
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
File: 1bm7ozBeiMAA9WKTnROLpQYieyo.mft (raw, json)
Hash identifier: z9RC7rdpSL81ZhPPpnbShdqwDBnM/A5Wl4iuWxXp+5w=
Subject key identifier: 40:BA:24:44:14:42:E5:60:53:B9:D0:1D:67:53:E1:79:96:AD:D8:66
Authority key identifier: D5:B9:BB:A3:30:5E:88:C0:00:F5:62:93:9D:13:8B:A5:06:22:7B:2A
Certificate issuer: /CN=A91EAF4B/serialNumber=D5B9BBA3305E88C000F562939D138BA506227B2A
Certificate serial: 0BBE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
Manifest number: 0D55
Signing time: Tue 12 May 2026 19:07:02 +0000
Manifest this update: Tue 12 May 2026 19:07:01 +0000
Manifest next update: Tue 19 May 2026 19:07:01 +0000
Files and hashes: 1: 1bm7ozBeiMAA9WKTnROLpQYieyo.crl (hash: ROycU7ULWaixHz70v9h6hKVTICDuSVI4yXWpme8o3RQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.crl
rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3006 (0xbbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAF4B, serialNumber=D5B9BBA3305E88C000F562939D138BA506227B2A
Validity
Not Before: May 12 19:07:01 2026 GMT
Not After : May 19 19:07:01 2026 GMT
Subject: CN=6a037a56-c504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ac:0e:7c:aa:4e:cd:c7:eb:8d:b1:f5:a0:00:
03:b0:13:34:4f:31:e9:8e:83:1e:6b:5d:be:e0:f9:
a9:18:3f:c9:98:cc:5f:fd:b2:6b:9d:52:51:29:ea:
1e:30:1a:73:3b:4c:b4:cc:d5:cb:29:38:ff:fa:5a:
a7:e7:da:f2:ba:78:3c:a5:bf:7c:fb:aa:44:07:dd:
99:fe:de:32:12:ec:ee:c9:dd:4d:9b:bc:49:4e:e3:
db:8d:dd:f3:cc:d2:4c:b5:c7:5e:10:79:99:fe:cd:
4d:02:83:28:53:e5:68:65:7e:ae:b1:26:cd:5a:31:
68:c8:83:1b:f2:88:32:43:f1:50:0a:0e:fc:67:41:
a8:03:dc:50:04:c3:1b:72:66:7b:e3:28:3b:1b:8d:
73:ed:ef:15:53:b9:0c:4f:39:7a:2d:19:42:1f:e4:
f5:ea:12:2d:8e:84:be:58:6d:db:1f:88:c9:93:ac:
18:31:0c:d3:4f:f2:13:ee:a3:08:9e:7e:20:2b:cd:
94:9d:47:0c:66:d5:9c:d3:54:fe:52:c0:11:aa:21:
e1:77:79:44:07:74:bf:e7:b8:40:10:83:2c:9d:74:
34:ac:1a:cc:b2:5d:87:a8:2b:cb:6a:d0:50:b9:c0:
b8:2d:7f:29:0a:a8:00:09:b1:8f:84:c2:3b:93:30:
81:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BA:24:44:14:42:E5:60:53:B9:D0:1D:67:53:E1:79:96:AD:D8:66
X509v3 Authority Key Identifier:
keyid:D5:B9:BB:A3:30:5E:88:C0:00:F5:62:93:9D:13:8B:A5:06:22:7B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:e8:bd:f5:3d:b1:82:2f:e1:e2:3e:7f:b1:95:65:49:bc:07:
e7:d8:26:96:23:d6:ec:ff:dd:af:ed:56:a9:1d:21:60:bf:bb:
36:0e:48:75:73:0a:2f:02:e0:e2:f1:34:a4:44:0c:91:75:c5:
33:ce:dd:ee:d0:df:45:10:25:c6:7b:e6:68:1a:65:50:a4:07:
3d:0a:73:ba:47:fb:4a:9c:5d:83:ee:ed:a6:f1:e4:e2:e2:25:
bb:cc:8b:35:a9:ec:33:19:a8:62:fc:e4:12:95:07:a2:6a:7c:
9b:31:a6:f2:07:e3:dc:ac:2e:4c:95:d9:53:62:7a:4e:84:dd:
e8:f1:fa:e9:37:b8:4a:2e:9c:b3:71:37:1c:b7:66:5d:7c:45:
d4:fa:d2:7e:3c:62:8d:75:da:de:81:a4:d8:fc:4f:a7:15:52:
9c:fd:9e:65:8b:3f:fb:f8:bd:ea:75:2c:5b:00:1d:25:e9:6c:
21:55:93:bc:95:75:21:90:57:01:6b:e2:af:3d:39:20:0c:48:
ff:cc:fa:9d:8a:42:9c:d7:e9:f9:f3:cd:74:ec:70:7d:27:66:
5f:e0:a1:e8:d3:77:0c:b0:64:1d:ea:13:41:84:9e:8e:81:2c:
70:92:d6:a1:1a:ee:8b:89:e9:be:7c:0b:1f:2c:b6:2e:17:0b:
68:11:af:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:33:41 2026 by rpki-client