
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
File: RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft (raw, json)
Hash identifier: 3skRJtbeYINfKD1v4jcZR3oPBG2ripQ0US2DLmUmQ0g=
Subject key identifier: C8:8D:2A:CE:17:44:0C:4A:30:89:F2:49:80:60:BA:70:30:D0:3E:26
Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
Certificate issuer: /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Certificate serial: 084B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
Manifest number: 1080
Signing time: Wed 22 Jul 2026 21:32:35 +0000
Manifest this update: Wed 22 Jul 2026 21:32:34 +0000
Manifest next update: Wed 29 Jul 2026 21:32:34 +0000
Files and hashes: 1: RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl (hash: EcGWJwd6zYZsbEGxELU0IVCaAoW2OC8wpNccnZKCF58=)
2: 84FDF25A396711ED8AF52966C4F9AE02.roa (hash: jUqnFx87IlStP4kkY9M0idgA/Hwc78g7kwMihGngNEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl
rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2123 (0x84b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5C49, serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Validity
Not Before: Jul 22 21:32:34 2026 GMT
Not After : Jul 29 21:32:34 2026 GMT
Subject: CN=6a6136f3-1471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bf:73:bb:56:89:55:55:45:fa:46:db:0c:a4:
54:0e:8a:af:15:82:1f:b2:e7:17:30:6d:48:25:30:
11:d8:4d:e3:80:ba:29:98:9b:f0:4c:12:a5:b5:a6:
b4:8c:d4:cf:3a:7b:66:f2:6f:91:cb:db:c3:57:d4:
3a:7f:74:64:a2:f4:31:58:26:50:b8:65:a9:0a:12:
7e:08:9f:2f:d2:77:03:66:72:03:b1:79:cc:88:23:
96:91:2a:9a:63:44:b0:00:6f:f7:15:bd:58:50:52:
ff:10:38:c7:c1:b6:13:a8:83:b8:ea:a7:7a:fa:fa:
42:f2:ab:e8:88:7a:92:be:2c:fc:22:35:31:ce:b5:
74:c7:19:45:2e:8c:89:7f:95:cc:08:a6:a0:a7:e3:
e7:17:a6:31:fb:9d:f3:b0:5e:df:20:6a:af:f4:dc:
0c:a5:c0:29:5b:c5:f0:44:45:61:99:75:41:c5:c7:
06:c8:11:db:7c:35:0e:35:ff:74:df:69:56:52:36:
16:df:d2:1f:b8:3f:e1:09:46:a2:81:30:ea:4f:1d:
aa:b1:b8:d8:0a:60:4f:db:8d:85:fa:fa:94:cb:49:
2a:e3:b5:bd:78:28:1c:87:7a:d4:94:a2:1d:57:9c:
cd:f2:b9:a1:92:d5:e7:6e:62:76:f0:9a:71:70:ed:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8D:2A:CE:17:44:0C:4A:30:89:F2:49:80:60:BA:70:30:D0:3E:26
X509v3 Authority Key Identifier:
keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:9e:aa:7a:ac:3d:d8:2f:ba:64:89:25:6f:63:bc:ec:5c:ae:
6d:11:17:da:eb:d4:26:33:cf:33:43:ca:04:58:19:65:bb:ea:
37:9c:9a:3c:33:c5:07:3d:05:12:6e:64:32:a8:02:d5:43:32:
15:72:e1:2a:9e:47:1f:da:c7:fb:73:e5:bb:bf:78:fd:06:b2:
3e:c3:b1:80:bd:01:68:5c:7c:d6:0f:bc:62:4c:9e:09:1e:90:
3c:d2:58:a9:0a:b6:86:91:7e:b9:14:70:d9:bc:9c:3b:37:35:
c4:d8:be:44:fc:a1:4b:55:f6:ad:8d:de:a5:59:3f:df:3d:95:
5d:40:9c:8f:38:34:10:17:cc:74:2a:d0:d4:8e:f8:c5:22:3d:
82:ff:7d:b2:f3:65:7e:78:cd:bb:99:cd:64:88:5f:cd:c9:f4:
cf:56:a6:02:4c:dc:37:03:2f:46:6b:7f:6b:17:75:1e:a5:88:
8d:84:31:2e:30:30:04:e1:d7:99:82:8d:fd:a8:1e:30:2a:e2:
32:97:c5:7c:47:b2:0c:e4:32:b4:c7:9c:3c:ec:fa:ba:d2:40:
a3:3f:e3:3c:c3:be:fd:6f:48:3c:d7:34:9d:35:5a:89:55:45:
43:aa:38:f4:dc:d7:3a:52:83:ea:ac:19:10:ee:94:10:dc:c9:
d2:4a:42:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:17:37 2026 by rpki-client