
$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
File: bXwian3LhfL0kha367ANXwOmBcM.mft (raw, json)
Hash identifier: 5UT3I+7eDD9HJ5YBsMYckiOgPGmTnqADyVvrMeuBHEs=
Subject key identifier: EC:72:5C:31:BE:63:3D:25:67:A6:5A:60:76:2F:E9:9B:D3:B0:77:DF
Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Certificate serial: 144D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
Manifest number: 141D
Signing time: Tue 12 May 2026 16:56:37 +0000
Manifest this update: Tue 12 May 2026 16:56:36 +0000
Manifest next update: Tue 19 May 2026 16:56:36 +0000
Files and hashes: 1: bXwian3LhfL0kha367ANXwOmBcM.crl (hash: KVAmI8ZNX/1Gn7XpudsBC5QBSEnCWiflobqQ0/e9GyU=)
2: 3DC8B712E14411EFBECFB90BC4F9AE02.roa (hash: /opDjyqnkzPqfLmMUvw/7EQ9PTKNpIy/7L1DfTTvO0o=)
3: 1011982E326611F1A1041DA0BB833773.roa (hash: tEuH5H2vH3q7ISjLZVqO5vmC55MpS6sj/MMaczDExM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:56:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5197 (0x144d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91809AD, serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3
Validity
Not Before: May 12 16:56:36 2026 GMT
Not After : May 19 16:56:36 2026 GMT
Subject: CN=6a035bc5-4786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7e:04:e0:55:a0:3c:62:fe:f1:ba:21:41:b7:
57:6e:bd:26:eb:6b:2e:6f:81:d2:87:ee:7c:ae:4d:
e0:a3:7f:a6:3e:40:0f:52:49:cf:77:44:5d:e2:90:
64:e8:ca:e6:9f:3a:63:42:e1:09:3e:7e:d8:16:a9:
6c:57:37:b6:3f:22:51:dd:f0:5e:5e:13:ed:80:24:
c4:33:ba:d2:c7:f2:c2:2f:49:a5:94:4f:d4:85:29:
42:87:df:88:75:c0:cb:81:b6:56:a9:70:ca:e8:7d:
f6:92:3d:06:e1:e2:45:0b:35:db:41:bd:58:f6:8e:
f1:95:f2:5e:52:be:11:ca:2b:90:3f:9d:1c:6f:a1:
46:43:c2:19:e1:f4:7c:e1:b4:a0:31:5a:75:8b:9c:
30:40:65:67:02:33:43:c3:42:5b:fb:2c:e8:fd:56:
75:6f:b0:87:43:b2:6c:1f:c7:22:41:38:0a:a7:68:
51:a8:5e:a1:e9:46:69:41:04:05:e1:3d:27:67:a9:
d7:10:1e:56:5a:67:72:43:96:37:82:9d:d3:c4:aa:
ed:8e:e0:4c:fb:17:54:a2:5e:cd:b5:89:0f:4e:5e:
79:db:25:ea:b8:51:3d:60:52:17:42:20:07:55:a7:
40:4e:99:71:fc:fd:76:10:cd:4a:84:d7:a9:5f:6f:
99:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:72:5C:31:BE:63:3D:25:67:A6:5A:60:76:2F:E9:9B:D3:B0:77:DF
X509v3 Authority Key Identifier:
keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:de:90:0c:9f:33:a4:82:3f:d6:c8:fc:f8:bb:14:37:b0:c0:
ae:63:e2:3c:dc:a4:92:0a:71:bb:2e:d7:ff:ae:08:6d:d1:84:
fe:e0:cb:b7:10:6e:d2:d8:49:b4:bd:95:aa:90:ef:9d:2b:29:
24:a7:cd:13:b0:8a:40:3b:73:35:48:c5:2b:84:00:c2:48:32:
7b:1e:13:43:32:c8:e2:7a:b3:22:dd:12:b2:c3:54:00:22:5b:
a4:a9:48:57:78:02:26:ec:ed:3b:24:b2:f7:32:b6:12:61:53:
2e:cb:1d:66:ee:c1:05:0e:bb:03:6e:43:4c:07:b2:b7:b6:cb:
f2:80:c4:d1:81:9f:83:2a:42:9a:aa:67:a9:7e:9c:ef:72:39:
de:8a:23:e5:a8:cc:79:c5:44:64:23:79:bf:f2:1e:20:7e:94:
28:2c:8f:be:54:73:8f:58:b6:93:47:1d:63:7b:64:8a:0d:a9:
4b:c5:74:90:0a:47:41:f5:71:88:be:9a:2d:d1:11:c0:a1:f4:
b4:b2:da:e2:33:cc:10:5a:89:87:f1:32:86:d6:c6:30:95:31:
38:49:f5:7f:8f:f0:70:7f:77:3c:1b:dc:14:16:dd:c0:8b:52:
de:ea:20:71:95:56:09:ca:72:21:56:13:28:c8:2d:98:42:30:
c8:0c:6e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:21 2026 by rpki-client