
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft
File: bxP1UQCfJIptmHQ2AE6FeVFWkns.mft (raw, json)
Hash identifier: O14Iyp4hSAmeGDlr9bkVSxJwNzhXjiSWr1OZMedFSYs=
Subject key identifier: 5B:4E:61:7D:06:F9:17:3F:D3:C4:D3:C9:02:9A:EE:56:79:D5:92:D8
Authority key identifier: 6F:13:F5:51:00:9F:24:8A:6D:98:74:36:00:4E:85:79:51:56:92:7B
Certificate issuer: /CN=A91CAFC4/serialNumber=6F13F551009F248A6D987436004E85795156927B
Certificate serial: 09EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft
Manifest number: 09D9
Signing time: Wed 26 Aug 2026 19:49:13 +0000
Manifest this update: Wed 26 Aug 2026 19:49:12 +0000
Manifest next update: Wed 02 Sep 2026 19:49:12 +0000
Files and hashes: 1: bxP1UQCfJIptmHQ2AE6FeVFWkns.crl (hash: 7ECZ8gFgLimovCYvViJGZOmqL099W6vN7GAqB5C435o=)
2: D2039A56AABC11EEA0370F2CC4F9AE02.roa (hash: ynhPE5wAgaVqH7nCW5tR8ne/clm5wNEfqCy2a6X1yEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.crl
rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 19:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2543 (0x9ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAFC4, serialNumber=6F13F551009F248A6D987436004E85795156927B
Validity
Not Before: Aug 26 19:49:12 2026 GMT
Not After : Sep 2 19:49:12 2026 GMT
Subject: CN=6a8f4339-c522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:53:65:80:3d:a6:3f:dc:8f:f5:5e:c9:9f:
5f:12:c0:e2:23:b4:9b:d6:62:50:26:b7:6f:b8:a3:
27:98:38:a0:cb:91:b7:04:f1:e7:17:09:70:1b:3f:
71:df:d8:08:40:ec:79:8d:ce:db:87:09:cf:d5:a2:
cd:82:90:44:45:ab:7a:eb:d9:29:06:26:3a:cd:19:
9b:13:c7:fb:61:48:39:0e:a9:3b:9d:91:f2:89:17:
a1:ad:ae:7d:63:72:1a:37:9a:da:e5:31:96:d2:03:
87:2f:96:eb:cb:86:9e:8a:a0:42:cb:e5:25:7f:6b:
05:42:6a:47:e2:3c:59:9f:32:98:e7:6b:f2:fc:ae:
a7:9d:5a:ff:c8:d5:77:b3:06:7d:95:f7:e8:2f:e7:
b1:21:1b:2e:7a:75:f8:41:09:8c:b5:df:47:33:66:
3b:03:fb:56:d9:ee:ba:1c:94:66:3b:2a:4f:26:2c:
59:3c:18:a1:dd:3f:24:47:8d:7b:2b:68:dd:4a:1c:
d6:3a:cc:e4:e3:1e:c5:17:98:4a:4d:36:f4:37:f3:
b3:56:0e:89:56:75:09:a5:5b:cd:be:44:ab:5d:d7:
c4:49:8e:c6:09:c9:43:e0:bf:7b:7e:a8:84:93:80:
b4:f9:fd:d2:b2:14:56:66:62:52:e5:a6:25:37:14:
74:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4E:61:7D:06:F9:17:3F:D3:C4:D3:C9:02:9A:EE:56:79:D5:92:D8
X509v3 Authority Key Identifier:
keyid:6F:13:F5:51:00:9F:24:8A:6D:98:74:36:00:4E:85:79:51:56:92:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:8d:6a:3f:ec:ee:e4:87:e2:89:bd:38:a2:3f:2f:08:3b:c6:
f4:c8:b1:d1:3f:87:a9:83:13:9d:55:97:f1:f5:47:7c:31:fe:
95:f9:20:c3:26:1d:a2:ac:4c:c9:53:35:3f:47:5f:b1:ab:18:
9d:92:d9:f1:07:70:a4:87:c1:e0:76:2d:02:af:c3:29:8f:e5:
e0:11:e5:d0:15:ea:52:eb:a7:0a:ea:1e:46:5b:aa:20:02:d0:
59:d3:2c:a6:86:9e:5d:70:18:c9:a6:bf:05:29:17:c2:9e:d1:
eb:4b:0c:40:36:f0:4e:b5:bf:99:8b:2b:29:dd:f6:e3:3b:62:
cf:dc:fd:b0:36:ba:1d:b4:5d:e2:9e:55:57:1b:87:0d:01:a4:
08:6e:7c:0e:3d:f4:34:99:d9:41:72:3e:87:20:94:2b:b1:62:
33:15:ce:9f:3d:10:8b:71:15:6a:dc:a7:1a:94:f0:c4:6f:d1:
8e:c9:88:83:cf:87:17:3f:a4:99:f8:f4:01:46:20:aa:1b:f1:
d2:40:ea:88:99:2f:43:8e:32:db:04:8c:fd:3c:6a:06:34:e4:
d2:8c:a4:4c:36:b7:41:4d:2c:d3:0a:a1:af:3c:17:a3:56:0b:
e2:2c:3d:29:d0:d8:82:70:f5:84:98:97:64:5d:e3:63:b3:b0:
9f:a6:43:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:23:01 2026 by rpki-client