
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6CA0/C185C03475DD11F1B7D5E4A06DA30FBC/bXC6GtLQScyzZtIngyXhshIsrnc.mft
File: bXC6GtLQScyzZtIngyXhshIsrnc.mft (raw, json)
Hash identifier: 8UsvTcS+UUZas6jCsnrIy4FKn6OadHYTnNQoxtDLvCo=
Subject key identifier: 4A:2B:63:65:BE:4A:FB:19:47:21:A7:2A:F2:9E:32:64:F9:B9:5A:58
Authority key identifier: 6D:70:BA:1A:D2:D0:49:CC:B3:66:D2:27:83:25:E1:B2:12:2C:AE:77
Certificate issuer: /CN=A91B6CA0/serialNumber=6D70BA1AD2D049CCB366D2278325E1B2122CAE77
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXC6GtLQScyzZtIngyXhshIsrnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6CA0/C185C03475DD11F1B7D5E4A06DA30FBC/bXC6GtLQScyzZtIngyXhshIsrnc.mft
Manifest number: 1B
Signing time: Wed 19 Aug 2026 09:41:32 +0000
Manifest this update: Wed 19 Aug 2026 09:41:32 +0000
Manifest next update: Wed 26 Aug 2026 09:41:32 +0000
Files and hashes: 1: bXC6GtLQScyzZtIngyXhshIsrnc.crl (hash: xtfKlNwxA/nGnxPPPIei7DWTizZqAl+sbJsy0IGwrrU=)
2: E83F3D4A769611F1B4A8F44568A30FBC.roa (hash: mwRw+te8N8Tfr8Fref9XjkMHkxw9JaGnt839b3ney+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6CA0/C185C03475DD11F1B7D5E4A06DA30FBC/bXC6GtLQScyzZtIngyXhshIsrnc.crl
rsync://rpki.apnic.net/member_repository/A91B6CA0/C185C03475DD11F1B7D5E4A06DA30FBC/bXC6GtLQScyzZtIngyXhshIsrnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXC6GtLQScyzZtIngyXhshIsrnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:41:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6CA0, serialNumber=6D70BA1AD2D049CCB366D2278325E1B2122CAE77
Validity
Not Before: Aug 19 09:41:32 2026 GMT
Not After : Aug 26 09:41:32 2026 GMT
Subject: CN=6a857a4c-5ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:1e:4d:2a:7c:55:f3:57:e1:46:5a:8e:30:
79:4d:85:52:5e:df:d5:b0:7f:9a:ef:37:f7:fd:a9:
bd:65:9d:77:e0:8c:e5:5d:22:21:f8:82:02:61:4c:
02:50:bd:9e:ea:1d:67:23:94:46:a1:7a:11:ff:4e:
43:48:ce:41:d0:d2:f0:60:22:9f:58:62:5a:12:bc:
29:64:07:25:33:22:c3:1c:0b:88:e2:50:90:1e:a4:
8f:48:73:54:39:49:29:c5:f1:ee:c4:a3:9d:de:b0:
b4:eb:e3:fe:92:86:15:8b:74:2b:b0:ee:f1:40:4e:
47:75:78:7f:6d:81:1c:2f:3e:e8:eb:d6:5d:19:e4:
71:2a:ab:ad:3f:ab:29:6a:fa:b0:08:25:c6:14:b7:
fc:be:5b:38:95:5e:c3:4e:84:2f:6f:e1:56:e6:bd:
5e:43:f2:29:bf:00:b4:e6:9d:3f:32:2f:5e:5c:ff:
fd:2f:b2:6a:6c:2f:42:e8:40:f1:5b:d5:26:d7:a6:
7a:46:bc:df:12:c6:1a:06:c0:8b:87:84:e2:78:d9:
09:17:35:ee:70:60:2b:e1:54:db:aa:4e:e1:ff:f7:
dd:6c:2e:d2:38:ed:c1:51:71:29:de:9f:63:2a:9d:
0d:40:8d:d6:fe:91:2a:ba:a7:01:d2:00:8f:5e:e0:
47:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2B:63:65:BE:4A:FB:19:47:21:A7:2A:F2:9E:32:64:F9:B9:5A:58
X509v3 Authority Key Identifier:
