
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
File: BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft (raw, json)
Hash identifier: JQIQA2S6yZ+OA/4udewQaUJX84uL9SOx9korlpux6pA=
Subject key identifier: CE:1D:44:18:0B:AD:84:EB:B4:02:F8:37:2A:DF:F5:C2:3B:59:DC:3C
Authority key identifier: 06:66:6A:EC:D7:8C:0A:5E:D1:37:90:A5:E9:AA:40:C3:49:0F:BC:F1
Certificate issuer: /CN=A91F63DC/serialNumber=06666AECD78C0A5ED13790A5E9AA40C3490FBCF1
Certificate serial: 0234
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
Manifest number: 0232
Signing time: Mon 05 Oct 2026 02:58:09 +0000
Manifest this update: Mon 05 Oct 2026 02:58:08 +0000
Manifest next update: Mon 12 Oct 2026 02:58:08 +0000
Files and hashes: 1: BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl (hash: WWG/GA/IzPxhUCP7G90ztZg457Fqi7ZqtK0ey2ESldY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl
rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 02:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F63DC, serialNumber=06666AECD78C0A5ED13790A5E9AA40C3490FBCF1
Validity
Not Before: Oct 5 02:58:08 2026 GMT
Not After : Oct 12 02:58:08 2026 GMT
Subject: CN=6ac31241-39ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:06:ce:3f:37:c9:ed:d5:5a:02:c8:7f:3a:
d2:a9:d0:4a:c0:87:d0:d7:fe:d9:01:38:e9:65:d0:
63:80:5a:00:39:75:35:f7:04:c9:a4:2a:56:f4:3f:
f0:6f:c9:c1:e3:61:5a:6c:63:09:8f:50:64:ca:67:
f6:fb:f2:8e:4f:3d:12:c9:f5:4a:67:80:4c:c4:9f:
1b:53:ef:41:7f:c5:54:36:2e:16:53:e5:95:a1:94:
45:6b:2d:ec:29:f7:d1:45:d7:3b:1f:c8:93:29:63:
5f:48:f9:68:9c:f3:52:97:f6:1c:79:63:0c:30:6c:
b7:92:be:65:23:96:2c:40:a4:b2:76:10:c4:12:5b:
78:ad:dd:c3:50:48:2d:30:e7:c7:9d:82:b6:ef:c6:
8b:7f:b0:90:50:2c:08:12:0c:a4:e6:4c:09:b4:e4:
56:6e:47:0e:e8:17:11:bb:7a:6b:86:26:b0:c5:20:
06:78:ae:ae:b2:a2:d0:d5:62:40:92:2f:b1:5a:2c:
df:52:4c:30:9c:92:7d:3b:df:02:e9:3d:6b:60:da:
00:c0:46:2a:09:3b:b1:8d:45:58:0c:5e:1c:3b:73:
19:97:8d:95:a9:d5:b6:46:6c:7d:a0:7c:ec:81:2e:
f4:c6:54:e8:ef:ca:9e:b4:ce:14:d4:ee:44:2a:c5:
9f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1D:44:18:0B:AD:84:EB:B4:02:F8:37:2A:DF:F5:C2:3B:59:DC:3C
X509v3 Authority Key Identifier:
keyid:06:66:6A:EC:D7:8C:0A:5E:D1:37:90:A5:E9:AA:40:C3:49:0F:BC:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f1:30:ae:8d:bd:75:ca:90:a5:89:0d:a9:0c:8a:cc:6d:90:
2f:2c:a3:21:33:74:24:83:30:72:69:68:03:a3:bd:7a:b6:56:
85:e8:f8:e6:11:4e:da:00:e2:36:50:23:df:fa:d1:84:d3:27:
20:4b:bb:7a:80:0f:9d:8b:ab:95:00:fe:b2:80:af:05:e9:36:
44:c8:77:38:54:09:0d:d0:38:f2:8e:97:e6:bd:95:cf:ac:a5:
d4:80:ec:d4:34:62:9a:4b:8e:c7:d6:e0:2e:42:9c:b1:96:64:
04:71:81:5d:cb:25:b5:3f:ad:f2:84:44:20:c2:a4:26:a9:4f:
19:4a:a9:ae:1a:ec:23:05:7c:55:74:24:c2:53:d9:63:34:8a:
a9:bf:4e:d8:01:35:d4:2c:47:06:35:91:81:01:3b:fa:01:7c:
e0:1c:55:dd:47:cf:af:a0:dd:23:ed:62:d1:e3:e1:c5:4e:f8:
71:2d:a5:4d:0f:0f:8a:63:ff:71:be:f0:9e:83:fb:1b:12:fa:
80:42:73:9e:04:98:b0:68:24:c2:62:99:3a:7d:e6:9d:ca:4d:
a2:4c:ac:50:cd:13:8e:4e:ae:f2:11:82:92:a6:03:18:cc:55:
98:50:0c:bc:bc:7e:87:66:82:eb:fe:57:29:78:3a:51:7e:3c:
4d:76:0b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:02:55 2026 by rpki-client