
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft
File: Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft (raw, json)
Hash identifier: b6mMlseEVhuZ8pA4c+Igu8impU4LwEal7KZjlVSplmo=
Subject key identifier: 5A:7A:40:CC:FC:C0:90:A4:D5:09:F6:3D:D6:58:50:8A:F9:D2:4A:3E
Authority key identifier: 06:3E:01:27:47:2A:7E:2A:6F:84:70:40:9C:9B:82:39:05:FA:FE:8E
Certificate issuer: /CN=A91E1CB1/serialNumber=063E0127472A7E2A6F8470409C9B823905FAFE8E
Certificate serial: 014E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft
Manifest number: 0144
Signing time: Thu 29 Oct 2026 06:07:54 +0000
Manifest this update: Thu 29 Oct 2026 06:07:54 +0000
Manifest next update: Thu 05 Nov 2026 06:07:54 +0000
Files and hashes: 1: Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl (hash: Z01i/n6JIYldqXG67QXOvaLRLpWva3d4FmdXlLiNXdw=)
2: 47603784536011F180C8B9B49C833773.roa (hash: UiZtfEjCgBUhOSkEu8hjBg9c3hRjlkn0x10nUpaMUS4=)
3: 8322D244EA0811EFB385192AC4F9AE02.roa (hash: gt4tU/hcyIVMBkjGuvPu9y9CXe1mDoCcezI1psVlwHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl
rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 06:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1CB1, serialNumber=063E0127472A7E2A6F8470409C9B823905FAFE8E
Validity
Not Before: Oct 29 06:07:54 2026 GMT
Not After : Nov 5 06:07:54 2026 GMT
Subject: CN=6ae2e2ba-3231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3d:c2:08:a4:c1:e9:5b:06:b5:cc:10:93:98:
f2:de:d3:1a:ac:99:ef:17:39:e3:5f:86:32:1c:5e:
a6:cd:73:96:ee:01:a4:92:26:bc:9c:04:3a:5e:0c:
44:17:df:80:92:d9:ad:5b:36:d8:99:19:7d:6d:cb:
b8:3c:55:51:6e:4d:0f:82:90:a6:84:25:c8:7d:87:
7a:7f:49:d0:06:f7:05:4c:e4:0e:fd:11:3c:41:e9:
9e:4d:f7:2c:9c:ac:94:e4:be:92:82:a8:b4:45:34:
91:09:3c:f7:03:7a:89:b3:5e:3b:d5:b7:a6:db:54:
c7:32:19:d1:78:c3:bb:d0:6e:0b:44:96:29:d0:5d:
0e:d8:84:d1:0c:b3:eb:7b:bc:ce:be:d8:b8:44:7b:
7d:4c:c2:66:2c:28:8f:84:5a:10:6d:c8:33:4c:10:
a3:5f:97:d7:4b:a3:bc:17:fd:f9:a8:73:28:f1:25:
66:7c:eb:94:72:de:55:d3:e4:e8:8e:61:5f:24:f0:
88:8c:1e:bc:01:d2:f7:c2:e7:23:d6:91:05:ab:c8:
cc:44:33:a8:4d:d1:bd:74:68:10:54:e5:5c:e0:2d:
de:e5:84:7e:cc:41:ad:32:81:13:f0:cd:e8:4a:03:
a1:ee:ba:19:d9:a7:90:98:fa:40:fe:e0:9b:04:9c:
39:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7A:40:CC:FC:C0:90:A4:D5:09:F6:3D:D6:58:50:8A:F9:D2:4A:3E
X509v3 Authority Key Identifier:
