
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
File: bb1cTQEh_LMY54xFG29WcyCYYAI.mft (raw, json)
Hash identifier: hBTwjlRaToF1kvHL/niLvHclDgDPkd8VGNq81P4SGCU=
Subject key identifier: A3:3C:04:F4:D5:D9:28:5B:4B:2E:32:1A:51:8C:BA:7A:FB:33:8E:5B
Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
Certificate issuer: /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Certificate serial: 04A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
Manifest number: 0462
Signing time: Thu 23 Jul 2026 01:11:12 +0000
Manifest this update: Thu 23 Jul 2026 01:11:12 +0000
Manifest next update: Thu 30 Jul 2026 01:11:12 +0000
Files and hashes: 1: bb1cTQEh_LMY54xFG29WcyCYYAI.crl (hash: eIK9bG2zZniIA+t5xkCKug6940zibDp3/VCLNvm5G+g=)
2: AD17704445F611EE97DF317CC4F9AE02.roa (hash: /vhmP+Y6Yb84j9vhzg0Zbk6HCi7aZS+Km8vmqSzsrmM=)
3: AEE9F9E6326011ED9031BC4FC4F9AE02.roa (hash: r+lrx7WpAI1BilPAcnEksEUaCu2KnCEQLhymAPB2i1s=)
4: 9B0C244C73B611EEB18A0385C4F9AE02.roa (hash: tBey+DH64+Kn32UVWimcmMh2WoGFqT18gD06i2GEZsU=)
5: 943D15902D1011EFBBEBA67BC4F9AE02.roa (hash: dPxIUNEqYuFtJskM6HAN9FGSFnQOEAtn06dnZBLnvG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1186 (0x4a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Validity
Not Before: Jul 23 01:11:12 2026 GMT
Not After : Jul 30 01:11:12 2026 GMT
Subject: CN=6a616a30-85aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0c:21:57:55:cd:75:a9:78:eb:41:05:a5:8a:
f8:04:b1:c2:21:e1:96:d4:bc:eb:46:33:28:03:a4:
ec:93:9a:22:11:1e:4a:87:ea:fe:0d:fa:16:3a:6a:
23:40:87:57:57:b5:d7:15:79:76:c4:ee:e9:15:bd:
42:ac:35:54:60:57:0f:dd:47:b6:7d:05:ea:48:32:
84:f2:bc:d8:a8:72:95:40:50:05:59:cb:9f:73:34:
3f:1e:34:89:86:75:76:d2:21:f9:f6:75:6f:ee:d6:
10:e8:1f:9c:32:1c:11:c5:18:7e:0c:02:7e:d2:44:
4e:c2:93:3c:af:0f:66:1a:12:78:b5:7a:59:a5:db:
7a:04:0d:33:b6:19:30:9c:0a:16:46:8c:0a:0f:0c:
77:a1:d9:36:47:32:bb:b9:bd:7e:c3:4f:aa:e2:a6:
75:7f:a7:2d:b1:cf:7b:57:e5:21:d8:f5:5a:86:f2:
b8:e4:22:de:88:94:4e:87:56:ab:2c:20:c9:42:68:
1c:79:74:4d:b6:d3:84:18:87:d6:2a:df:b2:d0:43:
0e:a1:96:eb:2e:46:3e:ea:0b:ec:78:3d:98:55:6f:
e1:5f:66:5e:01:7d:0a:74:c7:84:cd:40:ae:3c:58:
b6:c6:97:16:2f:da:7d:3d:08:fb:4f:15:79:54:c4:
7d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3C:04:F4:D5:D9:28:5B:4B:2E:32:1A:51:8C:BA:7A:FB:33:8E:5B
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9a:c3:fa:2c:bd:99:15:9b:51:c0:07:ab:3c:9e:a1:15:51:
78:de:18:0d:48:48:10:f2:ab:7f:fc:21:a6:9b:57:9a:c8:64:
dd:92:c5:f2:74:a5:be:51:08:18:3b:48:b0:9c:a0:78:99:30:
39:a3:f1:67:32:75:f6:03:e4:7d:88:bc:65:c7:82:9f:35:3b:
9b:e1:23:dd:43:de:1e:8d:35:a4:32:5e:6e:c1:54:82:84:ec:
82:e4:6b:b4:f9:c4:31:11:92:f8:c8:00:99:bb:46:2a:ca:37:
c2:70:3b:92:b1:23:f2:f9:33:e2:32:d5:22:02:f9:20:75:55:
de:a7:0b:13:0f:a9:ad:1a:1c:d1:c5:7a:2e:d9:61:99:03:bd:
da:20:e1:d0:91:b3:98:83:9a:f4:44:e4:d4:09:c3:d5:76:18:
1d:25:fd:f2:47:7f:3d:c6:13:66:5d:0f:73:94:d6:dd:10:54:
b2:7e:e2:42:91:5e:2b:3d:81:c8:90:86:0f:73:6f:c9:25:d7:
57:23:d0:d3:be:e0:67:bc:75:9f:1c:e4:d0:04:2c:b7:45:a0:
ef:08:4c:db:1f:28:8e:d7:0d:66:d9:59:85:46:f6:a0:20:09:
c2:5a:1b:e8:c9:60:df:e9:96:9f:a0:2b:78:97:a4:d0:93:98:
10:a4:13:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:36:33 2026 by rpki-client