
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
File: bicEPDr0D8Xll5OLFU9ci-D9_2w.mft (raw, json)
Hash identifier: B/HCVtDkDO/D88UE2njVkY/fFKbVpAFvqRVuiUolsyc=
Subject key identifier: 7B:3C:9A:FD:DC:D6:99:1B:C5:8E:B0:28:45:63:CB:1C:03:BD:13:77
Authority key identifier: 6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C
Certificate issuer: /CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C
Certificate serial: 0854
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
Manifest number: 088D
Signing time: Sat 10 Oct 2026 21:07:47 +0000
Manifest this update: Sat 10 Oct 2026 21:07:46 +0000
Manifest next update: Sat 17 Oct 2026 21:07:46 +0000
Files and hashes: 1: bicEPDr0D8Xll5OLFU9ci-D9_2w.crl (hash: xmESV2Lp/1EcfZNd0z4pleIi3PZ1TSIV82vhl8qaTtY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl
rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 21:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2132 (0x854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E01F7, serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C
Validity
Not Before: Oct 10 21:07:46 2026 GMT
Not After : Oct 17 21:07:46 2026 GMT
Subject: CN=6acaa923-1dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:02:9c:69:99:c0:89:78:60:0c:50:07:4d:
15:95:ed:23:3a:76:39:aa:db:e9:a9:0a:ec:3c:4f:
1e:55:c9:f7:be:19:9d:22:0a:a0:70:b0:d5:06:4d:
bf:0f:0d:50:3f:14:9d:6b:82:c3:c5:0f:28:57:99:
78:62:7b:2f:76:bb:7f:ca:c5:ac:b8:89:fa:18:12:
5d:0e:28:87:3f:78:36:18:3e:99:22:57:2f:78:1e:
75:31:38:8c:28:5c:a2:84:d5:2c:0f:d2:b7:78:7e:
41:cf:88:2d:ff:dd:a0:b6:fc:a1:b9:1f:a3:89:6d:
6c:89:dc:aa:4e:ac:5f:ae:a8:6e:01:68:85:8e:ad:
19:17:b1:e0:30:6f:74:95:2f:22:73:61:fa:c6:e4:
9e:2f:ed:7b:51:69:5d:d6:ce:27:c2:c4:50:a5:95:
d2:c6:fe:00:aa:42:3b:25:5e:91:1b:11:5b:27:5e:
4e:68:47:a4:2c:57:eb:a5:6c:89:34:b2:e8:99:1a:
68:e6:53:e9:ac:51:c4:4c:a3:9f:92:ab:a8:b2:33:
fa:22:f5:6c:47:dc:de:be:3d:56:09:4c:a4:cf:b9:
15:39:3f:d7:0b:b2:e6:5d:33:f0:eb:c4:94:c3:21:
e0:f0:63:fe:e1:64:ba:2f:8c:d6:f8:d4:10:bb:08:
71:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3C:9A:FD:DC:D6:99:1B:C5:8E:B0:28:45:63:CB:1C:03:BD:13:77
X509v3 Authority Key Identifier:
keyid:6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:7f:19:64:9b:96:9b:e9:9d:b6:be:ab:bd:cc:11:e2:90:23:
5c:a3:39:a4:4d:34:be:f8:67:b6:05:ac:29:fa:0f:c4:28:d5:
50:0c:3e:c2:50:d7:de:f3:75:02:18:66:eb:97:ee:8e:85:4a:
10:4b:44:89:98:fe:12:d4:10:6f:49:9f:ce:dc:b2:8a:f5:b0:
0c:59:54:2c:4e:9a:6a:1c:60:87:d9:a0:68:b1:9e:3e:a7:58:
81:18:7b:26:1e:3f:6e:d2:2b:3b:a4:b1:1e:9c:c0:d2:79:79:
49:b0:45:84:1b:29:86:02:6f:d0:ce:b6:1b:80:56:60:37:0e:
54:f3:28:85:ac:57:b3:ce:1c:8c:d3:e4:cf:35:e7:80:fa:f3:
8c:31:55:aa:55:7c:26:29:b2:2b:ba:4f:ca:05:0a:64:10:4e:
8e:a7:f4:c2:99:bb:ab:df:9a:24:b3:d8:d3:f6:68:19:9a:69:
36:55:af:33:88:2f:b0:d6:bb:de:ec:aa:71:15:eb:1e:d2:e0:
ce:ce:cf:e5:5a:32:5f:30:69:fc:fa:24:74:d2:8b:fb:7a:ce:
2d:d4:7b:ee:cb:2e:c6:ca:f2:eb:df:66:90:39:fd:81:0f:82:
bf:4b:12:99:fc:78:5a:3a:ae:5a:0b:f1:4d:55:bd:11:d9:55:
a2:57:87:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:32:21 2026 by rpki-client