
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft
File: bKwrcgiF6COCTBln7fw2Psh0do0.mft (raw, json)
Hash identifier: t5B3kBJsSYjO79v3dxhPmUI6cBvlSLt5KyPcs/BDeoQ=
Subject key identifier: 3F:AE:90:41:00:76:FB:66:C4:24:5F:AA:D3:3A:B2:29:47:55:FE:59
Authority key identifier: 6C:AC:2B:72:08:85:E8:23:82:4C:19:67:ED:FC:36:3E:C8:74:76:8D
Certificate issuer: /CN=A91D5BA2/serialNumber=6CAC2B720885E823824C1967EDFC363EC874768D
Certificate serial: 0537
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft
Manifest number: 0530
Signing time: Tue 18 Aug 2026 23:54:03 +0000
Manifest this update: Tue 18 Aug 2026 23:54:02 +0000
Manifest next update: Tue 25 Aug 2026 23:54:02 +0000
Files and hashes: 1: bKwrcgiF6COCTBln7fw2Psh0do0.crl (hash: 0WDK8DtyzO3qeIa17nEscxlCw+FGP4tmThYeAiwTYn0=)
2: AA5ADA7C579511ECA9BDE14AC4F9AE02.roa (hash: +cG95cMT4bOP7gonlzVBmEDm9qPAdHE8HAO4W9Qjhh4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.crl
rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1335 (0x537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5BA2, serialNumber=6CAC2B720885E823824C1967EDFC363EC874768D
Validity
Not Before: Aug 18 23:54:02 2026 GMT
Not After : Aug 25 23:54:02 2026 GMT
Subject: CN=6a84f09b-e1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:f2:a8:e0:22:1c:00:4a:af:4f:a8:b8:fa:
5e:75:8b:ef:68:7c:18:f5:7d:bd:87:25:7d:4e:79:
2a:d2:07:6b:f1:ae:a9:da:28:aa:ad:6b:e7:7d:98:
8e:eb:42:6f:ae:ae:6b:d0:99:fa:a1:a2:1e:ef:d7:
86:55:8d:c8:ba:a0:6f:b2:0b:56:83:13:0d:93:ea:
59:91:c3:95:b4:1d:3e:95:26:0f:25:35:b1:99:53:
d9:2d:46:37:30:10:df:7e:af:53:86:44:69:30:58:
15:ff:2b:fe:c8:e5:ec:6c:56:32:ad:dd:17:19:a5:
11:09:48:68:22:d1:49:07:98:9c:92:74:93:50:d5:
1e:d2:14:8b:cc:3c:6d:f0:96:81:44:eb:25:d8:0e:
2c:7f:cf:2a:ec:c0:6e:b2:e7:3e:cf:8e:78:68:9d:
f9:54:9f:0a:44:63:04:15:86:3a:a3:a4:11:3d:6c:
b3:4c:61:78:e3:a4:54:4a:9d:f1:28:10:ab:c9:96:
b3:f7:24:17:af:6d:b0:4b:9e:0c:6a:69:1f:86:a6:
99:9c:c6:a6:88:dc:08:dc:3a:19:1f:b8:00:65:c8:
7e:d9:72:2b:11:6c:aa:6b:28:09:7f:4a:1b:fd:7e:
25:10:53:e5:44:48:be:12:e0:f5:ce:56:62:1b:66:
13:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AE:90:41:00:76:FB:66:C4:24:5F:AA:D3:3A:B2:29:47:55:FE:59
X509v3 Authority Key Identifier:
keyid:6C:AC:2B:72:08:85:E8:23:82:4C:19:67:ED:FC:36:3E:C8:74:76:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:41:5f:13:09:ec:b8:6a:de:9c:b1:2a:b6:b5:79:f6:d3:7c:
57:05:c0:5a:20:e1:37:c9:ec:4e:9b:7c:d9:38:c2:fd:10:be:
73:ab:18:37:b8:de:0e:6c:f0:19:7d:74:d1:82:f7:f7:2d:30:
5e:4c:78:90:2d:31:1d:af:3e:b6:1f:4d:9e:7d:c4:a8:4d:71:
4d:33:67:5b:b4:91:04:f0:dd:94:6d:66:0f:97:af:65:db:d6:
ea:9a:cb:12:56:79:6c:da:47:71:3f:95:81:02:cc:e7:5e:d7:
3b:4f:b4:e8:85:b3:86:f7:bd:b0:a2:ae:82:d7:05:3d:91:10:
ad:5f:e6:fb:63:fc:8b:2f:68:9f:b2:15:35:ba:14:96:71:78:
a3:95:87:78:ea:39:52:16:ba:58:b4:1c:4c:1a:ef:f4:bf:28:
9d:f3:de:8f:f6:3a:bc:f5:81:68:67:ce:87:7b:cd:c1:9e:de:
a6:87:30:9f:5e:da:56:9e:22:6b:34:ea:c3:d8:18:84:7b:79:
fa:61:c7:82:68:ac:f7:e8:b7:7a:36:b7:5c:de:99:5d:c8:3d:
c7:be:72:44:ca:82:60:f6:67:5e:00:09:2f:df:e2:11:63:71:
66:bd:9e:04:88:35:d8:88:6f:7f:f8:e0:d3:e5:42:fe:68:4f:
ff:3a:a8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:43:26 2026 by rpki-client