
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
File: BcMvXW_ZVny3AAWx10pBqFtb5xI.mft (raw, json)
Hash identifier: wuv0WPziA0MINo4sfUjmBQTENAlApl0TFCUfo4HOiro=
Subject key identifier: 8F:5D:CC:39:DE:AB:8E:7C:0B:0F:20:64:1F:A0:53:98:F3:DA:6B:F7
Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
Certificate issuer: /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Certificate serial: 071E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
Manifest number: 070E
Signing time: Fri 04 Sep 2026 21:58:23 +0000
Manifest this update: Fri 04 Sep 2026 21:58:22 +0000
Manifest next update: Fri 11 Sep 2026 21:58:22 +0000
Files and hashes: 1: BcMvXW_ZVny3AAWx10pBqFtb5xI.crl (hash: jp76qrmiLQvofJoVsgdfETVxRgDLtTqxMcKKZV1YZVg=)
2: 27B648124C9C11ECACB77370C4F9AE02.roa (hash: K7MZ3T0dMRToMyp98c/Q67E9wIW0vsuQeli/CjrwVoo=)
3: F164038CBBE211ED8685DC61C4F9AE02.roa (hash: tT9i1DbRbJsGaFhFIKWc3hF5z1oqGKKoTGSshBbumJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 21:58:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1822 (0x71e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB5D3, serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Validity
Not Before: Sep 4 21:58:22 2026 GMT
Not After : Sep 11 21:58:22 2026 GMT
Subject: CN=6a9b3eff-2ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:0f:38:76:8c:67:f6:5c:8e:56:98:0c:31:
c3:a7:a7:76:f8:e1:72:58:cc:ef:a6:cb:92:c1:31:
55:25:b4:92:af:d2:59:e3:b4:02:fb:94:7c:27:3b:
eb:bb:46:1c:55:46:0f:27:66:3d:d1:d0:a1:bb:2a:
6e:6b:52:49:a1:42:3a:64:f6:d2:b6:42:97:b6:b6:
91:a7:3f:fb:92:f6:f1:8c:aa:36:19:d7:4f:22:06:
f6:85:4f:ce:f5:b2:8f:99:9b:4b:b8:d9:69:ac:f5:
63:2c:fd:b1:f5:e8:38:60:f5:27:e1:fc:83:2c:3d:
c6:7f:b1:65:c1:89:63:f6:3c:01:d9:18:84:69:75:
6c:d5:65:91:a2:4e:a8:ae:41:92:68:a0:33:65:7e:
61:1e:da:af:35:5a:0b:97:1d:c2:4d:1a:a7:64:14:
93:16:0e:e4:e9:a4:96:2b:3d:bd:73:a8:0f:1a:c3:
39:2f:aa:e9:bd:a4:0e:27:43:04:f5:0d:18:e0:90:
22:1d:f8:15:12:be:e1:25:6e:ec:dd:ac:66:fa:8d:
8d:85:8b:e0:bd:02:73:a0:0e:64:e7:0a:50:b3:fe:
a7:26:2c:cb:8c:dc:3b:c8:79:b1:19:50:0c:fb:9b:
23:57:00:5b:c8:08:52:2f:6a:9b:0e:b0:bb:1b:98:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5D:CC:39:DE:AB:8E:7C:0B:0F:20:64:1F:A0:53:98:F3:DA:6B:F7
X509v3 Authority Key Identifier:
keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9e:63:41:fe:e4:57:c4:cb:6b:63:77:2d:31:9a:77:f9:6a:
cb:da:bf:c0:6d:4b:ac:70:71:04:e5:7a:fd:71:ee:b2:b5:11:
a8:f7:e0:c0:c2:64:e0:ed:ed:d6:f2:57:3a:59:e3:9b:d9:de:
2d:2e:4c:b2:d1:91:1d:e5:27:62:08:3c:a9:69:8c:62:fc:c9:
f4:6d:d5:37:3e:42:fc:cf:d3:dc:47:a2:ca:14:e6:23:a0:8b:
61:b5:da:a9:60:78:82:cc:37:e7:07:3f:f5:34:3c:67:13:89:
84:48:2e:ae:37:88:a8:0a:15:6e:24:ac:38:8d:b0:02:60:b2:
01:ba:1c:31:f2:46:7f:62:19:9a:f0:07:e7:fa:1d:27:36:ce:
7e:80:82:4e:75:08:80:91:45:67:94:e5:b2:0a:37:0c:69:72:
b2:de:08:8f:b6:6f:eb:bc:38:56:85:f1:c5:2d:73:6d:99:cf:
70:29:6c:a6:7e:4f:cc:7f:2b:df:53:67:6b:80:3c:4e:44:2e:
c1:f3:a8:23:cd:dc:ae:16:c2:f3:51:d5:62:84:db:63:94:f6:
97:9c:6d:a0:6a:5e:49:bc:0e:3a:4d:c6:61:ac:6e:c1:58:e1:
ce:64:3d:2f:5f:84:66:2d:78:1d:7a:1c:16:65:93:45:1e:a6:
97:bd:50:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:17:52 2026 by rpki-client