
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
File: 1bm7ozBeiMAA9WKTnROLpQYieyo.mft (raw, json)
Hash identifier: kdwGFBqBjmCJi77nGMctqlQcNpV7mIVOplwikyQHeFs=
Subject key identifier: 9A:8F:68:97:94:8B:30:0C:8C:E3:74:84:76:00:D4:4F:75:1E:3F:DC
Authority key identifier: D5:B9:BB:A3:30:5E:88:C0:00:F5:62:93:9D:13:8B:A5:06:22:7B:2A
Certificate issuer: /CN=A91EAF4B/serialNumber=D5B9BBA3305E88C000F562939D138BA506227B2A
Certificate serial: 0BE2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
Manifest number: 0D9D
Signing time: Wed 22 Jul 2026 19:20:24 +0000
Manifest this update: Wed 22 Jul 2026 19:20:24 +0000
Manifest next update: Wed 29 Jul 2026 19:20:24 +0000
Files and hashes: 1: 1bm7ozBeiMAA9WKTnROLpQYieyo.crl (hash: gu9dBkL+7FMbSg5MY/YN9aQ/77fR9a0j/pXJPojhDIU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.crl
rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:20:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3042 (0xbe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAF4B, serialNumber=D5B9BBA3305E88C000F562939D138BA506227B2A
Validity
Not Before: Jul 22 19:20:24 2026 GMT
Not After : Jul 29 19:20:24 2026 GMT
Subject: CN=6a6117f8-e7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:b9:13:e2:c6:05:fc:03:09:02:6b:94:27:
c2:0f:41:dd:36:a2:a9:85:f9:43:84:6f:cc:4c:7f:
7d:36:49:2f:8c:d9:61:cd:60:04:5f:87:42:28:c2:
b5:92:52:46:8d:3a:d0:a6:04:63:73:0f:2f:3c:0a:
87:d4:e8:58:4a:09:3e:1b:4d:cb:85:72:08:28:84:
97:77:19:cb:6f:ca:ec:14:a8:65:e2:c0:6b:09:f4:
4e:4e:55:32:55:aa:d5:cb:2b:02:9c:ca:ec:cd:c9:
57:05:17:a6:68:bd:d1:18:50:66:83:61:3c:6b:db:
8e:3c:a5:cb:96:1a:bc:d2:57:80:90:13:92:6f:b7:
9d:f5:28:7a:45:3e:5c:19:83:b2:67:8b:29:49:d3:
93:b3:fa:76:a1:d8:a5:14:ef:09:bc:5b:21:22:d9:
bf:5f:de:b7:c2:cc:f4:e2:ec:81:e6:9e:ec:17:a3:
5f:3f:d4:b3:47:fe:76:72:ef:1b:7a:5d:19:cb:5b:
14:53:20:ab:1b:ce:d6:ad:af:6a:4f:a1:69:79:bf:
17:56:db:ca:fb:09:93:db:ca:43:62:09:d4:f0:ef:
a3:29:3f:65:29:45:e4:ec:b9:40:bf:06:24:94:6c:
7f:41:59:d8:f7:74:15:11:bc:b1:43:8e:7d:58:ec:
2f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8F:68:97:94:8B:30:0C:8C:E3:74:84:76:00:D4:4F:75:1E:3F:DC
X509v3 Authority Key Identifier:
keyid:D5:B9:BB:A3:30:5E:88:C0:00:F5:62:93:9D:13:8B:A5:06:22:7B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:ee:06:49:92:ef:fe:23:0f:fd:da:65:fb:7b:3d:29:4f:87:
fb:d1:89:03:fe:d9:cd:6f:23:79:11:b2:16:65:09:6a:9f:6e:
87:3d:d1:70:71:74:51:12:13:62:35:51:eb:4f:39:66:4a:ad:
bf:09:13:7b:38:4e:46:f9:64:15:1f:08:fc:02:87:45:ad:cb:
09:10:12:5f:eb:b8:a4:cb:18:12:f6:89:a4:7b:e0:b3:54:1b:
be:ea:af:7b:95:14:9c:d8:e9:e2:34:f4:08:50:98:24:cc:c9:
a1:be:b8:8b:46:57:ee:ab:94:9a:88:ac:fb:a5:38:69:50:e4:
1a:47:23:2b:7b:69:e4:2e:91:4e:77:c3:03:ac:58:7c:f3:d1:
ec:13:49:68:ef:5f:97:3d:22:f8:33:93:fd:12:6a:27:27:e6:
c1:74:27:26:46:f1:a5:bc:ef:73:29:24:61:3f:5b:c3:cc:fe:
60:0d:dd:21:8a:65:77:a7:95:7c:75:80:9f:5d:ac:12:24:05:
c9:be:99:59:32:55:45:43:8f:1c:e0:2a:33:b8:46:a2:cc:1c:
36:2f:74:36:51:2c:db:34:aa:bf:21:e4:eb:36:62:c6:11:b9:
df:4f:97:89:e9:fa:0a:98:f0:44:1a:de:e2:13:44:01:fc:77:
23:e8:02:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:27:45 2026 by rpki-client