
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
File: bb1cTQEh_LMY54xFG29WcyCYYAI.mft (raw, json)
Hash identifier: 496hEkOJtWU1rUoGFaYc4yHL4kgiWEZwXVKk4v5wREI=
Subject key identifier: 83:8E:7D:50:1C:1D:E4:2A:AB:25:62:DB:44:0F:B3:B5:D3:02:15:BA
Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
Certificate issuer: /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Certificate serial: 0465
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
Manifest number: 0425
Signing time: Wed 25 Mar 2026 00:10:27 +0000
Manifest this update: Wed 25 Mar 2026 00:10:26 +0000
Manifest next update: Wed 01 Apr 2026 00:10:26 +0000
Files and hashes: 1: bb1cTQEh_LMY54xFG29WcyCYYAI.crl (hash: IGZi1taL1ZuGbSRAhwkj1ng65Wg7zhoJ6r2AL4iuaDA=)
2: 943D15902D1011EFBBEBA67BC4F9AE02.roa (hash: dPxIUNEqYuFtJskM6HAN9FGSFnQOEAtn06dnZBLnvG8=)
3: AEE9F9E6326011ED9031BC4FC4F9AE02.roa (hash: r+lrx7WpAI1BilPAcnEksEUaCu2KnCEQLhymAPB2i1s=)
4: AD17704445F611EE97DF317CC4F9AE02.roa (hash: /vhmP+Y6Yb84j9vhzg0Zbk6HCi7aZS+Km8vmqSzsrmM=)
5: 9B0C244C73B611EEB18A0385C4F9AE02.roa (hash: tBey+DH64+Kn32UVWimcmMh2WoGFqT18gD06i2GEZsU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:10:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1125 (0x465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Validity
Not Before: Mar 25 00:10:26 2026 GMT
Not After : Apr 1 00:10:26 2026 GMT
Subject: CN=69c327f3-1192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:c1:04:7f:a0:70:18:96:65:e8:09:a1:6d:
2b:58:89:33:02:5f:ba:a2:23:0b:2d:3d:7e:03:33:
75:c0:28:1a:ec:75:46:15:8d:17:ba:66:b8:22:3f:
3e:9e:b7:44:56:40:f4:b7:c4:37:85:c2:21:0f:a9:
91:71:71:09:3b:a5:71:76:f3:55:3b:1f:11:c3:6d:
02:46:75:e9:8a:71:17:47:2a:da:6d:3e:00:bc:ee:
41:c9:23:6c:e7:03:72:60:3b:51:31:23:85:cd:1d:
d4:09:ad:aa:56:90:6d:d0:7c:16:39:28:ce:af:76:
3b:34:85:86:91:0f:6b:14:28:1b:de:35:c9:88:e0:
52:bc:08:9f:39:b9:b0:1e:bf:4a:25:f8:19:64:95:
98:cd:a6:e2:93:9b:d4:09:92:b6:03:98:ef:b1:18:
f0:32:10:66:8c:ab:2a:b7:b3:0e:57:d5:1b:5f:8d:
ce:9a:96:2f:88:60:2d:38:a1:6b:5a:a3:c7:e9:ee:
2b:6e:3c:86:1a:25:74:7d:db:5c:09:40:6a:90:7b:
76:66:31:65:3b:a1:7e:f1:4a:6d:2e:ba:08:18:14:
31:09:60:bc:1c:5f:6c:2f:fd:bc:96:a3:bc:e4:5c:
44:20:e3:34:16:a3:c2:85:2d:a4:83:68:8e:7b:a1:
e2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8E:7D:50:1C:1D:E4:2A:AB:25:62:DB:44:0F:B3:B5:D3:02:15:BA
