
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
File: bPH0dvRFFGbI_SbiFvMnbMFeLho.mft (raw, json)
Hash identifier: sYLfhcEF2Ss5EHzoJhv40bNvhiRM8BaOnjHPZXeyGFA=
Subject key identifier: 6B:E8:7C:56:24:6E:AB:5C:D5:B8:E0:25:F0:A5:C7:27:89:7F:CE:B6
Authority key identifier: 6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A
Certificate issuer: /CN=A91529DF/serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
Manifest number: A2
Signing time: Tue 27 Oct 2026 07:42:52 +0000
Manifest this update: Tue 27 Oct 2026 07:42:52 +0000
Manifest next update: Tue 03 Nov 2026 07:42:52 +0000
Files and hashes: 1: bPH0dvRFFGbI_SbiFvMnbMFeLho.crl (hash: 1+uN0Q6RZ7ohFACKwTmPxa/gNFuwXYigQLoJ3JsxfYw=)
2: E9C84708F67911F0B1D76CE5736F56BC.roa (hash: B9uNDvU5cJoDVtHMnMwD+CGmLLX1Ekokgd9afDF1IlY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl
rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 07:42:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91529DF, serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
Validity
Not Before: Oct 27 07:42:52 2026 GMT
Not After : Nov 3 07:42:52 2026 GMT
Subject: CN=6ae055fc-99e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f3:f0:8a:39:4f:0d:c1:ff:3a:39:4b:f2:3e:
b1:91:90:dd:b6:81:6d:55:9f:46:47:93:4a:0c:7b:
fb:0d:60:d4:09:e3:ed:4a:82:30:30:fb:14:3f:0b:
87:4b:8b:0c:78:d6:e9:19:2b:1c:2a:46:15:61:e9:
a8:0c:76:9d:67:b8:f7:e0:4a:83:75:ef:53:1f:89:
55:8c:7a:e8:a0:67:d2:6f:db:1c:ae:32:2b:7d:c9:
11:d1:83:59:34:bd:ee:ef:a8:46:34:a5:c7:32:e8:
87:6f:d8:64:9d:e2:44:63:23:28:f8:4a:94:a9:11:
b9:22:99:90:6f:26:88:d8:6c:41:29:50:a5:ee:14:
54:28:e4:86:b0:0a:39:60:3d:68:5d:98:1b:43:b4:
c8:5a:1d:28:a9:83:65:29:11:d9:73:be:66:d8:0a:
89:6e:51:b5:0e:be:7b:f2:9a:db:c6:fb:5c:84:67:
be:e3:95:16:40:a8:2f:80:af:b2:3a:81:13:53:34:
1a:66:f1:2b:7c:2e:ea:00:8c:8c:b6:29:9f:2f:f1:
d8:3b:3b:6d:4c:2e:bb:0a:1a:b0:13:c8:b1:eb:6c:
6a:9d:20:4b:21:fa:33:72:fe:0c:66:b0:51:c0:a1:
38:38:54:99:39:29:37:06:71:50:2e:01:dd:da:7c:
72:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E8:7C:56:24:6E:AB:5C:D5:B8:E0:25:F0:A5:C7:27:89:7F:CE:B6
X509v3 Authority Key Identifier:
keyid:6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:dd:db:99:a9:1d:b5:75:cf:df:99:d3:1a:54:bd:2d:4d:dc:
5a:f7:47:ed:34:55:05:b9:a9:b9:cc:84:a5:1a:2b:8d:a0:d4:
a6:47:e9:c5:ea:68:46:c8:30:2d:2d:6a:35:b0:5e:7d:23:93:
ee:07:6d:05:6c:52:6c:ad:76:a3:15:66:e0:58:99:9c:88:b5:
0e:85:74:6c:87:a2:6f:1b:fa:5d:9b:e9:4f:0b:03:f6:f1:fb:
e0:c7:a5:f4:eb:56:15:9b:b2:b0:dc:1a:fe:f0:f0:98:a4:ea:
9c:df:48:27:01:b4:a5:03:02:f1:ed:92:9e:87:49:3a:11:eb:
ab:d8:74:e1:fc:a7:d5:e8:83:98:83:b4:6d:8c:7a:61:c9:2c:
26:22:62:1a:f7:eb:e2:59:86:b1:3d:71:7a:2c:76:28:b6:7e:
8d:64:2b:d5:1c:4b:04:1b:ca:94:fa:53:47:80:6c:74:e0:7c:
c3:58:ac:50:a1:1b:a6:77:9a:4a:4d:3c:79:df:28:82:08:0e:
f0:7b:a5:da:19:47:00:71:d4:38:b0:5c:34:9a:c9:19:da:84:
74:6d:1a:a2:77:60:e1:2c:9c:f2:ea:e1:a1:52:7a:90:de:f0:
28:e9:dc:12:e0:74:d8:1c:f0:0a:b0:c9:28:ea:aa:98:dc:40:
89:e0:c5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:56:06 2026 by rpki-client