
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
File: bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft (raw, json)
Hash identifier: kpYIO+1E6rlzccTbONT6SLO0u1gI3TONIdzCELjdgXk=
Subject key identifier: 29:F0:5E:BE:F8:A8:04:78:B3:72:D8:57:7E:43:BD:5A:7E:4B:57:46
Authority key identifier: 6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54
Certificate issuer: /CN=A91626D2/serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54
Certificate serial: 01C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
Manifest number: 01C1
Signing time: Fri 25 Sep 2026 03:57:23 +0000
Manifest this update: Fri 25 Sep 2026 03:57:23 +0000
Manifest next update: Fri 02 Oct 2026 03:57:23 +0000
Files and hashes: 1: bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl (hash: SBjnHQ/RwW66OdgGqbJQzrHDVGiJfXLmckGMEhRhtPw=)
2: 8093CCBA13F611EF8ED7D71EC4F9AE02.roa (hash: xPyb9jdVPxFNqu7DjwvZN/gxmMuIyOp+jROsuWdv+So=)
3: B88A958007B611F1BF9DF7EA143D8C67.roa (hash: EzgQAPl/vUlyh5AjsIyBAeaJMqrmt2E1TV7jxVlr6ZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl
rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:57:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91626D2, serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54
Validity
Not Before: Sep 25 03:57:23 2026 GMT
Not After : Oct 2 03:57:23 2026 GMT
Subject: CN=6ab5f123-21d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:8b:d1:19:49:08:df:e2:67:5a:a1:c3:ae:
f7:1c:94:58:02:5a:0b:05:04:a3:30:5d:c8:29:ee:
8c:db:af:78:2d:95:97:74:24:bc:3b:12:ea:8b:28:
e3:a7:8e:ef:ea:72:33:9d:67:17:6e:8b:19:a1:98:
37:2f:a7:6b:d0:72:f1:bb:37:a4:ce:e7:af:f8:34:
21:9d:cc:82:17:c2:29:2e:c1:21:7a:33:aa:8b:c3:
45:4d:56:e1:38:8e:60:24:9c:2e:12:d7:92:90:cd:
b9:dc:93:6e:59:ee:d1:0f:17:04:c9:31:07:34:01:
50:cf:b4:db:13:99:7b:6a:de:a6:13:cb:c9:af:84:
45:20:97:a4:19:62:46:8f:e4:73:bb:83:e8:ac:5b:
48:70:ce:ec:0b:b6:7c:3a:b2:79:32:7b:28:59:e4:
6d:4c:a4:8d:0e:75:ee:ea:a9:a4:80:58:6a:0f:e5:
fb:5c:4c:5c:c6:76:27:53:9c:cb:de:b8:cc:3c:b7:
12:77:b6:a3:b1:fb:45:42:d4:73:90:fc:83:c5:66:
1f:5a:f2:57:63:ad:70:8d:41:78:d7:e8:95:24:ed:
fb:83:68:00:51:54:47:5b:e9:67:7d:3f:14:c5:44:
8d:a1:5b:54:35:a2:72:5c:5d:f4:2b:45:93:85:76:
aa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F0:5E:BE:F8:A8:04:78:B3:72:D8:57:7E:43:BD:5A:7E:4B:57:46
X509v3 Authority Key Identifier:
keyid:6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:b4:ba:b5:67:7d:9a:1a:de:ae:9c:01:d4:14:0a:b1:15:d6:
8f:16:8f:c9:33:dc:11:bc:08:f6:7d:cd:87:cd:fa:c7:a7:72:
d5:a9:73:7c:9b:b7:b5:39:4f:b7:0f:c2:61:94:73:c3:98:58:
ee:1a:18:58:6e:3e:3d:7a:b1:99:8d:b7:0c:85:3f:94:10:06:
e2:b4:2e:f0:67:8c:a6:51:bf:75:f0:14:a0:01:39:75:65:30:
2c:51:2a:aa:1c:54:70:ed:b9:e9:13:d2:3f:a8:8b:f3:65:d2:
11:fe:77:c8:45:3e:65:c1:8d:f3:8e:eb:b5:c3:22:d5:9f:61:
d9:62:a5:1f:4e:db:44:9a:0a:ee:a0:f5:e7:ac:ad:8b:e0:1f:
15:8e:83:d5:25:3d:44:8c:ea:8e:36:bb:d6:d3:f5:db:c0:f7:
2b:ab:35:90:73:96:da:de:72:7d:0d:1a:ac:ae:25:ea:ce:ee:
9c:a0:d3:0d:1d:2d:55:59:83:39:f9:fb:d9:d1:11:88:6c:28:
86:eb:b6:17:1f:fd:67:bd:77:73:2a:3d:c6:3e:2a:25:e9:27:
9e:bf:9d:0e:62:63:b3:fc:49:95:bb:3f:34:ca:66:d0:36:be:
92:6b:9a:b6:c8:2e:53:e9:f9:52:2e:b8:cf:52:26:00:60:20:
5a:82:e3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:02:39 2026 by rpki-client