
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft
File: BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft (raw, json)
Hash identifier: ALS3TbJ5EsAyR7Kw4MODGEliXGmw+Vkp0d7Mx9kjWLY=
Subject key identifier: A5:B2:22:73:58:2E:9E:CC:70:D9:18:D0:BF:B3:34:2C:E4:BF:0A:7E
Authority key identifier: 04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9
Certificate issuer: /CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9
Certificate serial: 08DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft
Manifest number: 08CD
Signing time: Mon 22 Jun 2026 20:28:55 +0000
Manifest this update: Mon 22 Jun 2026 20:28:54 +0000
Manifest next update: Mon 29 Jun 2026 20:28:54 +0000
Files and hashes: 1: BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl (hash: 6wGMu8eDDekCMCG07vObldS+Ho3mWKtqoC5/7BqTUks=)
2: 02F863F6C09211EC8950E57AC4F9AE02.roa (hash: Y/u7H/M9ezhCW7Alg5EFaom2eH6uNFYYtjc9KkM3gSA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl
rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 20:28:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2267 (0x8db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4AA0, serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9
Validity
Not Before: Jun 22 20:28:54 2026 GMT
Not After : Jun 29 20:28:54 2026 GMT
Subject: CN=6a399b07-9776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:ab:42:8d:da:e3:a1:5b:b6:79:2a:d2:33:
d4:37:fe:20:9a:8e:55:ad:71:f5:27:19:40:93:b9:
c9:69:1a:cb:80:81:df:65:43:d3:bd:86:e6:34:6a:
57:d7:92:66:df:3d:88:c3:2a:ec:89:c4:bd:60:97:
6c:4a:27:99:c1:cf:41:14:36:ca:a0:be:d6:c2:8e:
8f:f0:a1:59:b6:05:13:48:3b:ab:c1:14:8a:ca:ec:
85:b0:11:03:61:dd:42:56:5e:10:c7:79:16:8f:88:
18:6e:20:56:e9:e8:fb:d7:ae:9d:a5:f8:70:68:ec:
07:a2:70:e2:e2:8f:dd:01:23:04:26:0b:91:ef:2a:
70:8f:c7:e0:81:be:b2:b3:d5:2a:8b:53:b0:50:aa:
e0:58:a9:af:17:ea:b1:80:98:2b:38:c6:3d:04:46:
62:e4:7b:7f:04:b9:43:6b:4b:ed:25:51:86:ef:0e:
20:9e:6e:16:16:9a:8f:7f:2b:03:49:01:78:2d:af:
36:da:af:48:b0:e7:dc:b6:86:28:6b:6a:f1:f5:91:
90:fa:76:d2:c4:7d:57:c2:73:0d:52:8c:6b:9e:f3:
46:df:23:3e:13:ea:f5:56:ac:4b:6a:1c:3c:12:00:
4e:1e:e2:7d:d0:56:5b:1d:e1:ec:10:ee:28:c9:14:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B2:22:73:58:2E:9E:CC:70:D9:18:D0:BF:B3:34:2C:E4:BF:0A:7E
X509v3 Authority Key Identifier:
keyid:04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:53:db:3d:39:19:a8:cb:24:7b:8a:a5:67:e2:62:da:76:7a:
cb:a8:28:02:82:fc:40:10:45:9e:0f:49:4e:61:15:6a:8c:55:
54:71:97:bb:fd:6f:ef:47:b7:51:a4:1c:64:78:85:4b:0a:77:
b7:67:63:6a:98:71:c2:a3:2a:37:a6:83:70:c3:2b:64:80:ac:
2f:40:91:01:86:a1:52:a5:4b:79:58:05:7a:d5:26:7e:98:40:
6d:a8:90:7c:a5:77:fa:6b:9e:9d:04:c4:4d:42:b5:e8:e2:6d:
78:25:2e:a4:cf:61:1e:e6:24:19:58:b4:5a:ad:a1:ef:47:c8:
2d:52:36:81:a7:70:95:94:db:6a:85:23:bb:3d:ed:48:c6:20:
62:6c:88:1e:20:c6:51:7e:74:e1:41:65:b9:25:7c:8c:28:e2:
b5:27:5f:53:cf:af:98:89:e8:6c:fc:4f:6e:04:30:30:97:50:
ec:ec:ed:bc:ee:9b:4e:98:03:3e:25:88:57:12:f4:43:2e:a7:
17:61:36:38:bd:2c:80:3c:2d:ca:d4:ec:81:7f:0f:41:d3:35:
c8:82:c9:fc:b0:b5:89:92:14:09:b3:d6:45:06:62:db:ff:75:
08:b6:5f:18:cf:9d:f7:7c:58:1d:c2:16:fc:4b:c3:59:2f:0b:
d3:8e:fb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:17 2026 by rpki-client