
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
File: bV1Q6IudZeiv2ijCzqYVAScDhgg.mft (raw, json)
Hash identifier: oqxhcc/7lxkf0YwcQ4UaaUpV7tbAfZs/Qp/T0eDjloE=
Subject key identifier: 82:F6:BF:C1:E1:43:C5:9A:71:A2:4F:8A:BC:7A:10:36:44:60:E0:4D
Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Certificate serial: 040C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
Manifest number: 03BD
Signing time: Wed 25 Mar 2026 00:26:04 +0000
Manifest this update: Wed 25 Mar 2026 00:26:03 +0000
Manifest next update: Wed 01 Apr 2026 00:26:03 +0000
Files and hashes: 1: bV1Q6IudZeiv2ijCzqYVAScDhgg.crl (hash: W8naH2MPfTMXGxsSnYmCG0L2UbWCh3v+PJPJtdlN0Jc=)
2: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (hash: Sg47+AxlxCK2XX0hEgjt14qUmvnvlCt8GjGyJgpeWz4=)
3: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (hash: SKfW4daROkL79U1lqA8R/sqQZ+TNV9o/ZUq25H/qMII=)
4: 142EA3A84FEF11EF9A822A21C4F9AE02.roa (hash: lK+6g1dFg3Vz3OBJu6Pg0Z8gk/MbJN6sYU86kkiDIvM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:26:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1036 (0x40c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Validity
Not Before: Mar 25 00:26:03 2026 GMT
Not After : Apr 1 00:26:03 2026 GMT
Subject: CN=69c32b9b-2748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:f5:19:aa:6c:23:dd:d2:ef:97:4f:14:eb:
d9:bf:9e:75:ef:58:8c:7c:20:0d:b8:73:08:0e:28:
71:53:e3:23:ee:d7:e0:ff:55:58:da:cd:6d:c2:1a:
76:72:28:60:13:f4:e9:4f:e3:83:b7:c2:5c:ea:36:
0f:47:93:e4:48:93:f2:95:5f:99:f1:1e:1c:0d:d1:
e4:f4:b3:f5:bf:ac:28:89:5f:af:67:ed:15:58:3a:
79:a7:64:63:ca:ff:3b:91:9c:36:17:c9:d8:75:ac:
de:55:7a:9f:86:54:08:2d:18:e4:fc:e6:73:04:a4:
a0:83:44:d6:d3:67:93:a1:d3:7b:1c:8c:0c:82:98:
6f:32:2e:fb:cf:d5:15:5c:f4:42:d7:4a:88:77:67:
8e:a3:7b:d6:7f:51:ca:ee:8a:38:23:0a:05:cf:71:
3e:fa:8b:05:b1:6d:2b:83:07:1a:8e:1b:c6:af:82:
72:ae:d4:11:f1:36:98:7a:69:aa:62:09:61:9f:a1:
be:48:12:27:93:ff:85:9e:02:8b:12:69:eb:3d:e4:
cf:87:72:08:1b:76:03:52:89:5e:d8:78:b4:c8:fe:
af:76:d7:5d:12:d8:eb:cf:87:ed:e9:b4:72:55:55:
47:8c:d7:a0:da:01:fb:02:b3:e5:09:ca:2b:2f:44:
8e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F6:BF:C1:E1:43:C5:9A:71:A2:4F:8A:BC:7A:10:36:44:60:E0:4D
X509v3 Authority Key Identifier:
keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:bf:4a:cc:14:65:d8:9f:57:30:1c:8f:5c:0e:65:82:6a:05:
74:8b:db:9e:f4:df:6e:a4:a7:39:49:e5:2d:84:85:43:bd:e7:
ab:a8:63:31:2b:16:33:50:e3:59:23:6e:8f:d2:49:78:0c:97:
fd:4e:fa:c5:0e:0f:f9:f7:81:d6:48:11:67:12:44:17:60:8a:
b9:7c:e3:36:89:a2:a5:02:51:e8:da:2c:c6:c6:3d:31:14:8b:
ff:46:4c:7b:aa:f1:93:27:79:0b:a3:ae:5c:b2:b6:3e:e3:20:
94:5d:35:be:44:85:dc:9a:ee:91:11:da:2c:f4:1e:86:d4:5c:
49:7a:f3:66:45:b3:c9:ff:c2:06:7a:49:26:e1:77:eb:40:4b:
3c:f7:52:53:90:3c:a8:74:d4:7d:70:99:86:9d:df:2d:52:b2:
bc:cb:92:16:18:83:a9:4f:b9:dc:10:b1:52:ec:f3:e9:e3:d5:
8f:5f:7f:90:4e:76:82:f4:d6:46:58:25:8a:70:ee:ed:ff:35:
a8:e4:18:94:57:92:7f:a1:9a:47:c2:98:e7:3d:55:95:c8:37:
d1:d3:b1:55:74:e2:e6:10:bf:e6:4e:d6:fa:9d:aa:51:55:23:
9c:59:99:4d:45:8b:f1:7d:da:29:ae:ba:b3:57:ac:7e:cf:4c:
43:1c:09:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx
MjcwMzg2MDgwHhcNMjYwMzI1MDAyNjAzWhcNMjYwNDAxMDAyNjAzWjAYMRYwFAYD
VQQDEw02OWMzMmI5Yi0yNzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo1L1GapsI93S75dPFOvZv55171iMfCANuHMIDihxU+Mj7tfg/1VY2s1twhp2
cihgE/TpT+ODt8Jc6jYPR5PkSJPylV+Z8R4cDdHk9LP1v6woiV+vZ+0VWDp5p2Rj
yv87kZw2F8nYdazeVXqfhlQILRjk/OZzBKSgg0TW02eTodN7HIwMgphvMi77z9UV
XPRC10qId2eOo3vWf1HK7oo4IwoFz3E++osFsW0rgwcajhvGr4JyrtQR8TaYemmq
Yglhn6G+SBInk/+FngKLEmnrPeTPh3IIG3YDUole2Hi0yP6vdtddEtjrz4ft6bRy
VVVHjNeg2gH7ArPlCcorL0SOcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIL2v8Hh
Q8WacaJPirx6EDZEYOBNMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC
RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTFCQy9BRTQ0RDI0QURCRTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFpl
aXYyaWpDenFZVkFTY0RoZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn79KzBRl2J9XMByPXA5lgmoFdIvbnvTfbqSnOUnlLYSFQ73nq6hjMSsWM1Dj
WSNuj9JJeAyX/U76xQ4P+feB1kgRZxJEF2CKuXzjNomipQJR6NosxsY9MRSL/0ZM
e6rxkyd5C6OuXLK2PuMglF01vkSF3JrukRHaLPQehtRcSXrzZkWzyf/CBnpJJuF3
60BLPPdSU5A8qHTUfXCZhp3fLVKyvMuSFhiDqU+53BCxUuzz6ePVj19/kE52gvTW
RlglinDu7f81qOQYlFeSf6GaR8KY5z1Vlcg30dOxVXTi5hC/5k7W+p2qUVUjnFmZ
TUWL8X3aKa66s1esfs9MQxwJqg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:18 2026 by rpki-client