
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft
File: BNhIIeE7gDAzVMS-NDMdURHyvKY.mft (raw, json)
Hash identifier: X5jj2EPaVcsFSTHuxPj+y4MA8UgtE2MTJsjuVPVpjoA=
Subject key identifier: FD:ED:8F:3C:02:CD:D4:4E:9D:AD:F2:67:8D:A0:61:82:6E:C9:FB:4C
Authority key identifier: 04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6
Certificate issuer: /CN=A91F0721/serialNumber=04D84821E13B80303354C4BE34331D5111F2BCA6
Certificate serial: 02BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft
Manifest number: 02A9
Signing time: Sat 03 Oct 2026 02:06:38 +0000
Manifest this update: Sat 03 Oct 2026 02:06:37 +0000
Manifest next update: Sat 10 Oct 2026 02:06:37 +0000
Files and hashes: 1: BNhIIeE7gDAzVMS-NDMdURHyvKY.crl (hash: C6anW7WocE9XZ3qQiWDooDDT2GV3+YketWa+VNQvOdo=)
2: 7659B89AADCC11ED84051211C4F9AE02.roa (hash: eJa3zEY0Ga68FBEmFuzcrfb78XN2VTH6jOriLW6rBuc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.crl
rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 02:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699 (0x2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0721, serialNumber=04D84821E13B80303354C4BE34331D5111F2BCA6
Validity
Not Before: Oct 3 02:06:37 2026 GMT
Not After : Oct 10 02:06:37 2026 GMT
Subject: CN=6ac0632d-4c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c6:c8:67:20:95:8b:c7:01:57:1a:fb:6e:10:
bf:e7:0d:c8:32:53:31:f8:55:68:40:7a:c1:8d:94:
22:ac:ca:da:84:ec:6c:19:87:64:d3:3a:f0:d3:17:
b8:84:d2:1c:f5:cc:78:a9:4f:d1:87:03:b3:27:35:
aa:4e:9e:b7:76:5f:cf:a7:b5:67:9b:a7:53:77:52:
65:af:5e:3b:e7:39:d9:3d:ed:19:ee:6d:f0:94:f9:
4b:42:96:64:9b:c2:9d:8f:3e:1d:bb:c1:b0:f9:95:
e5:55:46:46:cc:68:8f:6d:20:23:b8:5a:59:d8:50:
84:1b:89:43:78:cb:04:4a:ab:c2:3e:25:c2:97:69:
48:f0:50:8a:0d:93:09:c2:85:5b:96:64:9a:cc:9e:
f0:f2:96:1c:04:30:03:4d:03:86:c6:4d:8c:f8:3b:
ea:59:e0:cc:17:d3:75:69:5e:90:42:a0:76:35:91:
39:69:ff:bb:d3:d3:cf:ff:b2:0a:64:fe:9b:d6:c3:
45:fa:48:a1:e2:bc:72:80:80:6c:a6:64:4a:0d:ca:
bc:28:17:61:fa:6d:66:8a:a6:50:d8:4c:b7:1b:9a:
b8:d3:f5:80:b5:26:0a:6d:e6:aa:09:33:23:ad:99:
eb:94:c7:65:b4:05:e6:45:8d:eb:e8:26:ad:8a:31:
0c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:ED:8F:3C:02:CD:D4:4E:9D:AD:F2:67:8D:A0:61:82:6E:C9:FB:4C
X509v3 Authority Key Identifier:
keyid:04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:74:0c:ee:6c:c8:2a:91:fc:5f:1d:bb:0a:b8:02:80:a5:36:
49:ce:fe:ca:84:76:19:37:18:41:f6:35:91:83:a6:92:5b:df:
c2:bc:74:35:4b:ad:e0:8c:0c:8b:bb:b6:37:e2:48:ce:74:8a:
3e:dc:3d:19:07:7a:7d:19:70:1a:63:80:8b:38:c3:af:2c:23:
89:ad:6a:62:14:e8:fa:9b:b9:21:29:a6:fd:d3:d5:7a:9e:83:
fc:08:5d:43:2f:22:fc:c9:71:c7:36:8a:49:24:1d:2a:58:c7:
3d:e4:b4:9b:51:1f:8f:60:7b:01:1f:07:10:db:11:26:aa:54:
68:e9:6a:68:17:4c:0e:cf:1c:83:2d:43:9d:b7:7e:fa:2e:1b:
11:ae:d2:87:71:8b:b8:87:ef:1d:81:21:8f:ab:d4:d6:ad:fa:
ba:00:4f:13:4e:c2:11:91:27:50:9e:52:f8:5f:30:73:98:23:
d3:b2:7d:bb:95:f3:96:27:eb:cc:0a:91:91:2c:44:11:e9:fa:
cf:07:fb:51:1e:6d:68:9f:36:83:f1:39:5f:04:88:a0:45:1c:
28:3d:ae:fb:dd:17:31:3e:85:27:45:22:b3:fc:f2:0e:59:19:
c9:45:87:a9:e5:43:d5:80:bb:82:25:6d:71:dc:b7:9c:e8:95:
86:c6:48:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:49:24 2026 by rpki-client