8e:1e:12:23:59:4e:dd:73:90:82:d3:4e:aa:61:ee:50:84:45:
e7:aa:fe:90:a1:6a:ad:ba:85:56:bb:cb:b8:56:00:20:bb:d4:
5a:10:32:18:94:51:ad:e5:30:4c:44:07:61:cc:d7:a6:d8:c0:
7c:68:06:eb:31:68:1c:7c:bc:ae:5d:0a:80:20:11:16:7f:53:
64:ed:41:a1:b2:8d:d1:9e:c9:31:07:37:d5:cf:8b:1e:9a:32:
47:4d:91:fd:7b:6c:fe:f3:6f:21:0a:63:ae:32:a6:25:29:77:
ac:94:c4:c3:7c:a4:4e:8f:43:2f:92:a9:38:b6:57:5e:75:f3:
f9:4f:ef:07:57:ca:b0:40:36:64:f2:c7:b4:01:19:f4:e1:8d:
db:ea:97:dc:46:12:65:47:b5:12:26:de:b0:12:90:8a:51:21:
9f:ef:f4:aa:ae:92:45:fc:16:90:b2:95:0f:ac:89:41:88:94:
72:64:8f:4e:be:59:33:6f:9e:15:88:22:b5:67:ff:75:ed:b0:
00:18:73:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:11:08 2026 by rpki-client