
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
File: BKfrBJqTf9nyuG4Vnd310sma1B4.mft (raw, json)
Hash identifier: O6rUAuKpzDcZnP1SaoKgtiYXh7+APnOY4UMO1smWsEM=
Subject key identifier: 5C:3B:48:DB:92:30:A3:24:AF:6A:87:1B:87:72:A0:24:69:9D:D3:C3
Authority key identifier: 04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E
Certificate issuer: /CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E
Certificate serial: 05E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
Manifest number: 05DB
Signing time: Tue 18 Aug 2026 23:22:18 +0000
Manifest this update: Tue 18 Aug 2026 23:22:17 +0000
Manifest next update: Tue 25 Aug 2026 23:22:17 +0000
Files and hashes: 1: BKfrBJqTf9nyuG4Vnd310sma1B4.crl (hash: JuHrOoHN5O2I/4170WnIDekEGQdoKGTi6zWgIB7MonE=)
2: 709F3B2E145C11EC9A902165C4F9AE02.roa (hash: SmXQ1SFMrsEIIaY56t+M+nddsnk+Z8U9mmLAhEWuQV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl
rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1508 (0x5e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E87AB, serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E
Validity
Not Before: Aug 18 23:22:17 2026 GMT
Not After : Aug 25 23:22:17 2026 GMT
Subject: CN=6a84e929-7c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:6f:5d:e1:12:6b:a0:51:72:7f:23:47:19:
ec:9d:22:af:a5:fc:05:7c:0a:71:f6:25:85:05:40:
1d:af:09:8c:a3:cb:e2:14:47:13:c6:ee:1a:02:4e:
cf:db:1f:3b:57:6f:9d:41:bc:ec:d4:f0:79:c3:06:
90:36:89:73:1b:33:6e:ad:a3:2f:78:da:b3:36:04:
09:44:c4:64:49:c3:0c:dc:32:1c:c2:51:d3:6e:7c:
e3:13:e9:eb:13:1a:32:e3:40:d3:cd:f0:aa:b2:b3:
1b:b0:12:63:ab:cb:4c:20:1b:09:60:02:4f:cd:6e:
ae:c2:6b:ef:87:f6:69:ae:c6:03:66:b9:a0:c3:d1:
9a:b9:9e:88:b2:a5:ce:1c:89:4e:07:da:76:bb:46:
17:1e:79:26:68:87:45:7f:aa:4a:a6:1d:d8:f7:de:
be:c6:c3:f8:e2:63:6f:b1:9e:4e:6e:fe:98:86:d8:
5f:0b:10:70:16:9e:f9:69:40:70:db:90:05:60:ed:
ce:e4:2b:89:95:0b:2d:b9:12:7a:91:12:6a:4d:35:
56:c5:b4:43:48:74:2c:33:05:02:cb:83:d5:b8:b2:
3b:c3:77:55:43:b8:5f:f5:98:9c:21:31:80:c4:a3:
db:d3:c0:b1:9d:56:b0:f9:e1:ef:48:51:ea:eb:6b:
11:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3B:48:DB:92:30:A3:24:AF:6A:87:1B:87:72:A0:24:69:9D:D3:C3
X509v3 Authority Key Identifier:
keyid:04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:85:57:e6:c3:cf:3d:56:13:6b:d0:db:cf:4b:43:31:f0:ed:
f5:3f:0f:fb:62:6e:49:64:df:67:74:7b:d1:a9:1e:d9:29:dd:
9e:bc:3d:f3:54:b0:39:1e:45:d4:52:61:f8:6c:3f:68:f4:93:
83:92:5b:a6:7f:84:fb:64:19:74:eb:1d:2b:33:10:4f:f7:66:
da:a3:02:e6:e0:78:73:3e:7f:f1:87:d3:47:08:b2:39:60:7f:
7a:99:e5:3e:a6:4d:f2:63:45:ad:87:97:35:c2:53:56:60:62:
bc:8b:cb:22:e0:f9:12:95:31:15:16:53:86:ac:81:f5:b4:47:
40:07:96:04:83:2a:2b:4f:9d:cd:7c:27:ba:e4:35:7c:b0:ad:
80:33:9a:51:65:ac:f5:87:0f:11:b1:66:b1:dc:57:66:81:a0:
42:77:90:02:18:69:d2:80:a1:17:07:c2:6b:6c:ad:c1:12:3f:
63:e8:fc:44:5b:5e:8c:04:1e:b9:cf:5c:8f:c6:84:39:80:68:
18:19:e7:0d:80:7d:c2:46:87:78:6b:12:db:5e:17:be:e3:62:
de:3c:7f:56:69:76:90:d9:1a:a0:cd:46:6a:e8:96:a5:b5:2c:
60:89:4a:a2:52:c6:b6:9c:f6:1f:d0:b6:6b:20:dc:a3:da:8c:
f5:f9:70:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:33:12 2026 by rpki-client