
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
File: 1bScAI9ih18VJth200lAoJsOnW0.mft (raw, json)
Hash identifier: z55OGOp8MGpwVOxs1G0OtHNds+zjKiompHx6ohE749w=
Subject key identifier: 15:20:8F:48:04:FD:3F:99:40:0D:67:D5:7C:42:A9:30:9E:4D:C9:67
Authority key identifier: D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
Certificate issuer: /CN=A91FB434/serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
Certificate serial: 1608
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
Manifest number: 15F0
Signing time: Tue 12 May 2026 16:44:09 +0000
Manifest this update: Tue 12 May 2026 16:44:09 +0000
Manifest next update: Tue 19 May 2026 16:44:09 +0000
Files and hashes: 1: 1bScAI9ih18VJth200lAoJsOnW0.crl (hash: AYQ+iaH++SpopSnQZ71rK2gfXhYAsTmCz5C5If1B85I=)
2: EC796D6C42D411E88EC29742C4F9AE02.roa (hash: /XKpZWxHQtpMnU+ZHwwN48hOrY+K7y+jnl3ND5plgMo=)
3: EB843B92329A11EE89CD8544C4F9AE02.roa (hash: CLUWcZt+49NeH6K62G6A+1bRGb2EpGeJVNtijAJKCTI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl
rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:44:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5640 (0x1608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB434, serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
Validity
Not Before: May 12 16:44:09 2026 GMT
Not After : May 19 16:44:09 2026 GMT
Subject: CN=6a0358d9-f0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8e:cc:34:41:ba:46:61:bc:4f:eb:14:4b:e8:
73:bf:2c:48:7b:a9:80:66:19:bf:ae:a0:a5:15:58:
f8:e2:3c:4e:65:b1:f8:77:4e:c0:d6:ab:cd:32:59:
6b:64:14:f8:78:e6:a2:fa:51:5d:7d:f7:b4:5e:84:
5a:1f:0d:ec:58:42:f9:66:9e:44:48:2c:8d:f6:cb:
90:8a:b2:b4:2d:fa:3d:7b:18:64:db:ac:22:52:7a:
dd:60:84:f1:e7:11:1c:ba:7e:c8:02:2d:75:92:6d:
b8:01:33:6e:29:00:21:f9:ba:f2:3a:18:6c:99:d0:
8e:b7:07:29:90:77:e9:1a:df:3c:00:15:c0:74:87:
dc:42:54:70:6b:7c:be:08:34:c0:57:f5:76:1f:5a:
d2:85:67:6a:c5:a7:d9:9c:19:3b:f2:9d:c3:81:ee:
6e:85:4b:c2:7f:f4:0a:f9:11:6d:95:06:95:e8:a8:
0e:a5:0c:83:b2:84:39:e0:82:49:04:b2:93:77:e9:
a1:56:37:c9:7c:8d:c2:7a:f4:96:40:91:a6:cf:ee:
45:ab:31:bc:c5:d2:7e:75:71:ad:7d:41:4d:7e:41:
28:5b:83:64:36:3e:78:42:fe:59:fc:e3:01:b4:ce:
ce:7d:24:86:b5:d4:ea:7e:43:7b:d8:b0:79:f2:8b:
76:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:20:8F:48:04:FD:3F:99:40:0D:67:D5:7C:42:A9:30:9E:4D:C9:67
X509v3 Authority Key Identifier:
keyid:D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:19:20:cc:14:8b:f5:e3:9c:20:51:53:57:2b:07:46:05:0e:
2d:56:c2:02:0f:0b:45:bc:af:38:57:f0:17:8b:1c:4d:16:cf:
c5:92:87:99:00:a9:84:80:15:f0:d8:b0:a4:a8:41:7f:ee:47:
63:c3:c3:31:16:6f:01:ee:c5:a7:91:12:c6:b1:ef:7e:a4:16:
92:86:6c:66:a1:8a:ab:1c:18:11:58:e0:11:c6:4b:1f:21:b6:
2e:7d:c3:2e:54:8a:c6:dd:f4:21:01:51:34:0b:49:89:34:17:
d7:4f:db:06:b7:98:0c:03:2f:44:ca:f6:51:40:8f:0c:eb:4c:
b1:cf:e9:f5:32:83:13:1c:1b:3a:35:44:88:0b:bb:f4:05:e5:
91:7c:2d:63:a7:ff:95:56:d2:3b:b6:64:b6:11:77:47:1e:c9:
b4:8e:5a:e6:92:c6:af:ac:33:76:5e:be:f7:9e:2c:be:97:c8:
6a:e7:e8:e5:02:8c:a5:00:b7:40:e2:e4:63:bd:c5:eb:5a:43:
95:8f:43:8a:01:cc:fa:66:45:2f:2f:a0:fc:80:7b:75:d9:16:
a5:ec:8c:ba:28:3c:6c:0e:a1:29:65:7d:ce:5b:ff:a2:85:48:
47:35:9b:c5:1d:c3:70:4b:04:1d:64:dd:94:26:c5:21:a1:7a:
b6:65:9c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:27 2026 by rpki-client