
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
File: BKfrBJqTf9nyuG4Vnd310sma1B4.mft (raw, json)
Hash identifier: f3VRuOOKiJbQxDK7U5iOJGzdPkHgnhyeRqPXPOZD6H4=
Subject key identifier: 15:EE:2C:74:47:A6:96:6C:8E:C7:5C:CC:B0:09:6E:86:AA:26:37:8A
Authority key identifier: 04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E
Certificate issuer: /CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E
Certificate serial: 05C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
Manifest number: 05BE
Signing time: Mon 22 Jun 2026 23:10:14 +0000
Manifest this update: Mon 22 Jun 2026 23:10:14 +0000
Manifest next update: Mon 29 Jun 2026 23:10:14 +0000
Files and hashes: 1: BKfrBJqTf9nyuG4Vnd310sma1B4.crl (hash: tI4dfCEwwpYyHpWNQB2TTYzqMFvNiYhZ3j/yYsldz0A=)
2: 709F3B2E145C11EC9A902165C4F9AE02.roa (hash: SmXQ1SFMrsEIIaY56t+M+nddsnk+Z8U9mmLAhEWuQV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl
rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 23:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1479 (0x5c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E87AB, serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E
Validity
Not Before: Jun 22 23:10:14 2026 GMT
Not After : Jun 29 23:10:14 2026 GMT
Subject: CN=6a39c0d6-da89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:b8:89:94:2c:1e:31:97:44:a4:9f:b8:50:
49:14:63:f4:1b:7a:e4:7f:a5:5b:22:92:54:91:17:
a1:23:ac:03:56:c6:08:9a:0a:82:60:24:57:1d:0b:
5a:22:dc:f9:95:59:a3:b7:fe:71:c2:c2:ac:9c:f7:
d4:9a:16:5f:ed:e1:3d:b2:7c:34:15:2f:82:47:fc:
04:2e:b4:1e:0b:88:fc:e4:51:95:d6:49:9a:17:50:
dc:5f:24:76:58:5a:fb:a7:98:63:2e:27:e6:52:d3:
c9:72:7a:c4:4d:ff:64:87:56:41:a2:44:bc:73:9d:
88:d9:67:4a:ba:d7:5e:dd:ad:64:65:6a:c2:8e:34:
da:0a:f4:cf:3f:6d:71:aa:74:7a:5b:4b:91:a2:53:
54:2e:5f:4a:c3:40:6d:82:46:9f:e7:c3:1d:88:10:
d3:ba:ef:39:0a:54:c6:0b:21:66:b1:58:4f:52:1e:
d2:38:d3:d3:13:8d:4d:5a:33:c3:bd:35:b9:c5:d7:
af:ab:7e:13:99:ee:05:72:21:1f:31:03:63:ab:5f:
fa:b4:c1:81:70:d5:84:9b:8f:c8:a2:16:d5:87:cb:
ee:57:eb:a8:3f:99:4c:64:4f:29:e1:62:81:5a:3f:
4b:76:91:9b:78:41:0e:bd:7c:fb:42:1f:7d:1c:e6:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EE:2C:74:47:A6:96:6C:8E:C7:5C:CC:B0:09:6E:86:AA:26:37:8A
X509v3 Authority Key Identifier:
keyid:04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:0d:9c:1e:bd:05:aa:71:a8:db:c4:de:40:c7:82:fc:f0:5e:
bb:21:c2:16:a7:01:8c:bd:2d:2f:00:11:dc:91:45:80:cd:4b:
24:37:9c:85:e7:81:d5:c0:f0:a1:11:1d:d5:af:c2:1e:77:9d:
cf:fa:ad:02:e4:4d:0c:6f:46:6b:11:03:86:a4:cf:79:e5:ee:
54:d5:07:0a:7e:68:1e:bd:bb:c2:df:15:a9:c9:3f:68:a1:91:
be:6f:1f:e6:1a:d1:de:e5:f5:7f:20:57:5c:90:14:bb:7b:ef:
b1:04:27:78:95:75:a0:5c:6b:63:4a:44:c6:ba:73:78:2d:60:
2a:3f:45:6f:3b:3c:ce:68:09:50:98:37:11:25:a9:71:16:99:
19:45:a5:8f:b4:6d:cd:22:f7:25:b0:13:f8:82:53:7a:58:79:
9e:17:98:9a:4c:fd:94:b6:95:a3:62:4b:63:88:17:18:30:57:
aa:0e:a8:cd:06:c2:95:69:db:76:f3:7c:33:ab:2d:d7:9b:bf:
ad:67:60:5c:3c:76:be:af:29:6b:19:2a:5c:be:e6:ce:03:c5:
ee:42:81:21:eb:75:ef:b0:fd:f9:71:6e:7a:99:58:d7:4f:11:
50:c2:84:d5:54:8e:18:17:88:b4:43:0d:c1:9a:a6:dc:b6:44:
8d:5e:b4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:35:54 2026 by rpki-client