
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
File: bKayrB3RewFNtsdnJ50Ixm5O_AU.mft (raw, json)
Hash identifier: 8WlQMrK5FGvCixvwIIOix8hWy36/tCkGo9A0PwafqqI=
Subject key identifier: CE:46:A5:B1:BA:EE:B2:99:F4:01:7D:8E:5A:7A:2A:00:B5:77:20:FD
Authority key identifier: 6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05
Certificate issuer: /CN=A91BC6B4/serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05
Certificate serial: 1059
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
Manifest number: 1027
Signing time: Sat 18 Apr 2026 17:20:49 +0000
Manifest this update: Sat 18 Apr 2026 17:20:48 +0000
Manifest next update: Sat 25 Apr 2026 17:20:48 +0000
Files and hashes: 1: bKayrB3RewFNtsdnJ50Ixm5O_AU.crl (hash: k6d5ds0DenIN8ar7nmqUiyt0EimFrmWqBDTZMFKD5aw=)
2: 425BF5FE7A4711EBAD125258C4F9AE02.roa (hash: Ct3tVRGKKuNXLDcdEkxUkKoVRt00zgopy3xS/5I0VW8=)
3: 5FB07B1421CF11EBA0C85857C4F9AE02.roa (hash: KF5dNcrK8E0YIKoliH3lHOIwKa2vrORT4q++DV5fsZo=)
4: 61A85BEE21CF11EBA0C85857C4F9AE02.roa (hash: k25mGg2F5n8UJwp6eRSCGIM2AwOiMLd27y+spCrOgFE=)
5: FD22BBAE231F11EB99F53580C4F9AE02.roa (hash: PWtfZGGdiIaaPkJzuk6xhvEAQtqDSOjgPspp+skXvaw=)
6: A850C476026E11EBB2E0E72FC4F9AE02.roa (hash: MFPThW45MDgLd1zOznKJ0EAncSmGQzB35N9n5suLU3U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl
rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 17:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4185 (0x1059)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC6B4, serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05
Validity
Not Before: Apr 18 17:20:48 2026 GMT
Not After : Apr 25 17:20:48 2026 GMT
Subject: CN=69e3bd71-a3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:0e:2d:02:01:9e:60:15:83:e1:8f:39:57:
d4:25:5b:f6:48:65:d8:47:42:7b:63:71:ae:0b:db:
9c:4c:e7:7c:0a:91:ec:b3:c8:b2:3a:76:2a:f6:e8:
87:2f:a5:37:7d:38:25:31:cf:22:77:3a:04:0d:68:
70:72:ae:b1:88:e7:df:98:83:40:61:bb:5f:ad:dc:
2f:53:0f:00:8e:f2:bd:12:c3:ea:f8:da:f0:b5:b8:
22:0a:45:74:bb:b5:32:ec:0d:54:e0:90:d3:96:ab:
38:7d:2c:b1:9a:09:ec:54:a3:ee:13:44:a6:f5:76:
f0:a7:ea:38:f4:8f:e5:6d:40:7f:82:8a:ea:66:3f:
24:d0:eb:6c:c6:60:7d:ce:99:c6:4b:c4:a8:75:2b:
f6:2b:d9:e2:f1:73:e4:59:4c:80:66:11:70:f0:8d:
d6:1c:8c:73:68:39:9f:1c:b2:cb:24:3e:56:47:7d:
e1:04:18:6e:7c:1f:e8:85:cc:bd:40:18:1e:50:39:
9b:e0:85:a5:5d:ba:29:0e:b5:6d:87:5b:25:49:3b:
5f:9e:e2:ca:92:aa:74:c8:08:c9:0c:1a:3b:49:72:
16:dd:92:fd:a1:3a:02:67:17:58:c2:4c:8c:06:7b:
e2:e1:39:fc:ab:e2:4b:12:cf:24:5d:cb:10:32:fb:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:46:A5:B1:BA:EE:B2:99:F4:01:7D:8E:5A:7A:2A:00:B5:77:20:FD
