
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft
File: bxP1UQCfJIptmHQ2AE6FeVFWkns.mft (raw, json)
Hash identifier: gWGB11x0WGxzvJu0OJJqKxquNYwUWcm0jZwDIK2fgEc=
Subject key identifier: E5:23:46:D1:C6:7C:A9:36:74:FC:76:4B:51:0D:16:5B:6A:4A:7C:69
Authority key identifier: 6F:13:F5:51:00:9F:24:8A:6D:98:74:36:00:4E:85:79:51:56:92:7B
Certificate issuer: /CN=A91CAFC4/serialNumber=6F13F551009F248A6D987436004E85795156927B
Certificate serial: 0A0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft
Manifest number: 09F9
Signing time: Wed 28 Oct 2026 20:01:34 +0000
Manifest this update: Wed 28 Oct 2026 20:01:34 +0000
Manifest next update: Wed 04 Nov 2026 20:01:34 +0000
Files and hashes: 1: bxP1UQCfJIptmHQ2AE6FeVFWkns.crl (hash: 3TVeY0XXr41s3txOnRO5/rNwzV3ClgwJIB1P7zM9x2Y=)
2: D2039A56AABC11EEA0370F2CC4F9AE02.roa (hash: ynhPE5wAgaVqH7nCW5tR8ne/clm5wNEfqCy2a6X1yEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.crl
rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 20:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2575 (0xa0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAFC4, serialNumber=6F13F551009F248A6D987436004E85795156927B
Validity
Not Before: Oct 28 20:01:34 2026 GMT
Not After : Nov 4 20:01:34 2026 GMT
Subject: CN=6ae2549e-1dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3f:c5:71:af:bc:a7:fb:ae:85:5b:02:02:07:
cc:5a:bd:05:9e:8b:82:9f:14:77:1a:05:34:2a:cc:
26:2c:94:68:e5:c7:41:b7:ef:d6:cb:7f:5e:06:af:
e9:78:97:2d:0a:cf:13:19:e1:9d:93:b2:b0:30:db:
ff:8c:7d:cd:5b:fa:58:e5:68:e5:fb:0f:53:b2:4d:
ad:3f:c4:d2:60:b5:18:ad:65:b8:fb:a6:f8:5f:68:
40:07:c9:40:7c:07:93:59:d9:82:ec:29:bc:5b:df:
ee:7f:bb:8c:6c:ad:2e:c7:d1:fe:15:33:c6:03:e8:
35:58:5b:e2:cc:fe:d0:14:23:bd:8b:ca:ee:8d:f3:
cf:a1:c6:f1:99:90:ba:55:f6:6b:27:6c:9d:90:05:
66:12:03:44:04:37:cf:75:a7:74:25:7c:50:e1:85:
5a:04:0a:ea:06:de:89:da:90:6c:b4:ca:93:f4:9d:
39:dc:8d:70:bf:04:34:d6:0a:fd:b7:16:8d:7a:92:
ed:97:de:46:0d:13:85:fa:4f:42:db:de:cc:64:4b:
05:27:9e:eb:df:ca:17:c1:4c:d9:33:67:24:1e:88:
89:2e:12:9a:4e:cf:b7:30:03:16:37:ec:38:b7:94:
55:69:b1:17:ba:66:ca:3b:7e:94:18:ef:b4:dd:a2:
56:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:23:46:D1:C6:7C:A9:36:74:FC:76:4B:51:0D:16:5B:6A:4A:7C:69
X509v3 Authority Key Identifier:
keyid:6F:13:F5:51:00:9F:24:8A:6D:98:74:36:00:4E:85:79:51:56:92:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:09:2f:70:01:1f:7e:ce:ba:4c:e1:9a:5d:14:cf:6d:c8:21:
ab:68:64:3c:67:6c:e3:c1:37:0a:9f:1e:0f:af:07:38:db:a9:
58:87:c0:94:2d:4f:c4:d9:79:ea:53:36:16:ba:75:00:60:ef:
bd:5f:f1:66:4e:f2:27:4b:04:20:ea:15:49:6b:81:e0:47:24:
9e:87:0d:2a:4f:bf:a4:0f:92:ca:ec:a7:dd:b0:ca:47:47:78:
25:83:84:db:a2:e0:12:a8:d5:4e:e3:37:27:fe:e0:06:50:64:
aa:a3:27:c4:a3:36:67:df:3f:57:8b:f1:64:23:30:23:da:74:
fe:a8:aa:b9:d8:cc:c3:72:b8:a0:87:13:17:d0:4c:3e:b4:84:
67:4b:75:12:86:6a:63:ca:a2:4c:ef:eb:17:06:95:ac:45:b7:
90:10:40:0a:f6:29:16:b5:c6:14:1a:e7:df:8f:e1:de:4c:1a:
7a:dd:1a:63:40:00:59:86:1a:f3:e1:e2:b8:16:c8:52:e5:3b:
9f:4c:2f:bc:93:97:6f:21:83:f9:89:66:3b:86:39:ba:35:c9:
97:1a:9f:fe:45:f7:f5:62:62:d1:8b:04:9b:94:ab:1e:08:b3:
3a:c9:39:cd:a6:88:d9:c2:28:cc:1f:52:85:f6:d6:4c:1a:f5:
e7:59:66:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:06:04 2026 by rpki-client