
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
File: BstI9X1UOpeC2KfJbaTh3tvDwws.mft (raw, json)
Hash identifier: eOj2O/cmzEUk4Q1wCkJw8FXrIXs12SLxDCX7H4B8esg=
Subject key identifier: 2B:DA:A2:98:7E:7F:D0:69:45:62:FC:2B:C7:C7:35:06:20:B0:F9:7E
Authority key identifier: 06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B
Certificate issuer: /CN=A91E2EFF/serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
Manifest number: 0102
Signing time: Mon 19 Oct 2026 06:52:55 +0000
Manifest this update: Mon 19 Oct 2026 06:52:55 +0000
Manifest next update: Mon 26 Oct 2026 06:52:55 +0000
Files and hashes: 1: BstI9X1UOpeC2KfJbaTh3tvDwws.crl (hash: Qo1z2ap6ROtCO/ZIF3bP+MAfyNfrq8oo35tKT6QdQEY=)
2: 7B744F9C754311F1B2D369B17FA30FBC.roa (hash: 6h+dViv9HHF043rn54yjzvjKc8Qv6o5bk2lEUKwA0u0=)
3: 6BB1AB46753D11F192ADDCCA7EA30FBC.roa (hash: 54hEOegvqKHFu2sFkesEF7BLwvXcxGU9hQJpTA8Y7Js=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.crl
rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 06:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2EFF, serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B
Validity
Not Before: Oct 19 06:52:55 2026 GMT
Not After : Oct 26 06:52:55 2026 GMT
Subject: CN=6ad5be47-ca94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dc:98:47:c6:81:a0:e8:c2:5b:30:8d:4f:48:
97:9b:c4:c3:a6:74:fc:94:62:1e:fa:b7:3b:3e:5f:
fc:c0:32:a3:ab:34:ef:1f:c1:73:54:42:bc:c6:c5:
dc:71:8d:e3:e7:cf:37:b6:0b:b2:09:55:be:38:95:
26:72:51:92:55:9d:e8:ee:16:6e:84:fd:7e:37:59:
10:5a:97:b2:0c:5c:bf:2c:82:94:e4:5c:b0:84:ac:
ef:76:98:58:f7:97:66:e0:35:cc:3a:2c:d9:f1:a4:
d7:a4:ef:96:fd:a7:95:4f:91:2d:75:09:31:6b:b9:
42:b2:03:8e:a7:14:4c:31:9b:2a:9e:2a:c8:ee:12:
39:70:b1:dd:6c:85:7a:e7:32:9c:fb:95:a0:91:9c:
ba:d2:a0:c4:59:66:e8:fb:0b:dd:eb:81:d5:f7:b5:
87:de:c7:b6:f8:0e:ae:f1:ac:11:e9:2b:8d:94:5f:
8d:39:b7:94:e3:42:2f:6c:6e:3d:28:f1:b7:42:db:
89:e5:e7:0e:ab:f6:2d:f9:73:b9:ea:1b:99:4d:e5:
9c:c2:f4:51:c8:93:2f:ba:e2:f2:52:9f:50:39:8d:
72:c2:fe:dc:81:b9:6c:d3:01:d7:23:97:1d:ba:61:
60:46:c2:0c:9a:59:a9:e5:dd:e5:f2:9c:a6:3b:40:
e8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DA:A2:98:7E:7F:D0:69:45:62:FC:2B:C7:C7:35:06:20:B0:F9:7E
X509v3 Authority Key Identifier:
keyid:06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:2e:e6:fd:5a:8e:59:d7:e1:ea:e1:66:a6:e0:89:95:25:93:
c2:28:67:aa:c8:41:a4:a5:41:c7:f1:01:55:73:b7:06:32:ba:
84:c2:88:6a:99:29:99:6b:16:37:31:b6:29:b4:36:3e:b0:22:
8d:2a:13:95:d8:e2:51:23:09:65:3d:95:d0:12:0a:45:6a:1c:
8f:07:73:f4:06:5f:25:c6:98:06:b3:26:a3:6c:f4:8d:e0:51:
35:98:fa:9a:96:07:9d:d6:09:d1:7e:e4:ff:ca:87:3d:44:42:
71:1b:06:d4:11:81:94:87:18:a1:5f:d5:d1:4a:3c:b6:0c:5b:
b3:84:d1:9d:29:92:42:8a:c4:1f:71:cf:f5:cb:84:bc:b0:64:
38:d1:8f:82:7c:43:94:09:b5:f5:f3:d4:35:30:98:cc:ae:f2:
3e:21:9f:91:f3:eb:10:61:3c:a2:0b:6e:96:8d:f1:ab:ac:29:
4c:e6:ed:e8:74:5d:23:f0:c9:d6:11:fd:70:90:47:81:2e:27:
04:21:6c:2d:78:4e:ee:8f:24:80:e1:f5:3e:b3:dd:42:b7:b5:
d6:8a:e9:59:53:f6:38:a4:b1:59:23:3a:63:53:95:f4:f9:f9:
13:59:53:f9:07:f1:9a:e2:8d:c6:0d:e1:93:2f:26:40:ec:e1:
fb:a5:b4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:04:57 2026 by rpki-client