X509v3 Authority Key Identifier:
keyid:6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:4c:56:34:72:26:78:40:57:6c:f6:2b:d1:80:7b:8e:8b:19:
5c:08:c7:60:84:71:21:55:b7:df:89:a4:5a:06:d7:82:aa:da:
92:e0:d2:3c:99:a3:d4:52:01:27:c2:9e:d3:1e:ba:79:c9:26:
9f:20:7e:9b:8c:a2:e5:75:81:a8:1d:ab:f1:e8:10:e5:6c:82:
85:7a:51:17:2c:d8:64:ac:de:55:ab:07:db:d8:a0:d7:0a:5b:
ad:73:df:f3:9f:89:09:0f:37:e0:32:73:be:35:72:de:94:c4:
bd:2b:e5:14:81:35:1b:2c:7e:db:8b:1a:af:fb:c9:89:49:18:
49:77:98:f1:e6:ad:f3:5e:61:ff:19:fb:29:86:5e:57:9a:58:
7f:24:ca:35:04:c0:28:77:b4:ee:03:69:7f:f8:9b:df:94:9d:
91:d7:65:ea:48:6d:f2:9c:48:ac:71:2c:ca:07:f2:0f:ff:24:
fa:80:c9:ae:74:47:4b:49:9e:73:ca:80:fc:dd:c8:11:0c:4e:
a6:9f:0d:fe:72:ce:55:46:08:d0:fe:10:ff:7d:d0:e5:4d:9e:
94:a1:2b:d2:4e:99:f1:af:d1:3a:e8:e0:47:21:9c:7a:a8:e8:
d9:41:68:0f:e5:6b:ab:d8:18:7a:e3:da:82:08:ee:aa:ba:7b:
0a:a6:a3:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM2QjQxMTAvBgNVBAUTKDZDQTZCMkFDMUREMTdCMDE0REI2Qzc2NzI3OUQwOEM2
NkU0RUZDMDUwHhcNMjYwNDE4MTcyMDQ4WhcNMjYwNDI1MTcyMDQ4WjAYMRYwFAYD
VQQDEw02OWUzYmQ3MS1hM2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmtUOLQIBnmAVg+GPOVfUJVv2SGXYR0J7Y3GuC9ucTOd8CpHss8iyOnYq9uiH
L6U3fTglMc8idzoEDWhwcq6xiOffmINAYbtfrdwvUw8AjvK9EsPq+NrwtbgiCkV0
u7Uy7A1U4JDTlqs4fSyxmgnsVKPuE0Sm9Xbwp+o49I/lbUB/gorqZj8k0OtsxmB9
zpnGS8SodSv2K9ni8XPkWUyAZhFw8I3WHIxzaDmfHLLLJD5WR33hBBhufB/ohcy9
QBgeUDmb4IWlXbopDrVth1slSTtfnuLKkqp0yAjJDBo7SXIW3ZL9oToCZxdYwkyM
Bnvi4Tn8q+JLEs8kXcsQMvsF5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM5GpbG6
7rKZ9AF9jlp6KgC1dyD9MB8GA1UdIwQYMBaAFGymsqwd0XsBTbbHZyedCMZuTvwF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZCNC83MjZGNTFDMjYz
RjIxMUU5QkIyMERENDVDNEY5QUUwMi9iS2F5ckIzUmV3Rk50c2RuSjUwSXhtNU9f
QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JLYXlyQjNSZXdGTnRzZG5KNTBJeG01T19BVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzZCNC83MjZGNTFDMjYzRjIxMUU5QkIyMERENDVDNEY5QUUwMi9iS2F5ckIzUmV3
Rk50c2RuSjUwSXhtNU9fQVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOUxWNHImeEBXbPYr0YB7josZXAjHYIRxIVW334mkWgbXgqrakuDSPJmj1FIB
J8Ke0x66eckmnyB+m4yi5XWBqB2r8egQ5WyChXpRFyzYZKzeVasH29ig1wpbrXPf
85+JCQ834DJzvjVy3pTEvSvlFIE1Gyx+24sar/vJiUkYSXeY8eat815h/xn7KYZe
V5pYfyTKNQTAKHe07gNpf/ib35Sdkddl6kht8pxIrHEsygfyD/8k+oDJrnRHS0me
c8qA/N3IEQxOpp8N/nLOVUYI0P4Q/33Q5U2elKEr0k6Z8a/ROujgRyGceqjo2UFo
D+Vrq9gYeuPaggjuqrp7CqajdQ==
-----END CERTIFICATE-----
Generated at Mon Apr 20 08:41:17 2026 by rpki-client