
$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
File: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft (raw, json)
Hash identifier: RE6fKQrq2XwZyblK80DgD+fHsLW/C4ixpPwF148UWtA=
Subject key identifier: 27:BB:48:63:82:B8:7A:0B:B3:DB:03:69:34:47:F3:90:42:82:E0:0E
Authority key identifier: BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34
Certificate issuer: /CN=A91836DB/serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
Manifest number: D7
Signing time: Wed 25 Mar 2026 05:52:27 +0000
Manifest this update: Wed 25 Mar 2026 05:52:26 +0000
Manifest next update: Wed 01 Apr 2026 05:52:26 +0000
Files and hashes: 1: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl (hash: N7MGO/a0sK7eK8c2aDVU9slkaCmmj7fMHHLoxELIyxE=)
2: C7001B70E45E11EFA2243E47C4F9AE02.roa (hash: mMirlrzunJgSWRurzYxeqDZ2b51cZvaGJ3FUORZ08/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl
rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91836DB, serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734
Validity
Not Before: Mar 25 05:52:26 2026 GMT
Not After : Apr 1 05:52:26 2026 GMT
Subject: CN=69c3781a-72c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:b0:78:43:c9:e9:10:e9:7a:35:76:9e:dd:
9e:d4:72:0f:27:69:d2:93:61:91:02:d8:84:fd:18:
90:e7:6b:0d:2a:a7:a6:93:0a:24:ac:aa:7a:f6:78:
ff:24:d4:40:d9:49:9a:18:52:e1:2b:a5:6f:9d:ed:
f0:35:17:3d:15:35:ad:b7:96:1d:76:43:6b:b7:86:
b9:65:e6:f9:52:f4:b2:78:06:e0:40:48:2a:68:41:
da:a6:96:84:7a:8b:f8:2b:23:6d:b2:e7:1a:b1:05:
de:de:b1:5d:33:5f:94:7c:d0:d3:6c:db:0e:08:a4:
23:e2:66:6a:21:f8:07:45:34:11:f9:3d:ea:aa:7f:
cb:c2:8a:d8:2c:84:b4:e1:40:2a:09:ef:49:e7:b4:
e9:80:b6:ca:95:ee:1e:b1:f5:c4:f7:6b:06:2b:59:
5a:e8:db:f8:07:cf:97:6a:08:aa:24:4c:64:e7:7e:
fd:53:4d:8d:35:9b:dd:2b:44:4e:7c:61:d7:06:2b:
9c:2f:e9:60:bb:b9:ed:54:9f:05:b6:64:5b:5d:b8:
19:fd:0f:76:77:b3:33:cd:33:fc:ac:75:52:ac:b2:
88:e3:3d:b5:56:d3:99:0f:ee:a5:b1:ce:35:37:49:
e2:3f:36:66:2d:00:16:3a:c2:61:94:31:80:d9:5c:
2a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BB:48:63:82:B8:7A:0B:B3:DB:03:69:34:47:F3:90:42:82:E0:0E
X509v3 Authority Key Identifier:
keyid:BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1e:35:25:91:8d:c9:7e:a6:76:39:ad:ca:a9:92:5f:da:ab:
fc:d5:ff:cc:22:90:58:01:6c:c0:d4:b7:52:8a:4b:72:b4:8a:
e7:e8:29:ff:05:d2:d0:cf:1e:f7:09:ea:22:c8:df:8c:7c:64:
e7:80:c0:38:f2:be:4a:b6:a6:26:77:21:7b:9f:f1:d8:0a:83:
3d:74:94:81:97:5b:de:a3:c4:0a:b2:fb:12:2d:9d:f8:bc:da:
97:d6:a9:d8:51:98:0e:6e:e1:06:97:f1:96:66:ae:67:87:8a:
f7:a9:1d:b4:31:be:77:fe:cb:8d:96:01:96:1b:ea:a2:31:36:
c1:f0:42:e3:65:b5:e8:9a:60:cb:f1:4e:97:4d:8a:60:93:17:
d9:3b:38:68:7d:eb:cb:f0:fa:33:61:9b:be:4f:c7:9f:b9:7a:
17:04:d4:e3:b2:36:3e:27:24:db:fb:43:3f:1e:2e:77:1a:61:
5f:e1:15:e7:67:03:7a:20:2f:c6:56:9e:b6:b1:f4:ba:12:08:
ea:36:15:92:0d:3d:19:3b:ab:52:56:48:b7:fa:70:5f:a3:00:
83:22:ee:56:8d:c4:43:a1:5f:e8:55:84:9b:ad:a6:59:d7:4c:
fb:29:b6:10:3b:c1:08:4d:0c:da:a2:68:71:78:f0:f7:60:7a:
e3:f3:6d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:18:22 2026 by rpki-client