
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
File: BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft (raw, json)
Hash identifier: il59sfGU4Do2sMBA2g1i5tqOLJmAhBZo6uylvFWSYZE=
Subject key identifier: 79:89:FE:E8:CA:A9:DC:2E:87:1F:FE:B9:20:1F:DF:D5:5D:4C:42:88
Authority key identifier: 06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
Certificate issuer: /CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Certificate serial: 179A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
Manifest number: 177E
Signing time: Wed 14 Oct 2026 16:38:44 +0000
Manifest this update: Wed 14 Oct 2026 16:38:44 +0000
Manifest next update: Wed 21 Oct 2026 16:38:44 +0000
Files and hashes: 1: BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl (hash: eGGiiuXV+n0araxSejGFcFaF60MpbF5J6sJRM3zAsjs=)
2: 091435C84FA911EFB86F4D40C4F9AE02.roa (hash: CJNG/K8L9+DgV5sR3qhRIaI7DfSSiBEZ1i4T4JpMdyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl
rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 16:38:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6042 (0x179a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CE8, serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Validity
Not Before: Oct 14 16:38:44 2026 GMT
Not After : Oct 21 16:38:44 2026 GMT
Subject: CN=6acfb014-b541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0e:4b:45:c0:ab:06:9d:21:e5:17:51:96:63:
aa:de:bd:11:f6:b0:86:30:a0:82:94:a1:4e:f6:df:
71:ea:60:2d:35:ab:a6:e1:17:46:91:7d:92:71:7a:
14:a5:50:31:aa:c6:5e:b4:88:9f:07:4f:dc:34:13:
38:29:6c:e6:c6:ca:b6:39:68:be:69:44:57:71:4c:
88:64:72:5e:81:e9:04:6f:3a:17:02:65:96:55:17:
97:20:af:3b:b6:ac:6d:be:37:a5:9c:4e:aa:0e:f6:
1a:b9:33:ca:3a:d3:77:dd:35:b2:b0:b9:1b:72:c8:
f7:25:37:81:52:75:df:29:85:e1:17:db:2f:c5:93:
fc:3a:e4:dc:5f:86:c4:3b:95:e6:17:b4:d4:81:ab:
7a:d6:a2:04:45:fb:b0:26:b4:54:de:9a:b2:f0:c5:
50:a9:75:8c:f0:97:d9:22:f9:8c:13:a4:91:2b:0b:
b4:88:c1:bb:d3:eb:16:9c:22:e5:ec:ba:fe:f3:2b:
1e:56:4d:9b:32:49:fc:a8:fd:38:9a:51:d3:37:12:
7c:5f:ca:c2:d7:36:c2:aa:fd:b2:d1:3b:5c:f2:ac:
e6:90:0f:5f:5d:af:df:bd:43:93:b0:44:13:32:78:
85:67:7d:65:d2:5e:09:3a:9f:a7:11:94:94:5b:54:
7d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:89:FE:E8:CA:A9:DC:2E:87:1F:FE:B9:20:1F:DF:D5:5D:4C:42:88
X509v3 Authority Key Identifier:
keyid:06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:fd:03:cf:79:9a:67:bf:15:2f:89:81:74:cc:81:ef:8d:a7:
20:5e:c8:ca:9d:f2:f3:9f:ba:fc:04:6c:fd:ea:d5:46:37:5f:
a7:74:35:e1:01:f8:70:40:91:94:52:9d:b2:e7:a4:cd:3c:20:
75:f5:2f:ae:80:85:e9:ef:36:86:84:73:0d:f8:78:44:fe:bf:
0c:a5:91:44:2e:d4:d9:40:d9:2e:ec:53:f9:ee:d7:80:68:40:
79:23:01:ea:3c:e4:37:dc:e7:fb:0e:da:03:76:f6:c4:18:95:
89:a6:e8:94:ae:33:f9:a5:ee:e3:99:b3:57:cd:23:5e:64:fc:
45:57:04:11:84:54:57:d6:4b:fe:1a:d9:ef:c0:9f:86:0c:57:
00:36:db:fa:84:0c:1b:83:53:45:8f:9c:28:f0:d8:6b:7b:90:
96:2e:5d:94:00:23:60:c7:1e:86:f4:cf:b9:df:30:28:7b:6e:
c0:ff:b4:e2:c0:34:32:27:44:02:be:c1:40:98:e9:15:82:80:
1d:10:e0:51:cd:a8:5a:3a:87:3b:04:b5:18:8a:ed:b1:4d:76:
47:77:d7:0b:6b:9f:39:12:66:45:2a:d4:d5:95:52:37:22:10:
f1:51:b4:56:27:38:44:ad:5e:b8:5b:05:f3:18:9d:3e:b4:43:
39:53:79:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:08:41 2026 by rpki-client