
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
File: bRdadMGgmL-i337kNxYF_2owQkk.mft (raw, json)
Hash identifier: T3tCtZ2OvwBfAAXvn0A2ZNCbJLCwCQllANKodwaPcaY=
Subject key identifier: 31:BF:46:B5:3F:07:B2:1B:A5:83:E9:7F:53:B8:6B:B8:52:7E:93:78
Authority key identifier: 6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49
Certificate issuer: /CN=A91F6CB0/serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249
Certificate serial: 05C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
Manifest number: 05B0
Signing time: Tue 24 Mar 2026 22:51:28 +0000
Manifest this update: Tue 24 Mar 2026 22:51:27 +0000
Manifest next update: Tue 31 Mar 2026 22:51:27 +0000
Files and hashes: 1: bRdadMGgmL-i337kNxYF_2owQkk.crl (hash: bwvteDCXG7JRPlnNXV6GEddBemUkftYcXUD/ffl//ws=)
2: 80379A8A09EA11EC8762242CC4F9AE02.roa (hash: jxu/gvi4k+hs5AI7Co9TbSEubfmA4La8wA/FQaJkuj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.crl
rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1478 (0x5c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6CB0, serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249
Validity
Not Before: Mar 24 22:51:27 2026 GMT
Not After : Mar 31 22:51:27 2026 GMT
Subject: CN=69c3156f-b01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:d0:d9:86:ad:dc:d9:e5:05:d1:a6:7d:6d:
1b:2d:ac:96:40:d7:f8:e5:f7:5d:66:91:a3:9c:62:
60:ae:91:c6:b4:c9:82:64:85:cf:ed:b4:56:52:19:
10:34:8d:93:60:2d:88:10:f1:c8:e1:ad:47:00:73:
32:33:0c:90:2a:be:2b:c2:be:54:1c:44:a2:63:45:
39:5f:e7:93:f0:b6:2d:4d:e6:14:34:94:b1:0a:fd:
4e:57:34:bb:6d:92:87:2a:04:85:2b:f5:f6:37:9d:
90:99:3d:d1:1b:df:b7:ff:e0:fc:e4:3d:b8:0a:28:
25:82:95:59:73:39:f3:28:74:82:2a:26:d2:d5:93:
88:24:e3:81:46:30:71:41:f5:6b:90:41:c3:6c:70:
fa:f6:5f:de:f1:6e:7f:30:07:5d:27:6c:58:37:e4:
ad:6c:d7:e5:b1:ee:5e:d3:3a:79:77:1e:a3:22:05:
55:88:34:5d:cf:d5:f5:5e:b1:98:af:96:91:7c:3d:
85:6a:2e:8b:22:7f:c1:cf:38:a4:d9:d8:68:e7:ce:
9e:f0:82:67:24:26:9f:26:12:a5:14:2a:b0:a2:c4:
30:09:b2:d3:88:5c:bc:27:d4:fd:29:03:eb:67:5a:
6a:f3:bd:e3:69:66:e4:13:17:3a:bb:67:26:40:68:
23:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BF:46:B5:3F:07:B2:1B:A5:83:E9:7F:53:B8:6B:B8:52:7E:93:78
X509v3 Authority Key Identifier:
keyid:6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:38:50:23:85:56:5f:8b:56:73:6b:3b:d7:9e:15:5e:97:46:
d9:a0:cc:a6:13:b9:4f:6c:aa:02:cf:d7:51:be:01:c6:ac:b2:
cc:42:8f:51:fc:0b:cd:0a:83:e6:da:e3:89:cb:71:d9:ce:fb:
c7:62:6f:be:84:0d:b9:5e:9a:ff:e3:20:60:c8:5f:42:f7:93:
50:37:89:40:17:5e:99:33:3e:b8:16:58:fc:2a:77:19:88:d2:
f0:d6:15:19:2b:06:12:fd:36:ae:3b:93:85:ed:d3:d8:0d:e9:
51:77:1f:56:1e:a8:66:06:3e:75:d9:8c:57:0b:6a:65:3a:ad:
9b:dc:c9:05:4f:a5:e7:d7:9f:63:3a:88:95:56:44:23:2a:4c:
3c:87:47:b6:9a:8f:7e:29:5a:e2:d6:70:dd:5b:df:47:ad:50:
26:45:0e:96:41:73:80:eb:3a:cf:3a:45:d6:e7:63:a8:8f:ea:
97:01:b3:93:5f:09:2e:e0:b1:aa:00:3a:26:7a:84:df:58:68:
96:fe:47:86:63:56:7e:d4:fb:b1:75:85:cf:e5:e9:73:88:91:
95:72:ef:d1:4a:b1:fb:b6:ff:5b:8c:0e:1f:b4:70:5f:2f:f1:
4a:62:51:71:40:ef:53:ac:d1:fe:6d:64:ed:6e:a2:07:74:a8:
f2:23:cc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:57:59 2026 by rpki-client