
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
File: bKayrB3RewFNtsdnJ50Ixm5O_AU.mft (raw, json)
Hash identifier: 9txOhEgxUwmbBq2hkmNkX3O3ClQvKPHz000Dkmu2em8=
Subject key identifier: C0:58:F9:DF:B5:2B:BE:7A:3A:C7:78:66:0D:FE:17:D3:B5:E5:3D:23
Authority key identifier: 6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05
Certificate issuer: /CN=A91BC6B4/serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05
Certificate serial: 10BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
Manifest number: 1088
Signing time: Thu 22 Oct 2026 17:24:47 +0000
Manifest this update: Thu 22 Oct 2026 17:24:46 +0000
Manifest next update: Thu 29 Oct 2026 17:24:46 +0000
Files and hashes: 1: bKayrB3RewFNtsdnJ50Ixm5O_AU.crl (hash: gVRi+uJMNu9r57YDXGE9aMVon/k2G0dWZK/YDRA5jFw=)
2: FD22BBAE231F11EB99F53580C4F9AE02.roa (hash: dE0mhrpGScdBtr0x+KlnwIGm99yJikrZrhFjHazodxg=)
3: A850C476026E11EBB2E0E72FC4F9AE02.roa (hash: ZQ+Kp0nPniDPrMOYQ35Dp8VH467JhWTHQOyjMWpsMmc=)
4: 5FB07B1421CF11EBA0C85857C4F9AE02.roa (hash: 2/Kg1E4d6mdqw/RO9m0fS+QFT0c9p4PbHfjjUy6RVkE=)
5: 61A85BEE21CF11EBA0C85857C4F9AE02.roa (hash: fvafLyxSbKdArJ2YqMsVGihLYKU3CuygMScgak3VV9U=)
6: 425BF5FE7A4711EBAD125258C4F9AE02.roa (hash: 8feuwyIbHncVjc3N1BWNIRSwrUMtJmU1uYxy48QmnWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl
rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 17:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4287 (0x10bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC6B4, serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05
Validity
Not Before: Oct 22 17:24:46 2026 GMT
Not After : Oct 29 17:24:46 2026 GMT
Subject: CN=6ada46df-2930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:17:64:f2:8c:e6:0c:09:fc:7f:48:df:c3:
45:a9:c1:3d:d4:e8:19:70:a4:f5:6c:19:81:4a:83:
fe:d7:6f:ad:69:d2:a4:a2:be:85:45:30:25:06:d0:
b0:10:16:25:f5:3b:a2:d4:c3:7e:15:e4:e9:88:fc:
72:a7:fc:07:1b:81:7a:42:e1:d7:a2:f5:04:14:6f:
7e:ed:16:8b:15:dd:e9:f5:75:d8:a2:d3:ad:12:cb:
cd:91:cf:3d:17:a1:08:fa:4a:32:de:0f:a9:9c:f1:
e2:9a:4b:11:6d:6d:57:0b:dc:27:9d:87:ed:4f:4e:
af:1b:a3:e6:66:3d:33:91:7d:ac:22:4b:9e:e2:13:
34:58:93:6f:70:b0:eb:f7:d9:55:63:93:10:96:39:
7c:c7:6e:8d:79:86:6a:82:6b:a6:bd:d8:91:d9:6c:
77:ac:2a:a8:d8:63:61:cf:70:ca:e9:82:0f:07:72:
46:cd:d8:e3:a9:30:ac:9d:bf:b1:e1:2c:d7:69:2f:
59:e7:9d:34:ed:5f:b5:21:41:0c:64:bb:06:de:69:
d1:b0:e8:d5:79:55:f4:42:0e:cc:23:e5:cf:b7:57:
d5:43:93:e5:30:e2:e6:97:88:aa:a0:59:11:4b:b9:
2d:ea:c5:bd:e7:bd:98:3b:fd:59:f9:8f:b8:db:68:
63:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:58:F9:DF:B5:2B:BE:7A:3A:C7:78:66:0D:FE:17:D3:B5:E5:3D:23
X509v3 Authority Key Identifier:
keyid:6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:3c:29:8e:7d:9a:aa:bd:30:71:e8:e8:d2:59:c1:02:2a:01:
99:a7:06:44:60:ad:97:0a:d2:42:2b:ce:55:25:c6:a9:d7:67:
02:76:10:0d:60:e2:a8:35:b0:0d:b0:a5:20:10:e6:b3:54:73:
8a:a0:12:52:35:c5:a7:65:2e:11:d0:06:eb:03:70:6f:d1:0d:
0c:1a:f4:10:65:91:a2:fb:71:36:4a:b7:5e:d2:ab:3f:a9:8d:
e3:a4:28:07:ad:e8:03:da:d6:53:56:27:2a:4a:33:32:fc:99:
fd:29:71:4b:e5:21:02:47:25:33:c2:dc:e2:2c:e9:13:23:ed:
dc:7b:54:a8:7d:af:1b:dd:46:1c:7e:dd:f5:17:db:b7:5c:9d:
fe:7c:95:33:5d:69:5b:9a:91:7b:39:ea:95:66:b1:33:45:bd:
78:3c:28:5f:23:04:24:33:30:ee:da:75:fb:58:43:0c:56:1d:
df:27:e7:9f:25:aa:08:1d:2b:4c:f0:2c:6b:ce:69:24:37:ea:
1c:05:1e:84:2d:4a:9a:a3:b9:46:46:64:3e:8f:93:24:bc:72:
1a:6f:42:51:75:70:ad:13:35:63:b1:a3:4f:5c:3f:55:ed:2b:
78:3a:ab:fc:51:b8:f6:c0:c6:da:9f:c2:75:2e:81:05:b9:0c:
9a:7a:ab:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 13:07:23 2026 by rpki-client