
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft
File: BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft (raw, json)
Hash identifier: tGOle6eyQ+sQzh0DE2HlIT2AaZJ3mYEy8AVO2IbFU8g=
Subject key identifier: 10:40:44:0A:43:73:D3:7C:6D:EA:80:49:FE:4B:15:DB:22:A8:69:37
Authority key identifier: 04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9
Certificate issuer: /CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9
Certificate serial: 08F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft
Manifest number: 08EA
Signing time: Tue 18 Aug 2026 20:42:36 +0000
Manifest this update: Tue 18 Aug 2026 20:42:36 +0000
Manifest next update: Tue 25 Aug 2026 20:42:36 +0000
Files and hashes: 1: BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl (hash: f4K3ktBx4MJRz15buGUsKEk99ICdBaxOVtAqKcZeNt8=)
2: 02F863F6C09211EC8950E57AC4F9AE02.roa (hash: Y/u7H/M9ezhCW7Alg5EFaom2eH6uNFYYtjc9KkM3gSA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl
rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:42:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2296 (0x8f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4AA0, serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9
Validity
Not Before: Aug 18 20:42:36 2026 GMT
Not After : Aug 25 20:42:36 2026 GMT
Subject: CN=6a84c3bc-2ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:16:f1:96:76:0d:88:a3:54:c8:eb:fb:53:8d:
e7:e3:a4:5e:b9:b9:38:de:b9:2e:4a:16:23:3c:f5:
f0:8c:3c:42:2a:83:cc:99:46:30:6c:7a:2a:1c:19:
dd:5e:53:3b:4f:32:58:a6:83:1d:0f:0d:7e:01:e1:
b4:ce:07:02:a5:7f:84:2a:c9:96:8c:af:d5:dd:7c:
0f:99:f3:fc:33:5f:9d:34:d4:d6:93:fc:01:82:55:
d5:ef:1c:5a:fd:f6:ac:55:a7:25:22:38:f4:c2:f2:
99:6b:08:72:ca:f3:99:4a:d2:1d:a3:02:5d:6f:f7:
40:78:23:e1:24:af:6c:8f:0b:10:9a:8f:bf:fc:dc:
f8:ec:b5:c1:10:62:1a:29:3f:c5:07:11:bb:55:c3:
29:cc:3d:4c:bd:08:e3:e0:e8:2c:a3:dd:67:1d:70:
f4:76:b2:ef:ee:04:fc:0d:40:6a:5b:e8:dc:a2:c7:
82:7c:fc:a7:53:fb:b6:8f:74:d2:15:f1:c4:fb:01:
2a:43:35:94:3f:df:e1:04:fb:9f:88:df:ce:49:e1:
91:8b:1c:5a:89:3e:27:b3:9f:85:fb:81:7d:ed:60:
9a:bc:12:39:cf:01:76:4b:ba:7c:84:90:c9:3f:ce:
a2:3f:6c:a4:4a:89:c6:67:71:08:40:a2:13:26:81:
e2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:40:44:0A:43:73:D3:7C:6D:EA:80:49:FE:4B:15:DB:22:A8:69:37
X509v3 Authority Key Identifier:
keyid:04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:29:be:ac:eb:fc:b0:8d:6e:5b:fe:51:7d:4e:e7:11:da:47:
09:b9:ce:e6:5c:14:a7:b7:37:30:42:c7:35:c5:e2:0a:f5:96:
e8:4a:02:65:96:c5:fd:6c:74:97:3c:da:ff:5b:5b:29:07:d9:
bf:13:72:be:d9:00:57:65:7b:bf:90:64:45:2d:20:71:28:f8:
87:78:c8:0e:81:0f:d8:04:3c:24:b7:8d:8a:92:29:d6:f2:c1:
9f:8f:13:53:ae:3e:23:ff:46:9a:d6:80:79:93:31:ae:cc:67:
bd:3b:59:b7:cb:e0:14:3e:3d:44:43:45:36:f2:28:c6:05:96:
0e:6d:02:86:84:d7:00:da:65:c3:2f:b7:4e:e0:0e:d2:e4:97:
09:38:79:1f:37:46:26:df:80:bc:45:23:b2:92:3d:b0:37:63:
59:8c:77:9f:71:e4:a6:90:ab:68:06:75:35:be:01:03:22:8d:
cb:29:86:6b:3c:e8:6b:94:1f:72:77:3d:95:bf:43:4c:cc:71:
c8:c1:f6:82:7a:3c:03:dc:f1:db:17:40:0e:d7:46:c7:b6:34:
e4:11:b3:c0:dd:d8:37:f0:b1:a1:44:6e:2f:64:0e:c3:73:63:
f6:57:2e:ad:c3:70:35:e9:7f:fa:93:2a:b3:1b:1f:7d:65:52:
03:5a:7b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:16:13 2026 by rpki-client