
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.mft
File: bCaeUzC71Mculn7D40rmph7kR_Y.mft (raw, json)
Hash identifier: lbqTi18O4MekGFWFDSYxqpPGdw4+H9tPhhh+BYzFtcg=
Subject key identifier: 02:4A:37:C5:0B:F1:19:1D:A6:70:50:EC:59:00:E7:65:4B:2D:F8:ED
Authority key identifier: 6C:26:9E:53:30:BB:D4:C7:2E:96:7E:C3:E3:4A:E6:A6:1E:E4:47:F6
Certificate issuer: /CN=A91FAB2C/serialNumber=6C269E5330BBD4C72E967EC3E34AE6A61EE447F6
Certificate serial: 1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCaeUzC71Mculn7D40rmph7kR_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.mft
Manifest number: 19
Signing time: Tue 29 Sep 2026 09:39:13 +0000
Manifest this update: Tue 29 Sep 2026 09:39:13 +0000
Manifest next update: Tue 06 Oct 2026 09:39:13 +0000
Files and hashes: 1: bCaeUzC71Mculn7D40rmph7kR_Y.crl (hash: ExNZSMKzuX6HgJoUqMFYDpePe4vwje2kYZyP6qNuUCw=)
2: j3bbIV2LwQIIAV2cBaTJoUMwJQ0.asa (hash: UDvm2B9kpdtbUUsMkxX9LmulUfS/+9q42P8eoBdZzoY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.crl
rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCaeUzC71Mculn7D40rmph7kR_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 09:39:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAB2C, serialNumber=6C269E5330BBD4C72E967EC3E34AE6A61EE447F6
Validity
Not Before: Sep 29 09:39:13 2026 GMT
Not After : Oct 6 09:39:13 2026 GMT
Subject: CN=6abb8741-5863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:53:0e:c0:52:5b:d7:4e:fa:1b:67:33:02:0a:
9b:46:92:95:09:17:01:51:a6:87:40:c9:8c:94:9b:
5f:50:ce:94:84:9f:fb:45:ee:07:13:07:77:7e:bd:
35:59:9e:ee:04:92:1e:5a:b3:4c:a6:c0:fa:7a:b2:
15:b5:f4:0e:d4:fe:e2:b4:4a:24:f4:7b:30:87:2e:
38:64:ca:20:e9:5d:3c:a1:83:4c:ee:9a:b3:4e:16:
0e:4a:60:56:53:eb:b4:aa:05:e3:c9:38:9c:ab:34:
42:b7:a0:9b:f5:c7:61:a9:76:12:65:ef:c8:60:68:
16:71:c4:b0:a1:dd:92:61:d1:a3:09:18:a0:6b:22:
21:da:84:b2:bb:97:50:b8:ab:dd:76:21:0f:d2:74:
dd:a7:53:fc:c6:2d:c8:09:18:ef:56:c4:cd:5e:02:
44:e4:1b:d3:67:4c:d0:59:2c:88:20:9c:92:9d:e1:
e6:7c:e6:01:13:2b:3d:79:1d:7c:f0:2c:bf:80:17:
cf:07:02:4c:a0:51:c8:c8:a3:71:99:4c:2c:a5:1f:
0b:0b:e0:15:b6:91:0d:54:3b:67:d3:13:92:d1:6c:
8f:77:da:ca:c1:30:2a:89:34:25:54:17:e1:91:e1:
d9:7a:df:ef:3f:94:7c:a3:97:b0:91:06:09:08:2e:
0c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4A:37:C5:0B:F1:19:1D:A6:70:50:EC:59:00:E7:65:4B:2D:F8:ED
X509v3 Authority Key Identifier:
keyid:6C:26:9E:53:30:BB:D4:C7:2E:96:7E:C3:E3:4A:E6:A6:1E:E4:47:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCaeUzC71Mculn7D40rmph7kR_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:fa:88:b8:36:96:c3:ec:14:9a:5c:5e:86:eb:95:99:10:c8:
cf:71:c2:2e:a1:41:3b:14:70:bb:23:54:19:42:92:b0:e8:ac:
9e:8f:3d:5b:f2:a5:e9:f1:75:af:1d:70:68:e3:5d:71:c9:f7:
f7:2a:81:0b:17:b4:d2:29:17:2e:01:ed:d5:34:4e:0c:29:80:
1d:bb:0b:40:99:28:e4:36:3c:c4:19:2a:58:7e:df:4a:0d:b5:
ac:25:12:8c:38:fb:0a:e6:a8:92:cf:1a:31:0e:f5:61:5b:67:
86:65:87:c1:45:12:f7:1a:51:85:c9:50:df:69:8a:ed:15:5d:
77:8f:fd:c6:7d:e4:07:ea:04:e6:3d:bf:87:6c:56:7d:f9:94:
18:55:5a:33:7c:f5:e5:de:be:90:98:c6:d4:32:99:26:82:4a:
9b:bf:be:b3:14:61:77:66:b6:07:87:af:7c:cc:f2:05:0a:5a:
8c:4b:a9:aa:60:ca:68:e3:5c:2c:07:e7:a8:1d:f0:3a:70:81:
da:68:e0:2a:c5:4e:7d:19:84:a3:d6:e7:66:52:a9:d1:c6:3e:
32:78:f3:35:02:3e:da:f9:77:e1:23:c1:de:28:7d:37:d2:45:
97:8d:6f:99:81:94:9d:0f:95:d2:65:1b:ba:8f:82:a8:b2:a4:
71:37:4d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 01:25:22 2026 by rpki-client