
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
File: bV1Q6IudZeiv2ijCzqYVAScDhgg.mft (raw, json)
Hash identifier: o2zUuhiWmlU78fJYtADAmMzSS9ffnKJRHYAZS9OB6Co=
Subject key identifier: 13:26:A7:60:38:F7:DE:8B:A8:FC:8D:4E:6F:5A:A9:6A:03:CC:F5:9A
Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Certificate serial: 0482
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
Manifest number: 0430
Signing time: Sun 01 Nov 2026 00:55:50 +0000
Manifest this update: Sun 01 Nov 2026 00:55:49 +0000
Manifest next update: Sun 08 Nov 2026 00:55:49 +0000
Files and hashes: 1: bV1Q6IudZeiv2ijCzqYVAScDhgg.crl (hash: L0kjgulqubSjnfCjM2e/SKnWNqlE41mpesxG77YGlSo=)
2: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (hash: KWwLcsIz3UJKjvUCs3DEDEtcqp2xPeUKe9HlYY14quE=)
3: 142EA3A84FEF11EF9A822A21C4F9AE02.roa (hash: KjilyBL3RkYX6RyTPh0LVomatbLGRkslOoDZ+BR2akg=)
4: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (hash: eZJA66PJdMy/+qYF1nUq/tXydh+IHu4vCtbvKU5tlLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Nov 2026 00:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1154 (0x482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Validity
Not Before: Nov 1 00:55:49 2026 GMT
Not After : Nov 8 00:55:49 2026 GMT
Subject: CN=6ae68e16-5e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:52:41:49:bb:df:a7:52:20:59:7b:23:4a:
a6:07:19:76:5e:4e:c0:41:b0:fd:be:1a:4b:9d:bc:
a7:50:e0:14:f8:cb:43:05:1d:5a:82:66:6b:04:66:
ff:ff:0c:f0:93:f5:2b:9e:29:4f:7f:bd:91:35:00:
5b:84:80:5e:a4:15:6e:83:71:ea:b5:34:10:11:04:
93:7c:a1:1d:bc:80:8f:05:cd:f9:f7:c2:1f:b3:8d:
e5:44:13:c3:65:3b:c3:c2:ff:ea:f4:5e:1c:ec:bc:
fe:13:ff:31:72:4a:f6:86:ac:7e:97:b7:ce:68:1a:
a7:16:fc:a4:df:2b:a1:87:a2:e5:3d:ca:08:b7:37:
9f:da:1b:1d:07:92:81:d5:5c:c2:c2:fe:58:83:3f:
2b:9a:ca:f9:47:5c:a1:eb:ff:eb:60:21:ce:fe:86:
f6:19:78:6e:c5:5b:08:21:bf:e3:a0:99:3d:1e:04:
e5:e3:3a:5b:01:88:e7:e8:43:16:3b:55:02:82:fa:
e7:83:79:ac:e4:aa:45:ad:6f:3a:84:35:eb:f0:60:
f8:f5:98:2f:41:6e:2d:6f:8e:40:85:1d:f9:ea:a0:
58:36:11:6e:db:92:fb:aa:02:9a:0c:b6:79:32:a8:
34:c8:b9:9f:16:f2:64:ee:26:f9:60:ab:e6:f5:ba:
f4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:26:A7:60:38:F7:DE:8B:A8:FC:8D:4E:6F:5A:A9:6A:03:CC:F5:9A
X509v3 Authority Key Identifier:
keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e0:a6:69:43:e2:8c:28:60:89:c7:37:4f:13:e0:66:ff:29:
6f:05:f2:dc:c4:4c:2e:5a:61:c0:40:77:c2:74:b4:03:47:90:
2e:65:2b:2b:c0:41:0a:c8:4f:88:de:8d:a4:b9:20:a2:78:75:
0f:e2:2b:d2:3c:7f:c5:c9:6f:fd:49:42:12:ee:33:c7:7d:bf:
22:d5:79:24:78:08:b9:71:31:d6:76:46:cd:2e:c1:84:ef:f2:
fa:cd:cf:c3:7c:a1:6e:1c:c0:d7:a0:0f:ea:d1:23:e0:d5:17:
05:9a:89:f6:e4:a0:24:69:93:a1:2e:3e:34:97:d6:ba:ce:71:
50:91:1d:9e:6d:bb:ba:25:cf:e3:6c:32:95:bb:62:6c:da:ac:
41:ed:e0:89:72:4e:e7:9b:bd:fb:f7:c1:3c:7e:57:28:16:9b:
73:d1:30:37:c1:af:41:04:c2:86:37:10:69:b2:3e:dc:c4:ac:
44:d7:1d:c8:33:4f:96:02:d0:19:3d:f1:34:53:86:cd:60:ac:
35:d9:e0:30:33:61:8d:e3:2d:21:8d:16:1e:47:58:dc:dc:e6:
e5:33:a1:46:3a:2a:5f:0c:d7:18:e0:12:11:e6:9e:9c:1a:b3:
04:08:51:c9:eb:66:36:98:13:51:08:f5:b9:fd:64:90:7c:d8:
d6:48:d2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 18:53:39 2026 by rpki-client