
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
File: bCTOJGStN3HjLDMIGNG32gFMaQk.mft (raw, json)
Hash identifier: qqQfNtTMKDO7dNfww3JvYy+uJ/ySbcRKK5oB6NEPwOI=
Subject key identifier: C7:54:CF:5B:DE:B1:9F:51:B0:ED:FF:52:D4:BB:EA:93:3B:99:C8:29
Authority key identifier: 6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09
Certificate issuer: /CN=A91DC84C/serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909
Certificate serial: 01F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
Manifest number: 01F6
Signing time: Sat 03 Oct 2026 03:56:03 +0000
Manifest this update: Sat 03 Oct 2026 03:56:03 +0000
Manifest next update: Sat 10 Oct 2026 03:56:03 +0000
Files and hashes: 1: bCTOJGStN3HjLDMIGNG32gFMaQk.crl (hash: prbxKITJkwryWROx6qJDEUNcq3EvsBsQAHygUIT3BsE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl
rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC84C, serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909
Validity
Not Before: Oct 3 03:56:03 2026 GMT
Not After : Oct 10 03:56:03 2026 GMT
Subject: CN=6ac07cd3-cbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:19:92:ec:3f:a3:8f:bd:85:ff:40:e7:c1:03:
3f:2a:ee:d4:6a:09:53:4d:4e:e0:25:9a:90:bd:09:
7e:95:49:5c:c9:98:79:03:d8:39:e8:22:12:b9:92:
55:6d:a6:30:8b:ba:c4:e7:7c:3e:12:1f:5b:95:28:
c8:67:a8:68:2b:fd:96:47:32:89:98:cc:93:d1:3b:
ec:62:6c:f3:3a:68:21:f4:2e:0d:63:45:3f:5c:e6:
db:2a:6e:7b:32:b3:2b:8a:64:9e:a9:23:e5:0e:97:
4c:df:c7:ed:21:06:20:08:c9:77:8e:ad:7f:48:09:
0d:58:1b:03:9e:ea:87:f1:da:f5:d0:5f:31:57:f1:
be:8d:ec:a6:e8:e0:8b:04:fd:43:a2:dc:f0:37:e2:
08:45:db:a1:c4:ef:c0:88:6d:cf:b6:e1:9c:28:ee:
23:8f:86:d7:cb:27:ef:1d:af:df:91:3f:ef:dd:6a:
a5:29:bf:6e:0a:1f:f5:bf:7a:ce:bc:5a:63:f3:e1:
1b:94:cf:af:9b:d1:87:4a:b2:45:ec:82:df:a3:4b:
68:47:4b:cd:9d:b7:1c:86:c4:89:e6:1f:9a:df:f1:
10:52:70:d1:67:5d:18:02:f4:05:89:87:01:19:ee:
da:ed:b5:d7:1e:d7:47:ab:4a:22:96:81:c8:59:30:
3a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:54:CF:5B:DE:B1:9F:51:B0:ED:FF:52:D4:BB:EA:93:3B:99:C8:29
X509v3 Authority Key Identifier:
keyid:6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:2c:bd:40:b4:9a:e7:c4:51:d0:80:ca:ca:e2:0c:d8:5c:a2:
8d:ff:ba:5a:c4:6a:c9:69:88:d5:03:a7:94:26:27:d5:05:ed:
86:b6:39:5d:b5:81:51:a8:84:ff:b0:ac:f6:ca:d7:e7:d6:c9:
03:66:b5:f6:83:f5:42:7a:48:29:c9:52:cf:c7:98:43:e3:4b:
50:54:fb:21:f4:d4:df:60:6b:5a:d5:57:d5:0e:38:bd:21:01:
09:53:d3:23:36:b9:c0:5d:38:6e:fd:47:ab:a4:06:04:0e:a0:
f4:58:b2:fd:aa:e9:d9:2f:91:39:ef:c9:e6:06:2b:ac:8a:14:
98:b2:80:6c:03:2d:9b:5d:95:58:19:91:3a:d4:9b:e9:85:17:
0b:56:b8:26:a8:8e:60:05:aa:a2:e7:40:f8:1c:38:29:73:1a:
2f:d2:dd:c6:e5:fc:13:d0:08:41:a4:d6:1e:94:89:d4:48:cc:
c4:89:16:79:a5:04:0d:53:33:12:1c:4e:9d:8a:f6:22:ef:d2:
27:7c:1c:fe:ae:7c:7e:0b:9d:76:42:13:75:c7:12:c9:74:7f:
07:36:59:05:28:9d:b6:21:6f:cb:a2:6b:aa:58:b0:77:a8:87:
3d:d9:f6:9f:ad:ac:f7:f8:71:e7:da:3e:1b:f0:79:11:d8:65:
95:1d:94:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REM4NEMxMTAvBgNVBAUTKDZDMjRDRTI0NjRBRDM3NzFFMzJDMzMwODE4RDFCN0RB
MDE0QzY5MDkwHhcNMjYxMDAzMDM1NjAzWhcNMjYxMDEwMDM1NjAzWjAYMRYwFAYD
VQQDEw02YWMwN2NkMy1jYmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAgxmS7D+jj72F/0DnwQM/Ku7UaglTTU7gJZqQvQl+lUlcyZh5A9g56CISuZJV
baYwi7rE53w+Eh9blSjIZ6hoK/2WRzKJmMyT0TvsYmzzOmgh9C4NY0U/XObbKm57
MrMrimSeqSPlDpdM38ftIQYgCMl3jq1/SAkNWBsDnuqH8dr10F8xV/G+jeym6OCL
BP1DotzwN+IIRduhxO/AiG3PtuGcKO4jj4bXyyfvHa/fkT/v3WqlKb9uCh/1v3rO
vFpj8+EblM+vm9GHSrJF7ILfo0toR0vNnbcchsSJ5h+a3/EQUnDRZ10YAvQFiYcB
Ge7a7bXXHtdHq0oiloHIWTA6VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMdUz1ve
sZ9RsO3/UtS76pM7mcgpMB8GA1UdIwQYMBaAFGwkziRkrTdx4ywzCBjRt9oBTGkJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg0Qy9GMzVCMzA1RUJG
MzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4zSGpMRE1JR05HMzJnRk1h
UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JDVE9KR1N0TjNIakxETUlHTkczMmdGTWFRay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Qzg0Qy9GMzVCMzA1RUJGMzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4z
SGpMRE1JR05HMzJnRk1hUWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxiy9QLSa58RR0IDKyuIM2Fyijf+6WsRqyWmI1QOnlCYn1QXthrY5XbWBUaiE
/7Cs9srX59bJA2a19oP1QnpIKclSz8eYQ+NLUFT7IfTU32BrWtVX1Q44vSEBCVPT
Iza5wF04bv1Hq6QGBA6g9Fiy/arp2S+ROe/J5gYrrIoUmLKAbAMtm12VWBmROtSb
6YUXC1a4JqiOYAWqoudA+Bw4KXMaL9LdxuX8E9AIQaTWHpSJ1EjMxIkWeaUEDVMz
EhxOnYr2Iu/SJ3wc/q58fguddkITdccSyXR/BzZZBSidtiFvy6Jrqliwd6iHPdn2
n62s9/hx59o+G/B5EdhllR2Uiw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:42:34 2026 by rpki-client