
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4D3B/93C81130AA2911F18A0475714E11F970/BiarcbBaQ992OKa3ZsD2tmeDZhQ.mft
File: BiarcbBaQ992OKa3ZsD2tmeDZhQ.mft (raw, json)
Hash identifier: Rg2xm65l46Davhz4rAMtjPcLaStzo73uHro4ATFUcOA=
Subject key identifier: AF:AE:50:EE:3B:50:D1:87:0D:4F:63:58:8E:2A:57:E6:18:EC:9B:55
Authority key identifier: 06:26:AB:71:B0:5A:43:DF:76:38:A6:B7:66:C0:F6:B6:67:83:66:14
Certificate issuer: /CN=A91B4D3B/serialNumber=0626AB71B05A43DF7638A6B766C0F6B667836614
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BiarcbBaQ992OKa3ZsD2tmeDZhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D3B/93C81130AA2911F18A0475714E11F970/BiarcbBaQ992OKa3ZsD2tmeDZhQ.mft
Manifest number: 10
Signing time: Mon 05 Oct 2026 09:35:38 +0000
Manifest this update: Mon 05 Oct 2026 09:35:38 +0000
Manifest next update: Mon 12 Oct 2026 09:35:38 +0000
Files and hashes: 1: BiarcbBaQ992OKa3ZsD2tmeDZhQ.crl (hash: NtrrZBu3trJfrbV+iN46gjszaubKElNzvUP3MXnfSy0=)
2: EDF5E358AA2911F1802404B54E11F970.roa (hash: QGMvfJSrPsNJQbKkNSkMcXXJ3I+XjrIqH/PpDwZlsa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4D3B/93C81130AA2911F18A0475714E11F970/BiarcbBaQ992OKa3ZsD2tmeDZhQ.crl
rsync://rpki.apnic.net/member_repository/A91B4D3B/93C81130AA2911F18A0475714E11F970/BiarcbBaQ992OKa3ZsD2tmeDZhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BiarcbBaQ992OKa3ZsD2tmeDZhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 09:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4D3B, serialNumber=0626AB71B05A43DF7638A6B766C0F6B667836614
Validity
Not Before: Oct 5 09:35:38 2026 GMT
Not After : Oct 12 09:35:38 2026 GMT
Subject: CN=6ac36f6a-39d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:3c:06:96:42:24:fb:84:9c:56:99:10:03:
91:f4:06:42:2c:ee:94:28:cb:52:54:63:09:2b:d5:
cd:b4:d0:c0:37:09:d6:ba:16:be:a6:c5:f4:60:a3:
6b:7a:e9:d6:c2:a4:aa:96:45:2e:da:56:9d:75:ea:
d8:1d:ff:e1:ce:02:ef:aa:08:34:c0:13:9e:03:bb:
e4:5d:40:e8:3d:c5:d4:09:2f:39:4c:ef:1d:96:d2:
90:fb:c2:a2:cd:f5:f5:b1:4f:d6:27:bc:2c:75:25:
f4:43:82:ee:5b:06:b2:1b:fe:b3:5d:14:f1:99:7a:
11:4c:38:95:c5:89:3b:15:9b:8b:85:8f:d8:4d:67:
f8:91:32:10:fb:3b:7d:2b:63:c1:ed:03:bb:0c:09:
5c:73:ff:f3:e0:69:1e:8d:72:ec:eb:46:6c:20:e3:
b1:2d:7b:b7:dc:78:48:78:4e:1e:c0:1e:08:97:41:
f1:52:59:fe:18:98:01:81:f0:96:73:f6:d4:a2:f4:
b3:a5:94:88:61:a8:c5:2b:52:5d:f4:38:95:32:7e:
5c:df:26:7d:ef:0a:f3:5b:cf:29:b0:cd:73:17:8b:
6c:b9:09:be:85:b7:d4:e7:b1:6b:89:b1:64:0a:98:
b2:fe:99:4c:d2:a8:08:64:b1:4e:d2:19:6c:0a:57:
c2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AE:50:EE:3B:50:D1:87:0D:4F:63:58:8E:2A:57:E6:18:EC:9B:55
X509v3 Authority Key Identifier:
keyid:06:26:AB:71:B0:5A:43:DF:76:38:A6:B7:66:C0:F6:B6:67:83:66:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4D3B/93C81130AA2911F18A0475714E11F970/BiarcbBaQ992OKa3ZsD2tmeDZhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BiarcbBaQ992OKa3ZsD2tmeDZhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D3B/93C81130AA2911F18A0475714E11F970/BiarcbBaQ992OKa3ZsD2tmeDZhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:28:03:2f:0f:26:90:31:03:a0:92:c2:4e:2a:a4:29:70:ac:
3d:3b:7d:b9:65:b2:ac:5b:6c:f2:de:cd:f6:41:9c:84:54:42:
88:59:3b:0b:7e:5f:10:1d:af:00:3d:a4:aa:7a:f5:b6:69:74:
34:94:76:2f:f2:c8:90:a4:4a:b8:ef:5a:a2:5b:12:81:9b:b3:
b3:d6:c9:52:1d:71:46:75:d0:33:ce:82:09:ae:55:42:40:96:
8d:03:e1:af:3e:02:32:35:ea:78:a0:be:dc:86:b9:5a:0e:d0:
ad:f8:d5:16:c3:b6:fb:95:92:39:50:ae:50:a1:19:a8:21:79:
bf:91:00:17:11:64:1c:5a:3e:8d:d0:f5:88:93:fd:65:92:af:
7c:0e:3d:56:ff:ce:93:41:52:c2:9f:80:c7:b5:f5:05:b3:82:
2f:6f:70:bf:0a:84:92:71:85:5e:7d:1e:8a:f7:e8:b1:aa:c9:
5c:91:42:70:7d:c3:f7:27:e5:c7:b4:64:b5:8e:75:02:b6:38:
c5:77:41:e6:d3:8d:01:92:36:83:65:7d:0a:de:74:47:4d:0d:
b4:ca:73:b8:07:74:14:25:da:55:e7:17:16:37:09:ac:d1:52:
cd:74:a1:7b:61:bf:37:5f:d9:65:af:a6:a5:f9:d5:6d:12:4e:
15:84:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 00:19:24 2026 by rpki-client