
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
File: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft (raw, json)
Hash identifier: lM5XqHJ+ahrDOhMxlK31fhCJfweq547qZ8Y5Z4nuwTY=
Subject key identifier: C8:BF:1B:07:D4:15:93:FA:EC:99:8C:EC:7C:00:4E:AB:D3:A7:51:C3
Authority key identifier: F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD
Certificate issuer: /CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD
Certificate serial: 0B38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
Manifest number: 0B15
Signing time: Fri 02 Oct 2026 19:36:53 +0000
Manifest this update: Fri 02 Oct 2026 19:36:52 +0000
Manifest next update: Fri 09 Oct 2026 19:36:52 +0000
Files and hashes: 1: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl (hash: SUyysO3E57BSuSoMBkRpCofpIdXpzMRq2fgZ6IAJDZU=)
2: FE84EF96F16211F08FA76A8B5F6F56BC.roa (hash: YL7UmuRGeHpXu2WbhbEI2H3sC9365sdn3qPaotXzIXI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl
rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 19:36:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2872 (0xb38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0F3F, serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD
Validity
Not Before: Oct 2 19:36:52 2026 GMT
Not After : Oct 9 19:36:52 2026 GMT
Subject: CN=6ac007d4-0b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:41:4f:2f:47:b2:01:77:8e:96:65:04:e6:
12:a1:20:2c:5a:5c:2a:92:b6:a5:08:71:3f:28:5c:
1b:36:b6:60:cc:fd:de:1a:58:58:6a:dc:2a:71:29:
f0:31:56:f2:36:70:32:33:54:00:8e:54:9e:76:9f:
5e:ae:2a:bf:5d:36:c7:e6:50:39:d3:84:ae:e4:07:
f7:7f:d0:2c:83:9d:ba:fe:8f:14:6d:02:05:01:9c:
59:5c:3c:35:8f:0e:25:71:03:69:af:cd:b9:73:74:
e5:5b:27:0f:2c:69:2f:fa:04:c4:d8:ab:49:25:ab:
5a:ef:cf:aa:8a:88:fd:c4:56:6e:18:d3:36:ff:23:
b0:19:6f:3a:48:03:a5:2f:05:a8:a1:fe:78:81:12:
fb:7c:f5:4c:d1:c1:37:2f:cf:7b:a7:39:9d:1f:23:
12:75:2d:ae:55:49:4c:5c:00:d0:ba:78:03:c3:3d:
06:6d:2b:f0:bc:3b:5e:c0:39:b4:15:26:67:43:a7:
6b:9c:e5:b9:dd:c8:8a:cc:07:88:24:09:63:41:2b:
5b:02:c8:42:8b:d5:74:d3:3b:a4:3d:b8:09:cf:73:
c4:02:d0:8b:de:9a:d6:21:bb:1b:96:6d:89:c9:b9:
77:ee:c1:bd:bb:56:a8:86:fd:80:bd:2e:9d:75:c4:
6d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BF:1B:07:D4:15:93:FA:EC:99:8C:EC:7C:00:4E:AB:D3:A7:51:C3
X509v3 Authority Key Identifier:
keyid:F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a9:e4:dd:b7:d5:55:e2:35:05:0c:9d:d9:dd:1f:26:34:ee:
1a:d4:84:12:23:db:18:3c:41:44:eb:16:fd:22:f5:b1:1f:ec:
d1:f7:90:85:e0:d7:69:72:31:e2:2f:6b:d6:4e:f8:28:54:42:
5b:db:64:77:4a:f4:48:34:16:9e:b9:9f:89:bf:a0:5f:29:81:
08:f4:c3:ab:f0:72:a9:ac:d8:cf:04:df:cd:b2:04:03:7e:6a:
9a:ce:3f:fa:8a:86:3c:e8:9d:0f:12:28:a5:6b:8d:c5:ca:eb:
54:8f:1a:75:34:33:80:e5:bc:35:06:23:e4:de:1b:d0:23:5a:
73:4d:ad:d3:ea:aa:78:e2:07:00:3f:4e:8b:29:17:40:fa:57:
bf:f9:c2:21:31:fd:c8:1f:e5:01:05:41:5e:28:0d:f4:8a:8d:
b6:03:c8:12:c3:fa:96:3b:db:d8:00:50:17:75:ee:01:86:fb:
10:31:60:9c:7c:ea:fd:be:22:00:22:8b:6b:c0:4d:25:7a:e3:
e7:ba:3e:63:f8:54:2a:0c:48:32:cc:75:8f:32:d7:2b:2d:dd:
e3:a7:04:31:6d:ab:49:a2:ea:e3:18:95:70:59:53:a7:a2:f9:
1c:97:10:7f:f0:cf:76:64:6e:2b:e2:38:d6:5d:20:52:a3:0e:
ba:74:4c:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjBGM0YxMTAvBgNVBAUTKEY4MThGQzk4OEVDNzAzMkMzRTJDNkE0OEE1NTQ5OEFC
N0NENTY1RkQwHhcNMjYxMDAyMTkzNjUyWhcNMjYxMDA5MTkzNjUyWjAYMRYwFAYD
VQQDEw02YWMwMDdkNC0wYjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt69BTy9HsgF3jpZlBOYSoSAsWlwqkralCHE/KFwbNrZgzP3eGlhYatwqcSnw
MVbyNnAyM1QAjlSedp9eriq/XTbH5lA504Su5Af3f9Asg526/o8UbQIFAZxZXDw1
jw4lcQNpr825c3TlWycPLGkv+gTE2KtJJata78+qioj9xFZuGNM2/yOwGW86SAOl
LwWoof54gRL7fPVM0cE3L897pzmdHyMSdS2uVUlMXADQungDwz0GbSvwvDtewDm0
FSZnQ6drnOW53ciKzAeIJAljQStbAshCi9V00zukPbgJz3PEAtCL3prWIbsblm2J
ybl37sG9u1aohv2AvS6ddcRtzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMi/GwfU
FZP67JmM7HwATqvTp1HDMB8GA1UdIwQYMBaAFPgY/JiOxwMsPixqSKVUmKt81WX9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEYzRi8wOTM3M0FENjc4
QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5dy1MR3BJcFZTWXEzelZa
ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1CajhtSTdIQXl3LUxHcElwVlNZcTN6VlpmMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MEYzRi8wOTM3M0FENjc4QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5
dy1MR3BJcFZTWXEzelZaZjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADKnk3bfVVeI1BQyd2d0fJjTuGtSEEiPbGDxBROsW/SL1sR/s0feQheDXaXIx
4i9r1k74KFRCW9tkd0r0SDQWnrmfib+gXymBCPTDq/ByqazYzwTfzbIEA35qms4/
+oqGPOidDxIopWuNxcrrVI8adTQzgOW8NQYj5N4b0CNac02t0+qqeOIHAD9OiykX
QPpXv/nCITH9yB/lAQVBXigN9IqNtgPIEsP6ljvb2ABQF3XuAYb7EDFgnHzq/b4i
ACKLa8BNJXrj57o+Y/hUKgxIMsx1jzLXKy3d46cEMW2rSaLq4xiVcFlTp6L5HJcQ
f/DPdmRuK+I41l0gUqMOunRMGg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:21:29 2026 by rpki-client