keyid:06:3E:01:27:47:2A:7E:2A:6F:84:70:40:9C:9B:82:39:05:FA:FE:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:8e:2a:d1:4e:2f:84:a0:24:ff:a4:42:b9:7d:77:e9:88:52:
2a:d5:25:f0:e8:fc:db:e6:c0:29:2d:6d:4b:91:5d:e7:ca:4d:
1a:40:44:74:9c:c1:fe:98:61:20:65:82:54:5b:9c:29:86:3e:
27:16:09:f4:9f:f6:4e:69:fe:20:14:81:9a:35:aa:96:22:79:
16:13:04:d1:87:e0:9f:1c:41:d7:df:a4:52:30:ff:65:cf:61:
e9:9d:75:13:46:ec:70:86:1b:78:90:b9:0b:38:de:27:e2:6f:
b2:b7:fe:78:d8:cb:20:e0:63:37:04:82:2b:1e:6a:c7:e2:f1:
ae:d8:a6:3e:c9:ff:a2:47:47:de:93:c5:08:d1:72:71:30:e0:
0c:0c:55:9a:ce:58:47:22:64:2c:00:88:2a:3b:ac:18:bb:bf:
81:5b:9b:ad:2f:fc:b7:2a:c5:5a:1c:d2:c7:4f:e3:01:f7:20:
df:5d:88:73:a6:ff:6a:08:13:ca:55:8b:f1:07:fb:81:7d:b6:
51:a2:28:cb:ee:ad:fd:4e:80:d9:b4:57:09:f5:e9:57:cc:75:
28:ae:ec:25:4b:dd:3e:d8:1e:13:7a:17:cf:fc:3b:8f:d7:e8:
95:b8:d0:d3:2a:b0:38:8c:4b:00:15:b8:37:12:6b:f0:6a:2e:
37:c2:b6:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFDQjExMTAvBgNVBAUTKDA2M0UwMTI3NDcyQTdFMkE2Rjg0NzA0MDlDOUI4MjM5
MDVGQUZFOEUwHhcNMjYxMDI5MDYwNzU0WhcNMjYxMTA1MDYwNzU0WjAYMRYwFAYD
VQQDEw02YWUyZTJiYS0zMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3T3CCKTB6VsGtcwQk5jy3tMarJnvFznjX4YyHF6mzXOW7gGkkia8nAQ6XgxE
F9+AktmtWzbYmRl9bcu4PFVRbk0PgpCmhCXIfYd6f0nQBvcFTOQO/RE8QemeTfcs
nKyU5L6Sgqi0RTSRCTz3A3qJs1471bem21THMhnReMO70G4LRJYp0F0O2ITRDLPr
e7zOvti4RHt9TMJmLCiPhFoQbcgzTBCjX5fXS6O8F/35qHMo8SVmfOuUct5V0+To
jmFfJPCIjB68AdL3wucj1pEFq8jMRDOoTdG9dGgQVOVc4C3e5YR+zEGtMoET8M3o
SgOh7roZ2aeQmPpA/uCbBJw5vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFp6QMz8
wJCk1Qn2PdZYUIr50ko+MB8GA1UdIwQYMBaAFAY+ASdHKn4qb4RwQJybgjkF+v6O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUNCMS8zRjRBNUEyRUVB
MDgxMUVGOUQzMzlCMjlDNEY5QUUwMi9CajRCSjBjcWZpcHZoSEJBbkp1Q09RWDZf
bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JqNEJKMGNxZmlwdmhIQkFuSnVDT1FYNl9vNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MUNCMS8zRjRBNUEyRUVBMDgxMUVGOUQzMzlCMjlDNEY5QUUwMi9CajRCSjBjcWZp
cHZoSEJBbkp1Q09RWDZfbzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYI4q0U4vhKAk/6RCuX136YhSKtUl8Oj82+bAKS1tS5Fd58pNGkBEdJzB/phh
IGWCVFucKYY+JxYJ9J/2Tmn+IBSBmjWqliJ5FhME0YfgnxxB19+kUjD/Zc9h6Z11
E0bscIYbeJC5CzjeJ+Jvsrf+eNjLIOBjNwSCKx5qx+LxrtimPsn/okdH3pPFCNFy
cTDgDAxVms5YRyJkLACIKjusGLu/gVubrS/8tyrFWhzSx0/jAfcg312Ic6b/aggT
ylWL8Qf7gX22UaIoy+6t/U6A2bRXCfXpV8x1KK7sJUvdPtgeE3oXz/w7j9folbjQ
0yqwOIxLABW4NxJr8GouN8K2VA==
-----END CERTIFICATE-----
Generated at Fri Oct 30 06:14:13 2026 by rpki-client