
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
File: 1bScAI9ih18VJth200lAoJsOnW0.mft (raw, json)
Hash identifier: z5eD+0ruuu2vxeJlv2FItU1Fl9muXDNjg4rjdGgoIew=
Subject key identifier: FD:C4:4C:D9:94:01:69:68:74:1C:34:2A:4D:79:BF:0C:9E:3C:36:2B
Authority key identifier: D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
Certificate issuer: /CN=A91FB434/serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
Certificate serial: 15EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
Manifest number: 15D7
Signing time: Tue 24 Mar 2026 16:38:15 +0000
Manifest this update: Tue 24 Mar 2026 16:38:14 +0000
Manifest next update: Tue 31 Mar 2026 16:38:14 +0000
Files and hashes: 1: 1bScAI9ih18VJth200lAoJsOnW0.crl (hash: nH5RusT/OmIytA5AIwx/oCg1YyAuERAsZO5cKmFZj/o=)
2: EC796D6C42D411E88EC29742C4F9AE02.roa (hash: /XKpZWxHQtpMnU+ZHwwN48hOrY+K7y+jnl3ND5plgMo=)
3: EB843B92329A11EE89CD8544C4F9AE02.roa (hash: CLUWcZt+49NeH6K62G6A+1bRGb2EpGeJVNtijAJKCTI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl
rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5615 (0x15ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB434, serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
Validity
Not Before: Mar 24 16:38:14 2026 GMT
Not After : Mar 31 16:38:14 2026 GMT
Subject: CN=69c2bdf7-8ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:26:8e:fe:cf:fd:61:db:59:78:5c:d0:50:a6:
b7:4e:b6:e3:70:79:b9:51:54:0c:46:16:76:4a:02:
a7:75:5d:86:37:01:13:7e:41:26:25:0d:ab:cc:56:
33:7f:26:17:9c:26:4d:48:ef:57:5e:0b:43:ca:71:
ed:d9:72:81:58:ba:33:78:d2:78:25:2f:3e:f7:46:
d3:d6:8e:17:69:f0:3a:17:9e:5a:8f:7c:42:67:ea:
b6:6c:86:b0:89:15:a3:7f:b6:46:60:e0:00:37:0d:
57:b2:5e:5a:ff:68:2d:a4:ef:54:72:f9:7e:ac:8f:
aa:2b:49:c1:dd:51:53:9c:20:64:44:b0:aa:cd:bf:
a4:d5:b1:fb:18:d9:73:7b:c5:e8:82:da:fb:1f:06:
40:50:38:f4:aa:8f:7d:a7:f5:c9:4a:92:4e:2d:c3:
9d:6b:95:2f:88:f8:96:2c:10:cf:a2:c7:1c:1a:45:
ab:6c:d4:5e:0f:0e:b9:9a:07:28:ce:f3:df:e1:f5:
1e:21:c8:1b:3f:9f:7f:61:cd:15:16:64:09:38:40:
92:62:8b:56:fb:e9:40:39:30:76:4a:ae:d4:2a:0a:
2a:5c:43:4c:6e:d6:6d:a8:b1:b5:de:dc:d2:8c:87:
6d:32:04:f1:d6:37:1f:da:b3:e6:ab:4d:34:b7:ca:
e3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C4:4C:D9:94:01:69:68:74:1C:34:2A:4D:79:BF:0C:9E:3C:36:2B
X509v3 Authority Key Identifier:
keyid:D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:3f:97:69:9c:1f:f4:ed:20:c6:02:55:51:fc:56:09:ce:c3:
