
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
File: bCTOJGStN3HjLDMIGNG32gFMaQk.mft (raw, json)
Hash identifier: 26YmOXo43G92x5x0r1QIZ8+MWuexNWmch1EI2dces90=
Subject key identifier: 74:ED:1C:B8:F4:A5:CA:73:DE:A5:DD:D0:E3:2F:1C:A8:D5:62:90:22
Authority key identifier: 6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09
Certificate issuer: /CN=A91DC84C/serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909
Certificate serial: 01B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
Manifest number: 01B2
Signing time: Thu 21 May 2026 04:03:21 +0000
Manifest this update: Thu 21 May 2026 04:03:21 +0000
Manifest next update: Thu 28 May 2026 04:03:21 +0000
Files and hashes: 1: bCTOJGStN3HjLDMIGNG32gFMaQk.crl (hash: uyx/yXP+b8TF+yTsqQJpcupElBkTR2kA8jBO+ka0UK8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl
rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC84C, serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909
Validity
Not Before: May 21 04:03:21 2026 GMT
Not After : May 28 04:03:21 2026 GMT
Subject: CN=6a0e8409-7df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b0:5b:bc:ca:9d:88:ca:3a:1f:a4:c4:19:c2:
0c:13:b0:d0:f8:8d:c4:9b:bc:87:61:e0:dd:b8:5c:
c5:e4:57:64:4b:18:9f:fd:df:e0:0e:44:a8:a4:34:
00:f0:bc:7b:c6:48:99:e6:bb:75:4b:1a:6c:a3:8c:
ff:62:24:4c:5d:33:c7:33:9f:9a:73:9c:de:10:21:
a3:fd:62:41:5f:73:fa:8b:36:4c:1e:5e:e0:fe:f1:
5a:da:b1:dd:d6:d6:a6:69:dc:2b:30:aa:13:61:08:
8a:bf:96:02:3b:6b:df:9f:a6:b9:7d:65:49:d5:5a:
97:9f:47:ad:2b:56:90:bc:e7:9b:66:5d:94:40:49:
61:a9:f8:6d:8b:c8:3e:db:c0:fe:69:2f:31:f3:d1:
06:99:42:4a:8c:c3:ba:8f:74:e3:eb:cb:94:77:40:
de:c1:07:3a:56:a4:7c:85:51:6b:f9:91:b0:6d:e9:
b2:de:70:20:07:be:54:e8:fe:f3:a3:55:21:39:f4:
08:a9:74:7e:7e:82:9f:a5:b3:9f:c7:97:2c:d5:59:
0f:27:41:7e:69:97:97:9b:8b:66:f6:9e:18:79:a7:
32:e1:b3:5e:81:50:7f:cd:17:5a:09:db:74:65:04:
10:89:df:33:ba:76:a7:83:a3:7c:08:21:54:23:4e:
7e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:ED:1C:B8:F4:A5:CA:73:DE:A5:DD:D0:E3:2F:1C:A8:D5:62:90:22
X509v3 Authority Key Identifier:
keyid:6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:46:13:52:5c:d2:4e:db:4b:5d:00:82:15:18:f6:6d:6a:f1:
70:87:46:30:71:f8:19:f0:45:ca:f6:94:6a:ed:23:ee:c6:2c:
09:ec:98:d8:03:69:8b:70:e9:f0:f5:b3:39:2e:a1:ce:56:d6:
e0:c4:8a:06:0c:b8:9a:6f:28:2d:f6:86:2e:4a:a8:5f:0a:77:
07:3a:13:9a:54:4f:b9:1a:fb:75:53:59:27:3c:50:c9:68:7f:
07:dc:3b:94:84:e5:c6:06:f9:2e:5f:2e:34:b6:25:b3:7c:5e:
eb:cb:07:b2:0a:76:37:35:8c:90:03:49:14:bb:5e:08:cf:df:
5e:63:dc:3d:46:7a:6e:b9:66:78:9e:72:52:65:5d:34:14:c7:
ea:52:4e:56:aa:80:2e:58:2e:57:44:91:a8:87:a9:59:f6:47:
9a:f4:d9:7a:95:5c:64:95:f7:1f:55:c8:e5:5c:b5:17:7e:7d:
0c:8d:8e:ee:8d:e0:8a:54:b0:85:e6:a3:02:41:ed:97:70:b6:
b5:fd:18:15:4c:ae:8a:ef:43:f3:d9:e1:c7:cf:15:19:21:5a:
95:2a:e4:47:82:22:a2:3d:92:6c:6b:ab:b1:73:60:1b:c6:1c:
1b:9a:cf:d8:83:da:37:86:bc:1b:46:82:28:cb:51:e2:e2:34:
0f:e2:e3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:18 2026 by rpki-client