
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
File: rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json)
Hash identifier: CG9O+L3ZRmCTZa70+l4ERIooBLfeDnGCYJBc5jh1tNA=
Subject key identifier: 1B:EF:D4:35:B0:70:61:93:0E:33:7B:AA:7C:F3:14:ED:2A:20:B4:C7
Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4
Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
Certificate serial: 0648
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
Manifest number: 05E7
Signing time: Wed 22 Jul 2026 16:23:55 +0000
Manifest this update: Wed 22 Jul 2026 16:23:54 +0000
Manifest next update: Wed 29 Jul 2026 16:23:54 +0000
Files and hashes: 1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: +4heEyHITX0FxbQlVWjzxE2kejVQ+zIYBT3ODJ8KC5U=)
2: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: /rUJMh30ecAZJtef/1j5fUYrkpMN5VcKfJkxNOsXqME=)
3: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: wYx1PeQ/7Fy2cG/DCJNU1b8Uc41NkcD4iMjLyRu1msU=)
4: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: SB23MH7egYKIQ17nCj+xHe+4JVPIgfw/s/SRgDFUT6Q=)
5: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: CFOJdfAQAwrs7SLJek/PgQnllBP7mK7ufRDP4foqiCw=)
6: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: 4cXqlRer52ZWlIOSKIID7G64udphrDhp88IgkcR8MHE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl
rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1608 (0x648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
Validity
Not Before: Jul 22 16:23:54 2026 GMT
Not After : Jul 29 16:23:54 2026 GMT
Subject: CN=6a60ee9b-ef0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a7:06:8f:b3:11:63:f5:d9:ca:b8:f8:dd:89:
6f:cb:67:0f:db:df:69:96:90:ae:ad:d6:bc:8a:af:
57:13:d3:df:37:81:b8:87:be:fb:23:75:f9:1d:d4:
42:a5:d9:10:5c:3f:97:fd:ae:a7:38:5a:5f:7d:7a:
aa:90:82:22:b7:ec:cf:d6:3d:90:22:44:a3:7c:53:
66:35:41:13:c3:f8:a3:47:a0:59:03:0d:34:1a:fc:
1e:05:12:99:b2:a8:34:2b:b8:00:c1:f5:a8:2a:39:
5f:a5:66:5d:8f:0f:1f:c5:0b:39:bf:0a:c6:43:b7:
aa:39:48:26:82:f9:cd:96:47:4c:37:23:53:d1:45:
0c:ab:26:1e:5c:bc:34:26:a5:31:73:dc:9d:d9:48:
cb:17:d6:13:e7:18:9d:b3:21:96:8a:7e:96:6f:ab:
6d:5a:e8:f0:5b:5c:82:92:18:7e:f5:69:bb:c2:48:
61:ce:9a:0b:e7:ec:93:b8:fd:ca:36:8d:b5:59:ea:
a3:3c:93:3f:cd:44:ba:28:9b:06:c2:b5:fd:8c:69:
8d:b7:75:3e:18:42:50:34:b5:83:ad:c9:41:6a:ba:
af:4c:9e:4d:5c:02:fb:58:d9:17:f5:91:4a:3b:50:
43:08:ee:41:3c:22:87:8b:3a:53:94:9a:4c:1a:79:
93:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EF:D4:35:B0:70:61:93:0E:33:7B:AA:7C:F3:14:ED:2A:20:B4:C7
X509v3 Authority Key Identifier:
keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:a8:8f:64:3d:fa:02:01:ec:d8:94:06:f4:21:a8:23:d5:25:
ab:ce:c4:1d:ae:74:e6:81:36:69:e4:60:d3:2f:b0:e8:c4:6e:
95:79:04:a9:85:54:12:17:6d:d2:3f:34:97:19:2e:6c:e2:f0:
2c:8e:77:a5:16:4d:79:be:90:f6:ba:b9:ee:a2:0a:31:42:f8:
5b:37:f9:78:ad:c9:87:c5:17:a9:ec:d9:47:56:1b:85:2a:8f:
1a:f5:b3:0a:c0:ef:c7:95:31:7f:89:53:a7:ad:75:77:68:1b:
8a:13:1d:eb:37:7e:4f:4f:6f:d3:9d:85:ae:e2:eb:1a:f1:f0:
7f:5a:0f:10:72:f4:40:20:ec:92:ca:7f:8f:14:71:02:0c:a6:
c1:19:85:58:4d:02:bf:b1:c1:88:67:95:df:c6:03:7f:e7:5d:
52:d6:8c:97:e7:e1:10:77:78:48:3d:2e:01:28:bf:c1:d4:16:
e2:b4:4f:a8:50:73:a2:ae:d4:23:a8:7d:ce:9f:ec:86:5a:04:
89:35:71:1d:96:f8:07:4d:d7:7e:42:ff:8e:a6:21:47:02:40:
d2:73:cc:43:7b:d8:a3:13:9e:5a:11:b2:fd:c2:f1:4f:1d:f1:
a3:27:6c:af:bb:1d:72:c9:27:77:4c:5e:e1:de:f5:d9:9f:d6:
fb:11:19:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:12 2026 by rpki-client