a4:24:22:59:9c:c0:99:15:04:0e:91:ee:b2:99:d4:e3:50:b0:
de:a4:ae:b5:5e:1e:17:b0:ff:e1:e9:39:de:ba:60:b2:98:a9:
45:5c:b9:9a:e6:e4:f8:59:a5:fe:d7:e9:d4:fe:c1:d1:18:d4:
2d:df:c1:fa:d0:84:0d:fa:34:4d:2a:de:47:6b:8a:fd:b9:39:
cd:df:8d:d0:88:24:b5:ee:5d:9a:0d:e0:d8:72:1f:4d:85:91:
71:a2:c4:30:ff:27:39:7b:07:15:fc:67:62:e5:86:e7:8d:d0:
4f:63:f0:93:e3:f8:ed:cb:b0:76:e6:5e:44:5c:25:fd:e0:44:
9d:42:a1:ce:24:72:d6:ff:bb:d4:78:80:58:a9:36:4d:c8:da:
d4:be:ab:e4:a7:c3:51:0f:56:dd:f6:8a:22:90:21:43:b4:73:
fe:31:04:a4:7e:39:c1:f5:89:c6:d9:e4:9d:ab:b8:1e:17:d0:
7c:60:74:f0:f7:7e:2b:26:36:12:9c:b2:ad:40:b0:5c:91:b9:
a2:0b:30:84:ac:e3:64:e7:81:48:0e:d3:cf:a3:0c:2b:01:db:
04:15:01:61:e5:74:02:76:3b:0d:a2:6d:bc:2b:88:7b:6a:fc:
84:4a:ac:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkI0MzQxMTAvBgNVBAUTKEQ1QjQ5QzAwOEY2Mjg3NUYxNTI2RDg3NkQzNDk0MEEw
OUIwRTlENkQwHhcNMjYwMzI0MTYzODE0WhcNMjYwMzMxMTYzODE0WjAYMRYwFAYD
VQQDEw02OWMyYmRmNy04YWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7SaO/s/9YdtZeFzQUKa3TrbjcHm5UVQMRhZ2SgKndV2GNwETfkEmJQ2rzFYz
fyYXnCZNSO9XXgtDynHt2XKBWLozeNJ4JS8+90bT1o4XafA6F55aj3xCZ+q2bIaw
iRWjf7ZGYOAANw1Xsl5a/2gtpO9Ucvl+rI+qK0nB3VFTnCBkRLCqzb+k1bH7GNlz
e8Xogtr7HwZAUDj0qo99p/XJSpJOLcOda5UviPiWLBDPosccGkWrbNReDw65mgco
zvPf4fUeIcgbP59/Yc0VFmQJOECSYotW++lAOTB2Sq7UKgoqXENMbtZtqLG13tzS
jIdtMgTx1jcf2rPmq000t8rjPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP3ETNmU
AWlodBw0Kk15vwyePDYrMB8GA1UdIwQYMBaAFNW0nACPYodfFSbYdtNJQKCbDp1t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjQzNC9FMkM2MjY3NjQy
RDMxMUU4QkJEQzA5NDFDNEY5QUUwMi8xYlNjQUk5aWgxOFZKdGgyMDBsQW9Kc09u
VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFiU2NBSTlpaDE4Vkp0aDIwMGxBb0pzT25XMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjQzNC9FMkM2MjY3NjQyRDMxMUU4QkJEQzA5NDFDNEY5QUUwMi8xYlNjQUk5aWgx
OFZKdGgyMDBsQW9Kc09uVzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOT+XaZwf9O0gxgJVUfxWCc7DpCQiWZzAmRUEDpHuspnU41Cw3qSutV4eF7D/
4ek53rpgspipRVy5mubk+Fml/tfp1P7B0RjULd/B+tCEDfo0TSreR2uK/bk5zd+N
0Igkte5dmg3g2HIfTYWRcaLEMP8nOXsHFfxnYuWG543QT2Pwk+P47cuwduZeRFwl
/eBEnUKhziRy1v+71HiAWKk2Tcja1L6r5KfDUQ9W3faKIpAhQ7Rz/jEEpH45wfWJ
xtnknau4HhfQfGB08Pd+KyY2EpyyrUCwXJG5ogswhKzjZOeBSA7Tz6MMKwHbBBUB
YeV0AnY7DaJtvCuIe2r8hEqsIw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:54 2026 by rpki-client