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:27:fe:b6:47:f5:e8:7e:82:3c:a7:82:71:06:9e:58:7b:15:
6a:a6:7b:4f:28:b7:0f:38:66:a6:8c:25:79:86:9c:0b:2d:43:
32:35:e6:d0:12:4a:55:2b:73:4f:3d:19:62:32:31:92:77:11:
07:08:d8:ca:6e:7c:88:94:fe:25:49:c6:1e:91:50:92:52:ed:
d3:4f:b5:fd:09:03:b1:90:e5:70:8d:eb:b4:a7:ab:ca:a7:21:
bc:32:0b:db:03:07:53:ef:e5:4a:8f:bc:12:49:2e:24:9e:09:
b8:fc:78:d6:be:87:07:ba:43:a5:b3:54:8f:7e:25:78:8b:41:
94:8f:8d:40:16:39:52:87:cb:2b:97:96:1b:1a:e0:3c:c7:8e:
09:bb:85:8a:f0:dd:d3:6d:2f:db:cc:81:bb:1e:db:65:44:df:
80:5a:1d:3e:c3:b9:54:fd:79:54:a9:89:86:0d:8a:64:83:00:
2e:19:cd:3c:f9:73:58:f4:d8:8b:6c:33:c4:4c:c1:10:b7:df:
1a:3a:43:63:2d:1f:5f:66:bd:8c:b2:7d:98:01:ea:cc:1c:85:
9a:56:a6:ae:b1:e2:6b:c2:3a:42:15:39:78:9e:f4:69:66:65:
83:8a:e1:c6:c1:97:e6:c7:3c:c0:f2:5a:28:ac:08:2f:c8:d7:
c8:ab:c1:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDEyMTYxMTAvBgNVBAUTKDZEQkQ1QzREMDEyMUZDQjMxOEU3OEM0NTFCNkY1Njcz
MjA5ODYwMDIwHhcNMjYwMzI1MDAxMDI2WhcNMjYwNDAxMDAxMDI2WjAYMRYwFAYD
VQQDEw02OWMzMjdmMy0xMTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlJvBBH+gcBiWZegJoW0rWIkzAl+6oiMLLT1+AzN1wCga7HVGFY0Xuma4Ij8+
nrdEVkD0t8Q3hcIhD6mRcXEJO6VxdvNVOx8Rw20CRnXpinEXRyrabT4AvO5BySNs
5wNyYDtRMSOFzR3UCa2qVpBt0HwWOSjOr3Y7NIWGkQ9rFCgb3jXJiOBSvAifObmw
Hr9KJfgZZJWYzabik5vUCZK2A5jvsRjwMhBmjKsqt7MOV9UbX43OmpYviGAtOKFr
WqPH6e4rbjyGGiV0fdtcCUBqkHt2ZjFlO6F+8UptLroIGBQxCWC8HF9sL/28lqO8
5FxEIOM0FqPChS2kg2iOe6HiRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIOOfVAc
HeQqqyVi20QPs7XTAhW6MB8GA1UdIwQYMBaAFG29XE0BIfyzGOeMRRtvVnMgmGAC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIxNi9EQzc4MjY4Q0I5
NEIxMUVDODMyQjc0MTlDNEY5QUUwMi9iYjFjVFFFaF9MTVk1NHhGRzI5V2N5Q1lZ
QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JiMWNUUUVoX0xNWTU0eEZHMjlXY3lDWVlBSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTIxNi9EQzc4MjY4Q0I5NEIxMUVDODMyQjc0MTlDNEY5QUUwMi9iYjFjVFFFaF9M
TVk1NHhGRzI5V2N5Q1lZQUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnyf+tkf16H6CPKeCcQaeWHsVaqZ7Tyi3DzhmpowleYacCy1DMjXm0BJKVStz
Tz0ZYjIxkncRBwjYym58iJT+JUnGHpFQklLt00+1/QkDsZDlcI3rtKeryqchvDIL
2wMHU+/lSo+8EkkuJJ4JuPx41r6HB7pDpbNUj34leItBlI+NQBY5UofLK5eWGxrg
PMeOCbuFivDd020v28yBux7bZUTfgFodPsO5VP15VKmJhg2KZIMALhnNPPlzWPTY
i2wzxEzBELffGjpDYy0fX2a9jLJ9mAHqzByFmlamrrHia8I6QhU5eJ70aWZlg4rh
xsGX5sc8wPJaKKwIL8jXyKvBug==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:52:05 2026 by rpki-client