
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft
File: bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft (raw, json)
Hash identifier: TQe9hy8Qm4bCirWl8jt41x/85WGjMfcofpoYChC0hFY=
Subject key identifier: E3:F5:06:74:71:92:D9:0E:B0:7A:F0:64:08:04:9A:02:34:C3:6A:BA
Authority key identifier: 6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65
Certificate issuer: /CN=A91240E6/serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65
Certificate serial: 271F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft
Manifest number: 2700
Signing time: Tue 22 Sep 2026 15:37:26 +0000
Manifest this update: Tue 22 Sep 2026 15:37:25 +0000
Manifest next update: Tue 29 Sep 2026 15:37:25 +0000
Files and hashes: 1: bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl (hash: 6aeJVdyfk5MYJhKAV4cn1dzj4fOebbdgVhc80fDaEkw=)
2: 4DF2AB2886FE11F194514C90ABEE528E.roa (hash: XfRORHPDEUdxdb4LVfe48BfYJNOGVDgQbH1NwVOIeuc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl
rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10015 (0x271f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91240E6, serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65
Validity
Not Before: Sep 22 15:37:25 2026 GMT
Not After : Sep 29 15:37:25 2026 GMT
Subject: CN=6ab2a0b6-4783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:4f:79:3e:87:9b:41:0e:32:c6:c2:a2:57:
fa:ec:47:4b:54:da:11:cd:8c:6e:6d:82:dc:c4:c8:
6b:07:95:f7:e8:18:7c:e0:9b:6e:fd:91:db:6d:6b:
88:c6:8a:0d:33:92:71:93:ec:b0:63:78:ac:5f:fa:
9b:8d:e1:fc:5d:7e:5b:78:83:18:9c:ed:0f:fd:79:
ee:57:d6:62:84:c3:59:f5:4e:82:f0:a3:21:7e:ef:
4a:fa:e6:4b:b0:85:78:d4:ed:d9:6c:63:cb:87:6e:
5b:80:51:dd:27:e7:4e:e7:30:5d:79:8b:8a:05:57:
9e:ad:ae:51:8c:38:17:20:04:5c:df:33:44:b9:ba:
42:9a:fa:6f:45:72:5a:c8:65:78:5e:0b:c8:92:c3:
3d:de:aa:0a:5b:00:73:58:90:82:e3:a6:50:8d:68:
0f:77:1d:f5:80:83:83:75:70:7e:22:f1:1c:77:29:
79:c2:f7:45:81:d4:02:10:06:6e:d2:13:a5:c2:24:
1b:2d:fc:52:0b:5c:9b:f2:c8:a2:7d:72:22:8c:71:
68:6b:df:14:44:65:bf:8f:71:5e:ec:5e:be:64:dc:
f0:99:32:4a:e6:7c:34:a2:33:aa:0c:19:26:5c:ec:
90:44:df:c4:bf:8d:3d:16:03:d2:cc:69:18:98:fb:
45:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F5:06:74:71:92:D9:0E:B0:7A:F0:64:08:04:9A:02:34:C3:6A:BA
X509v3 Authority Key Identifier:
keyid:6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d4:79:54:e2:51:9f:a1:36:30:f6:ed:c2:c1:de:d6:f0:bd:
88:00:80:cc:e0:ff:e8:cd:77:f9:a2:ae:6e:41:99:e9:23:67:
cb:2b:49:7e:2b:8a:06:09:e5:4e:2b:1a:2f:11:bb:30:b0:95:
65:69:be:3c:d4:67:1c:dc:18:18:a3:78:3f:24:b6:81:6c:e0:
91:c9:24:39:c2:fa:8b:65:44:d2:e2:dd:cb:29:ab:0d:bf:4f:
7e:81:2b:42:3c:a9:c9:9e:58:4e:7e:1c:2a:68:7b:6c:44:78:
e7:e6:71:23:3f:0d:69:c9:d1:33:2a:01:ca:db:5f:60:67:73:
66:4e:40:92:77:5d:61:0c:2b:96:08:47:22:10:96:07:b2:19:
e0:c2:94:f7:bc:b4:89:12:b7:52:b7:3d:2a:60:63:12:59:f7:
ed:c1:67:1f:8b:c3:e9:c0:c4:a8:b4:04:8b:a1:d7:16:0b:a0:
7f:3f:f9:ab:a4:53:92:a0:7a:11:f0:fa:50:18:92:0a:19:1c:
93:b3:b9:3d:74:81:cc:94:32:6d:54:e9:80:d4:1d:47:ef:f9:
8e:fb:d2:fa:29:0e:33:0c:c9:12:52:5a:24:28:5a:99:1f:bd:
3e:3f:a7:de:c3:af:34:37:36:25:60:8e:b1:0a:aa:4a:41:f8:
88:f9:d1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:17:41 2026 by rpki-client