
$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
File: bPH0dvRFFGbI_SbiFvMnbMFeLho.mft (raw, json)
Hash identifier: 1zfiGCldU2GQ/hBwk41adqFF+Guyi45Kf8Exoxbt9Bs=
Subject key identifier: 4B:43:BC:5E:AE:4C:65:98:81:EB:2D:13:D9:3A:3F:A9:66:61:38:E6
Authority key identifier: 6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A
Certificate issuer: /CN=A91529DF/serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
Manifest number: 71
Signing time: Thu 23 Jul 2026 09:57:12 +0000
Manifest this update: Thu 23 Jul 2026 09:57:12 +0000
Manifest next update: Thu 30 Jul 2026 09:57:12 +0000
Files and hashes: 1: bPH0dvRFFGbI_SbiFvMnbMFeLho.crl (hash: YWG8+To5CLWOt0uFASMlKN0NmbHFNUosSrw5bpJL9AQ=)
2: E9C84708F67911F0B1D76CE5736F56BC.roa (hash: B9uNDvU5cJoDVtHMnMwD+CGmLLX1Ekokgd9afDF1IlY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl
rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91529DF, serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
Validity
Not Before: Jul 23 09:57:12 2026 GMT
Not After : Jul 30 09:57:12 2026 GMT
Subject: CN=6a61e578-aa04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:95:ce:f7:4d:5d:4a:9d:85:51:9d:59:2a:
1b:7c:f8:0a:e3:3c:2f:39:ed:81:0c:05:9e:d9:d3:
e2:43:39:30:b8:f6:ae:15:5a:b6:27:59:dd:60:2e:
88:e9:c4:dd:47:f3:9e:f8:8d:cd:ff:b2:13:7e:61:
e3:cc:a2:89:28:bb:a5:d3:8c:21:5e:75:11:37:64:
e2:57:4f:8c:5b:83:8f:a1:e7:56:f5:0c:e8:28:ad:
c6:6c:7b:03:d7:b2:e7:c0:a6:e8:79:88:55:7f:85:
6f:2f:88:fe:c7:9d:3c:eb:05:06:5d:79:04:cf:4b:
98:bc:bc:1a:fa:76:05:f7:22:09:19:ab:4b:82:73:
c3:cb:83:44:05:fe:27:1f:28:a3:a4:de:50:69:e8:
a8:3b:a1:86:6b:eb:a7:d5:d5:cc:1a:64:5c:12:f3:
b2:4b:79:1c:5b:bb:de:ac:6b:77:e8:be:b7:c2:8e:
72:4d:61:fa:25:6a:e5:6b:9b:7a:fe:93:08:74:34:
af:57:bc:79:d6:42:79:e3:0e:f2:b2:c6:a6:16:f3:
29:af:34:76:5f:c0:c2:ed:55:b2:ba:d3:7c:e4:23:
b0:12:47:b0:78:48:9c:b9:65:fb:95:0a:49:52:1d:
fa:f0:b3:b1:88:1d:b6:32:96:90:05:b4:cf:83:88:
1f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:43:BC:5E:AE:4C:65:98:81:EB:2D:13:D9:3A:3F:A9:66:61:38:E6
X509v3 Authority Key Identifier:
keyid:6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:9b:f6:6e:a0:47:e6:a4:bf:27:f6:2b:3e:a4:f0:4d:1d:e5:
eb:be:8c:a7:71:b5:6b:0d:fa:cf:92:7a:c0:da:16:db:9b:d1:
d6:ec:12:4e:04:9e:a3:4c:b9:ba:d0:1a:20:e2:26:59:5a:b6:
cd:83:ab:a0:1f:22:a4:8b:35:fe:00:c2:fd:0a:50:3f:5d:90:
2e:f5:8b:9c:e5:bf:ef:42:d4:82:da:27:29:20:fb:66:69:bc:
6a:9e:ab:e4:6c:fb:53:b4:37:e5:19:fe:94:9c:51:9e:c7:2f:
bc:2d:84:54:4a:c4:13:d9:ba:85:f3:05:da:ea:c8:4d:a9:49:
a4:a3:e9:a2:8f:5b:5b:07:ca:b3:a1:d1:70:49:79:a7:1e:69:
25:bb:8b:ba:8c:d6:54:fa:d8:03:04:7b:05:2b:34:ea:e2:bf:
f1:8c:f4:76:53:f3:5a:f8:ee:36:47:11:4f:ab:42:37:b7:35:
84:5f:f4:23:74:76:9c:83:6b:95:1a:e6:a0:0e:69:de:a3:80:
ce:1b:5b:33:e1:61:bc:50:f5:31:fd:d4:83:94:4e:72:93:e3:
0d:27:72:95:35:da:14:6e:67:98:fb:cd:9c:3c:0c:70:86:74:
b7:d2:48:04:4f:94:41:b8:30:63:e9:92:0a:25:66:8f:95:1f:
77:a9:14:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:13:21 2026 by rpki-client