
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
File: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft (raw, json)
Hash identifier: YCC5ScIbRRVBdSF3cfwNeq/q3VoYRPUR47heg7sSFrU=
Subject key identifier: 54:91:DB:22:08:42:AE:71:E7:6A:46:6F:64:B5:44:3D:24:B0:BC:53
Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
Certificate issuer: /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Certificate serial: 06EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
Manifest number: 06D7
Signing time: Tue 24 Mar 2026 21:57:25 +0000
Manifest this update: Tue 24 Mar 2026 21:57:24 +0000
Manifest next update: Tue 31 Mar 2026 21:57:24 +0000
Files and hashes: 1: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl (hash: Bf2v+PdAq0uCVjBiuJUU/XaEaW6eHhYEd1B3KdyZzIQ=)
2: C6D6364E125111F1B8BE3F1A2A3D8C67.roa (hash: 2s0kYzcxntnOC74EHeYBKILmLaGPsj8ZMironzxM9RM=)
3: C7C9E3B6125111F1B8BE3F1A2A3D8C67.roa (hash: XjNUxvWdrN/f8UvJCjdCzDeTUbQlad9gZAT9Co3kYbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1771 (0x6eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095
Validity
Not Before: Mar 24 21:57:24 2026 GMT
Not After : Mar 31 21:57:24 2026 GMT
Subject: CN=69c308c4-8286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:ff:e6:8e:9e:69:5b:95:83:b7:c2:1b:60:
fb:a9:ae:a9:c5:26:8b:71:3a:df:3a:df:a3:9c:fc:
ee:39:52:f9:af:5b:d9:d7:8a:46:ea:b5:bc:af:f8:
d1:cf:11:cd:08:25:92:2e:9d:98:69:aa:84:09:d1:
f4:73:4a:18:9d:44:38:e4:24:32:ab:2a:dd:11:6e:
d7:1c:02:e7:f8:97:35:ec:1b:fd:68:cf:77:bd:b1:
7e:54:19:28:be:0a:27:57:f8:ae:a7:84:5e:10:87:
a1:10:fa:97:69:1d:9e:c3:92:33:8d:05:71:b9:3f:
4e:3e:7a:a5:2c:46:b5:b5:54:ee:47:62:c3:c6:0e:
43:d2:e4:0a:0c:5d:52:e7:39:e2:9a:1d:7e:c2:7c:
2c:d2:3d:be:46:8e:a9:f9:11:04:2d:4a:58:6b:e5:
c7:58:ef:40:8d:80:a0:13:0a:df:aa:65:d5:db:f3:
6d:76:7d:9c:1a:bb:2d:cd:dd:cf:01:41:55:cb:ed:
64:6f:17:4c:94:9d:df:44:4c:1a:4b:49:14:fb:19:
c1:af:ad:c6:5b:57:b5:1a:6d:59:93:64:d2:87:48:
a4:16:7d:ad:9c:58:23:d1:a6:80:a7:a4:3d:e8:08:
ea:64:dd:29:6d:7d:17:ba:8e:09:2d:66:6e:dc:cf:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:91:DB:22:08:42:AE:71:E7:6A:46:6F:64:B5:44:3D:24:B0:BC:53
X509v3 Authority Key Identifier:
keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:39:75:1c:7d:96:fd:68:ad:c5:4f:43:ce:54:9e:b8:00:bc:
fb:61:ce:cf:82:bd:35:cd:af:aa:c3:28:ab:f5:22:f5:68:af:
6c:8b:57:c6:c8:19:a3:ae:8f:93:72:6d:11:0d:bc:2a:be:1e:
1d:91:a3:3e:fb:56:8a:60:60:ad:4f:fd:9f:27:98:59:ce:e1:
cf:5a:65:bb:a3:70:d5:b2:43:fd:a4:b5:41:8e:3b:e8:7c:75:
fc:10:a6:fe:d5:df:78:16:a2:fc:69:2f:7d:56:80:2f:0a:61:
4a:39:72:cd:cb:13:03:e2:74:6a:dd:6e:7c:dc:81:66:64:37:
ca:91:e8:c1:ea:94:85:ee:a1:ce:04:50:f6:c1:29:8d:d9:1c:
76:56:cb:cf:35:e0:ba:23:ea:11:34:bc:bb:df:53:5b:d4:59:
d4:9c:6d:e1:98:9b:17:bc:35:ed:83:70:8c:79:a7:03:8b:18:
5b:a4:c7:67:f5:ef:78:d2:e6:62:f0:70:d9:0b:b7:a3:b8:d1:
32:dd:f0:40:91:76:ec:81:1b:bf:ba:55:ef:4d:f6:89:bf:8a:
c5:fd:6d:51:ee:c6:39:42:63:74:01:f3:47:a6:84:d0:0d:37:
15:f8:97:74:8a:45:54:98:d7:cb:d4:f7:31:f1:f4:1a:08:0b:
63:47:29:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:05:17 2026 by rpki-client