
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
File: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft (raw, json)
Hash identifier: xDqjWCmbc+5HFfKA/lRWVgcobQE9Iu5g1dvLiacVzFE=
Subject key identifier: A5:00:8B:E6:DD:5F:38:61:19:8B:5C:54:15:F5:E4:58:47:97:8D:F7
Authority key identifier: BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34
Certificate issuer: /CN=A91836DB/serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
Manifest number: 0132
Signing time: Mon 21 Sep 2026 05:37:18 +0000
Manifest this update: Mon 21 Sep 2026 05:37:18 +0000
Manifest next update: Mon 28 Sep 2026 05:37:18 +0000
Files and hashes: 1: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl (hash: r2iIPwhtiu2Te2HEWHL1Wkbzn1bDSqthucI8XzFR+0s=)
2: C7001B70E45E11EFA2243E47C4F9AE02.roa (hash: mMirlrzunJgSWRurzYxeqDZ2b51cZvaGJ3FUORZ08/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl
rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91836DB, serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734
Validity
Not Before: Sep 21 05:37:18 2026 GMT
Not After : Sep 28 05:37:18 2026 GMT
Subject: CN=6ab0c28e-1829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:f0:e4:f4:ef:60:66:33:e4:39:e5:dd:10:
af:94:a7:3e:bc:69:b1:b6:38:b8:9c:3a:48:e5:02:
5b:a5:5d:9b:92:1e:42:08:8f:b9:50:a8:2e:ff:60:
ca:93:1e:7f:b1:d2:4d:23:ed:0c:b3:11:64:d4:85:
8b:91:cd:af:3c:78:d9:ad:66:e7:ad:1f:20:f6:a8:
57:d4:05:13:60:95:a8:52:62:63:0f:ed:6b:e8:16:
0e:e1:17:09:27:5e:c9:73:01:97:79:81:83:e1:74:
f4:08:14:dd:4f:79:db:99:f9:ef:38:4b:71:b0:f9:
bd:2a:c5:4e:3e:63:7f:67:f9:63:01:6a:2f:10:7d:
5b:c8:cc:a2:4d:67:15:11:bf:1c:0b:56:1d:a0:a3:
3b:71:9c:3c:c9:d5:a1:6a:ee:7f:f6:76:8c:15:57:
9d:23:ef:df:ca:fc:14:4f:40:27:0d:76:f3:8d:37:
12:c6:46:a6:dd:c5:df:98:c7:cd:54:e4:fc:88:88:
e7:a8:3a:6b:bf:f1:f9:76:47:7f:9c:3a:7b:8b:fb:
78:80:67:01:64:8e:cd:18:92:c3:87:17:f9:57:c3:
98:bd:9a:83:4a:05:54:b2:1b:61:62:58:f0:12:cc:
57:c0:09:f1:b8:ab:06:50:aa:aa:b8:43:7d:2c:c7:
31:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:00:8B:E6:DD:5F:38:61:19:8B:5C:54:15:F5:E4:58:47:97:8D:F7
X509v3 Authority Key Identifier:
keyid:BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:bc:7e:91:7a:b6:67:76:d0:09:1f:22:56:16:1a:5b:57:30:
ad:93:5b:ca:fb:40:05:21:49:93:71:70:d7:ec:ce:20:87:e4:
e3:f4:80:9e:6d:97:c7:4f:95:f3:7e:dc:a9:3d:80:f1:d5:d0:
5f:dd:17:73:a0:6a:d3:0d:7c:a1:d4:9b:17:0e:6c:30:7d:2d:
0a:71:9c:18:99:f9:0c:55:4a:cb:6f:eb:e5:1e:c8:36:8a:68:
c1:0d:a9:cd:a5:bb:b2:85:82:60:9a:ae:03:d6:b5:a1:79:20:
07:1d:cd:a5:63:de:5e:ae:a8:58:70:a5:2d:52:3c:b9:da:b9:
df:ec:bb:78:ff:19:19:8d:a1:9d:94:29:c1:af:e3:69:e6:1c:
87:59:70:12:92:e1:5e:9b:65:9f:ea:1e:c3:41:20:07:02:b0:
2f:5a:c8:a7:07:be:23:e9:3e:02:3e:d1:cb:49:f6:e1:39:52:
dc:be:2a:29:5f:55:96:14:3d:22:f4:8e:dc:57:62:54:2d:e3:
19:fe:cc:b6:cb:28:5b:a8:8f:e9:1d:d9:9a:b4:ac:4f:42:8e:
2b:9f:7e:3a:a0:2e:d2:7e:d0:91:14:e5:d1:61:2c:c8:6a:f1:
fb:10:07:5d:e0:59:0b:0f:f8:2e:e0:48:81:dc:c7:11:7e:48:
da:eb:f3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:38:03 2026 by rpki-client