
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
File: 1BN478zNyo5lN-lfJ6o7NTdYCvM.mft (raw, json)
Hash identifier: rRikR1qkCCLNJYcWa+dOjDhCpJ6505Ex+DlOjKAbikg=
Subject key identifier: 7D:00:ED:F8:CB:9A:F6:34:7F:48:AE:11:85:E0:EB:79:6C:BE:61:27
Authority key identifier: D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3
Certificate issuer: /CN=A91F2E76/serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3
Certificate serial: 0845
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
Manifest number: 083E
Signing time: Tue 12 May 2026 20:59:06 +0000
Manifest this update: Tue 12 May 2026 20:59:05 +0000
Manifest next update: Tue 19 May 2026 20:59:05 +0000
Files and hashes: 1: 1BN478zNyo5lN-lfJ6o7NTdYCvM.crl (hash: ZTOi45V2PdZ5yhjWgqFJxGW1pWEpg9Fh3YLhQUlO/dQ=)
2: 86AE60140D7A11EB9D346C48C4F9AE02.roa (hash: FEj+Wpf3i+UBiIyj1ILdZqVb7eAIBliHFCY3mKXHGkw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl
rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2117 (0x845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2E76, serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3
Validity
Not Before: May 12 20:59:05 2026 GMT
Not After : May 19 20:59:05 2026 GMT
Subject: CN=6a039499-1f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:8f:e4:cb:e7:1f:6f:56:6a:95:0e:2d:78:
76:32:e2:0c:5f:5a:8e:89:d5:0b:61:62:68:45:18:
be:18:f1:2f:ed:56:53:21:07:e4:76:b4:8c:06:0b:
8f:27:d3:71:13:a9:0f:5a:3b:57:d7:65:6d:50:ba:
4b:28:d3:4a:9d:23:b3:97:04:43:ce:7a:db:3d:f3:
34:12:e8:bd:4b:1c:48:c9:8a:db:68:bb:df:59:dc:
b3:10:69:c4:09:e1:70:54:6d:fd:3d:ea:71:a3:ff:
8d:c5:84:1e:33:b3:4b:d7:d3:c0:ea:dd:15:c0:71:
87:24:33:5a:e9:cd:e3:3f:9c:2f:d7:90:09:1a:3c:
5a:f2:de:e9:97:49:77:bc:ad:32:c9:49:a2:5d:23:
44:a3:9e:49:77:81:f2:c1:ee:67:d8:dc:e3:f0:a9:
cc:92:d1:fc:84:4c:4a:c7:63:29:15:c4:54:af:54:
4d:b6:28:0b:82:35:fe:a8:81:d1:46:9f:a7:fe:d2:
34:13:c9:08:ef:b0:ab:1a:9f:8f:a0:d6:5e:e6:c4:
fe:7d:31:0d:b1:b5:48:6f:b5:76:1b:ac:23:39:2d:
95:3a:73:ed:bd:ae:96:bf:a9:f1:40:45:b0:08:e5:
c6:95:31:0f:8e:9f:cd:92:f0:49:cc:25:bb:3e:6e:
ef:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:00:ED:F8:CB:9A:F6:34:7F:48:AE:11:85:E0:EB:79:6C:BE:61:27
X509v3 Authority Key Identifier:
keyid:D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:72:66:c5:c4:48:e3:df:97:ac:d8:3c:23:e1:69:3b:8c:ff:
b6:2e:29:00:b5:b5:04:5a:6d:62:6e:9f:24:74:c2:b5:15:8a:
15:00:a1:23:05:66:b3:3f:15:96:f2:9c:e8:be:ce:f2:48:1b:
65:72:e6:f7:1e:be:a6:9a:e8:6f:2e:6d:b1:b7:47:0c:d0:b2:
a9:2c:87:93:fe:eb:b7:6b:73:14:a5:7e:d8:b6:fc:c2:b9:49:
13:34:77:15:df:b2:6e:ce:35:f7:74:ad:8d:7e:c7:da:80:5a:
43:2e:2e:2e:9e:2b:2f:ea:bf:7b:80:29:81:4d:dd:ab:4e:22:
84:e1:a9:a0:f1:74:93:b1:1e:49:de:c9:8b:a2:65:88:10:3c:
9d:ea:cd:37:4c:70:7f:27:7e:65:11:d8:a8:4f:6c:7e:db:1d:
42:67:5e:ee:38:b4:c7:af:d0:a8:d8:d7:26:b1:d4:8a:c8:78:
fe:e5:85:79:1f:cf:a8:77:95:05:4c:97:e8:f1:d0:14:15:1f:
1f:b3:18:ac:b2:47:1a:d7:c4:b1:94:eb:a4:e0:aa:da:99:d1:
ba:4c:e5:22:29:d2:49:cc:ba:71:ff:f6:66:36:3c:9a:62:38:
0a:6d:de:46:a1:05:ab:87:a5:4d:d3:65:5c:dc:e8:20:12:d5:
c2:7e:f8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:58 2026 by rpki-client