
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
File: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft (raw, json)
Hash identifier: XFIUydPy/HryyMRyydwBk6AzV2TRWw3xMriM96eDYKI=
Subject key identifier: D1:9F:CE:56:2D:D5:23:46:C2:6E:DF:53:40:D3:66:68:8B:1A:13:E4
Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D
Certificate issuer: /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
Certificate serial: 01D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
Manifest number: 01CC
Signing time: Wed 13 May 2026 03:51:11 +0000
Manifest this update: Wed 13 May 2026 03:51:10 +0000
Manifest next update: Wed 20 May 2026 03:51:10 +0000
Files and hashes: 1: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl (hash: a679bonxUzeDn1VZ+ijSkumwWCT85hvekOJCSPjaNfQ=)
2: 13E4471298B711EE99FD1F09C4F9AE02.roa (hash: CSGjDy/wdYYzGXyvOOUl98bHiR5LO+1hU3+jdzF0bhY=)
3: 134D519098B711EE99FD1F09C4F9AE02.roa (hash: TP4JixOOcg9YnuGelQlIMV1MqlMNS4cHb5eiwzX8uV8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl
rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3526, serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
Validity
Not Before: May 13 03:51:10 2026 GMT
Not After : May 20 03:51:10 2026 GMT
Subject: CN=6a03f52f-1675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:20:b8:dc:82:92:a7:20:dd:d5:7a:3b:03:2e:
e6:71:a8:da:ec:fa:a0:60:87:34:6a:86:d0:3c:2a:
31:7c:3f:cc:cb:24:ba:19:0d:80:e3:db:86:ea:5c:
98:1e:70:cc:4d:56:d5:f6:fa:d2:0f:00:01:37:e6:
e0:7b:dd:37:b4:35:3d:69:c4:d7:7f:58:5f:c0:e4:
23:c7:06:08:e3:18:17:13:02:fc:54:22:6c:b4:3f:
e9:94:fc:9e:93:1e:b7:1b:6b:c4:f0:a6:48:7a:25:
3d:2c:c0:04:f8:98:af:a5:e1:37:74:0a:e6:a9:b2:
21:8f:8d:19:5a:fb:1c:b0:b3:92:0c:3d:32:88:77:
76:ec:3b:a4:86:80:c4:27:75:92:20:96:ad:ec:5c:
c8:0c:ac:43:cd:0c:94:8a:eb:45:03:89:63:68:77:
5f:76:51:c0:48:12:28:b5:3a:5d:15:eb:b5:ad:5d:
55:99:16:d0:74:7f:1b:68:fa:65:52:b8:08:fc:c2:
c2:43:fa:11:22:4b:0e:7e:6a:86:63:9c:dc:82:10:
4d:2f:b5:d7:fe:13:9e:55:ce:8b:f9:e0:06:16:df:
5f:83:57:e2:c4:24:fe:5c:ee:26:79:de:fb:7d:36:
ca:87:80:d7:71:6f:ad:55:c9:91:db:60:55:29:c0:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9F:CE:56:2D:D5:23:46:C2:6E:DF:53:40:D3:66:68:8B:1A:13:E4
X509v3 Authority Key Identifier:
keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:38:11:82:03:1a:70:93:35:14:96:bc:3a:32:26:f3:7d:45:
2d:8b:01:2f:da:93:a0:51:26:ca:7a:c9:eb:64:cf:11:10:f6:
ea:55:31:6f:20:e4:b1:20:bf:f4:9f:2a:28:b9:41:b8:61:87:
55:2c:9b:8c:3a:c6:0b:c8:0b:e0:a1:26:29:ae:c5:82:11:ee:
ff:ec:85:32:e1:a0:5e:eb:62:fc:77:3b:a2:e2:0b:7f:94:92:
3b:9f:9e:df:7e:ae:3e:10:1d:bd:c7:d9:c6:f2:f9:c3:11:d3:
61:96:73:9b:ca:4c:91:c0:aa:63:40:88:0e:2b:a5:30:8e:78:
d2:de:50:50:9b:72:a2:0e:c2:b4:fd:e6:ea:de:fc:67:4d:bc:
a4:6f:3e:49:07:16:1f:c8:14:03:94:f1:ae:9b:76:4b:d8:3b:
cb:c1:f0:3a:13:aa:d0:ff:25:fc:a4:e3:1c:8e:5c:ff:58:01:
80:8b:28:43:63:2f:02:36:ea:c2:dc:65:aa:1b:a4:73:42:00:
ba:7b:6f:6b:d9:9f:e8:66:bb:9d:2f:6d:6b:55:ae:9d:f7:57:
cc:f3:ab:4c:59:b0:98:52:27:50:18:11:1f:e4:52:51:1f:7f:
db:0c:ff:d5:0b:d3:8d:91:c7:c7:96:04:16:62:07:e6:e8:3a:
4a:e7:ea:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:48:41 2026 by rpki-client