keyid:6D:70:BA:1A:D2:D0:49:CC:B3:66:D2:27:83:25:E1:B2:12:2C:AE:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6CA0/C185C03475DD11F1B7D5E4A06DA30FBC/bXC6GtLQScyzZtIngyXhshIsrnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXC6GtLQScyzZtIngyXhshIsrnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CA0/C185C03475DD11F1B7D5E4A06DA30FBC/bXC6GtLQScyzZtIngyXhshIsrnc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:80:15:b5:fc:a6:71:b1:5f:58:18:aa:57:30:f9:ac:95:97:
e3:08:04:74:86:ec:71:91:31:35:e7:c3:86:c1:1d:db:41:a5:
85:1e:ae:ff:7d:8d:eb:d5:18:71:47:df:2b:d5:1a:bf:c8:bf:
0d:a8:40:a7:f1:ab:8a:df:3e:d0:10:5a:3d:06:67:26:92:99:
95:4f:b1:b5:4c:e7:ba:3f:34:7e:b3:8c:30:12:10:41:4c:ef:
d9:bf:44:99:d4:3c:aa:72:29:3b:8e:8a:12:0d:bc:e5:65:e5:
bc:8b:b8:17:31:fe:69:00:60:c0:1c:c9:32:5c:1d:a8:e9:a6:
50:27:82:31:d8:d8:21:a1:83:01:6d:cf:2a:fb:b4:aa:d9:3c:
4c:45:d5:97:43:1c:02:fe:91:2c:49:de:cf:ed:ef:37:06:d4:
59:0f:68:36:d4:2c:41:ae:b7:9c:0d:86:32:e8:90:ca:33:a5:
5d:2b:63:a0:80:40:0f:b6:83:ab:81:5e:a0:bf:f2:03:87:8b:
4b:50:ec:07:21:51:7c:85:5a:3b:31:ed:35:5b:67:a8:cd:5c:
14:c2:1d:c9:75:c8:f0:bf:42:30:fc:e2:b6:b7:00:bb:6e:fe:
92:02:6b:95:fa:49:27:ed:95:87:d6:a9:8b:2f:d0:73:39:38:
52:9f:d3:b1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NkNBMDExMC8GA1UEBRMoNkQ3MEJBMUFEMkQwNDlDQ0IzNjZEMjI3ODMyNUUxQjIx
MjJDQUU3NzAeFw0yNjA4MTkwOTQxMzJaFw0yNjA4MjYwOTQxMzJaMBgxFjAUBgNV
BAMTDTZhODU3YTRjLTVlZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJdR5NKnxV81fhRlqOMHlNhVJe39Wwf5rvN/f9qb1lnXfgjOVdIiH4ggJhTAJQ
vZ7qHWcjlEahehH/TkNIzkHQ0vBgIp9YYloSvClkByUzIsMcC4jiUJAepI9Ic1Q5
SSnF8e7Eo53esLTr4/6ShhWLdCuw7vFATkd1eH9tgRwvPujr1l0Z5HEqq60/qylq
+rAIJcYUt/y+WziVXsNOhC9v4VbmvV5D8im/ALTmnT8yL15c//0vsmpsL0LoQPFb
1SbXpnpGvN8SxhoGwIuHhOJ42QkXNe5wYCvhVNuqTuH/991sLtI47cFRcSnen2Mq
nQ1Ajdb+kSq6pwHSAI9e4Ee1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSitjZb5K
+xlHIacq8p4yZPm5WlgwHwYDVR0jBBgwFoAUbXC6GtLQScyzZtIngyXhshIsrncw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2Q0EwL0MxODVDMDM0NzVE
RDExRjFCN0Q1RTRBMDZEQTMwRkJDL2JYQzZHdExRU2N5elp0SW5neVhoc2hJc3Ju
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYlhDNkd0TFFTY3l6WnRJbmd5WGhzaElzcm5jLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2
Q0EwL0MxODVDMDM0NzVERDExRjFCN0Q1RTRBMDZEQTMwRkJDL2JYQzZHdExRU2N5
elp0SW5neVhoc2hJc3JuYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAzgBW1/KZxsV9YGKpXMPmslZfjCAR0huxxkTE158OGwR3bQaWFHq7/fY3r1Rhx
R98r1Rq/yL8NqECn8auK3z7QEFo9BmcmkpmVT7G1TOe6PzR+s4wwEhBBTO/Zv0SZ
1Dyqcik7jooSDbzlZeW8i7gXMf5pAGDAHMkyXB2o6aZQJ4Ix2NghoYMBbc8q+7Sq
2TxMRdWXQxwC/pEsSd7P7e83BtRZD2g21CxBrrecDYYy6JDKM6VdK2OggEAPtoOr
gV6gv/IDh4tLUOwHIVF8hVo7Me01W2eozVwUwh3Jdcjwv0Iw/OK2twC7bv6SAmuV
+kkn7ZWH1qmLL9BzOThSn9Ox
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:42 2026 by rpki-client