
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
File: fBlP7bilyMl2697IST3zw_CMyOI.mft (raw, json)
Hash identifier: /4UCfXZ4bl4aeWDu/gRrHvMWsgLCXs6s9cvSaxOzoNc=
Subject key identifier: 51:95:D3:E5:0B:BC:64:E0:CD:35:C2:7A:F2:00:1C:98:B9:4A:97:4C
Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
Certificate issuer: /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
Manifest number: 01AA
Signing time: Tue 12 May 2026 23:04:14 +0000
Manifest this update: Tue 12 May 2026 23:04:13 +0000
Manifest next update: Tue 19 May 2026 23:04:13 +0000
Files and hashes: 1: fBlP7bilyMl2697IST3zw_CMyOI.crl (hash: mY/BfHCXu7tg/K0av89rZi6xeKNXg3YxfTdk9oU6Muw=)
2: C7AAEA76637311EF97465324C4F9AE02.roa (hash: GPOp4w2ZvKNt+x+91lwiugP/PaS/3PPwDU9MX+UN6Qg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl
rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE056, serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
Validity
Not Before: May 12 23:04:13 2026 GMT
Not After : May 19 23:04:13 2026 GMT
Subject: CN=6a03b1ee-3b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:5f:30:b5:60:71:83:69:1e:21:49:60:ef:
85:60:04:dd:96:07:0c:54:29:c3:1a:07:2d:42:c2:
25:cd:bf:8e:da:bd:a2:42:60:cf:b9:a5:3d:cf:a2:
77:be:29:00:8f:bd:5a:68:28:f8:19:ae:bc:45:9e:
0a:d9:23:43:a2:a6:cf:69:01:87:9c:40:53:83:55:
aa:51:56:e2:1b:d1:bd:59:bf:e6:9b:d7:55:e2:48:
26:78:ff:a5:92:69:8e:c0:fd:d9:92:d0:78:a2:cd:
4a:c8:c0:66:01:a5:08:26:ab:df:6e:2e:e8:de:3b:
84:d4:27:8b:0d:e7:d5:0b:b8:8c:fe:f6:72:e3:f2:
8b:d1:c7:0a:ea:2e:d3:f5:17:36:52:f7:d6:17:12:
8a:d6:9b:81:22:01:a3:89:00:97:de:ab:e5:2c:eb:
68:7a:d8:7e:af:58:43:e9:70:66:71:35:cf:c2:9d:
29:f6:32:c0:d0:c4:ac:85:41:86:cd:87:1f:78:ec:
2a:c2:cf:1a:0d:f0:5e:e2:51:21:2f:4b:45:68:24:
69:28:ed:d5:a9:6c:71:5e:22:81:46:ca:4b:da:51:
8e:14:3f:14:da:65:46:55:c3:ba:8c:9c:e6:8e:2d:
c7:de:d6:a6:d3:17:c2:3f:a8:2f:2c:19:64:d8:f2:
3c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:95:D3:E5:0B:BC:64:E0:CD:35:C2:7A:F2:00:1C:98:B9:4A:97:4C
X509v3 Authority Key Identifier:
keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:84:50:b6:44:54:14:10:24:c2:84:2c:ae:98:43:6d:c6:5a:
6b:6f:07:07:3f:ed:fb:32:97:92:d3:90:8d:1b:6b:b0:dd:ff:
27:27:34:ce:7f:ea:a7:9e:f0:f4:b7:6c:e4:51:7f:c4:b3:95:
5f:4e:22:59:97:5d:80:47:e4:e3:16:59:59:4b:ea:9d:f7:71:
77:c7:c6:67:f3:1a:3f:10:5d:d9:53:50:89:e5:bd:61:e7:9f:
e2:4a:7f:55:34:cc:b4:51:ae:6a:13:95:58:17:5e:83:07:36:
ce:51:7c:ac:10:4e:0c:84:8c:81:44:f1:87:e9:c0:e6:26:de:
eb:2e:a2:e8:6f:7c:47:20:32:d4:6a:d4:dd:89:e4:ac:48:d0:
c1:04:61:68:1c:67:3d:24:65:3a:8e:fd:26:c6:53:f0:e4:60:
43:a3:61:b3:26:d2:dd:14:75:24:a1:a8:53:fd:29:b1:14:91:
44:a8:66:d7:7e:2b:8c:11:23:b5:fa:53:21:a8:c4:87:1d:7f:
20:12:a6:2b:96:12:35:d8:95:e7:33:7d:e9:d7:6f:24:f0:91:
67:32:96:0d:03:81:86:c0:74:a7:b9:45:df:0b:1a:0e:c0:5c:
2b:27:20:47:6e:af:cc:f2:06:41:0d:e5:19:de:13:73:c4:28:
a0:d1:65:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:39:23 2026 by rpki-client