
$ rpki-client -vvf rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft
File: bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft (raw, json)
Hash identifier: rcsFsPtsLozxBVPY6f0Ua0NjriWFocUZqKgtS5XKYuo=
Subject key identifier: 12:B8:C1:C0:C2:59:43:F7:C0:54:05:F4:63:93:96:80:80:B9:FA:17
Authority key identifier: 6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65
Certificate issuer: /CN=A91240E6/serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65
Certificate serial: 26FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft
Manifest number: 26DE
Signing time: Fri 24 Jul 2026 01:23:46 +0000
Manifest this update: Fri 24 Jul 2026 01:23:46 +0000
Manifest next update: Fri 31 Jul 2026 01:23:46 +0000
Files and hashes: 1: bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl (hash: YSM7JfOaCdUGVnToRpgUAQqAxt6dSTAw9LuHh9+P7p4=)
2: 4DF2AB2886FE11F194514C90ABEE528E.roa (hash: jckdVaLgGySOmC+dxDdM+IECQKrysVqHPHa0XPV4yDs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl
rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 01:23:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9980 (0x26fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91240E6, serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65
Validity
Not Before: Jul 24 01:23:46 2026 GMT
Not After : Jul 31 01:23:46 2026 GMT
Subject: CN=6a62bea2-953b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:1c:5f:5d:50:60:1a:e2:0a:37:80:7f:b4:
87:c6:60:32:1a:1a:d2:9e:21:dc:bc:8f:e7:93:9d:
77:e1:0b:09:55:40:4a:73:29:33:6f:c1:1d:3a:b7:
46:26:75:69:d6:4d:e0:49:0c:3f:82:72:3b:a8:90:
07:7b:ef:f2:10:e0:32:19:14:ef:e5:0b:1c:60:4d:
ab:ec:47:82:cf:bf:d7:7d:ad:4b:80:ba:d1:24:2e:
e4:84:91:ed:ba:f5:11:65:a2:b2:38:7c:0a:0a:bb:
02:bf:bf:71:fa:d5:7c:90:20:a4:6f:68:6c:98:31:
4b:5e:a9:c4:d1:48:34:6e:08:fc:ad:d1:45:c1:e4:
36:3b:b9:d8:26:d7:f0:ca:38:64:b3:14:fc:7f:cb:
05:97:b6:f1:57:c0:68:0a:4a:29:1f:a3:ea:64:cc:
d8:e5:84:d7:d3:22:13:9c:41:e9:88:c4:10:8c:74:
13:ba:2b:6e:0c:59:71:0e:6c:7b:68:91:2c:d9:4d:
ca:00:29:b7:dd:a1:b5:2e:d8:e3:54:0b:61:45:2f:
03:9e:fe:c6:e3:88:25:44:46:64:3d:eb:ce:24:6e:
16:e9:7f:96:ba:78:89:66:86:a2:39:e8:9f:b4:c6:
4b:69:4c:23:f5:ff:02:7b:2d:e3:d0:b8:e7:36:d8:
33:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B8:C1:C0:C2:59:43:F7:C0:54:05:F4:63:93:96:80:80:B9:FA:17
X509v3 Authority Key Identifier:
keyid:6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:41:95:62:35:c7:7c:4c:e3:18:09:8c:2b:de:ce:bb:6e:fa:
f1:0a:82:92:70:a9:19:33:ba:9b:08:e4:4a:01:23:f9:f7:dd:
f3:a9:5a:79:e7:82:11:e5:f9:86:56:62:04:56:23:b4:8e:ab:
70:ae:06:2f:ea:a3:81:d6:88:07:f1:7c:90:59:7a:9c:b6:b7:
24:0b:b2:f8:d9:e2:21:98:a9:85:ef:a8:26:2b:d9:e5:dd:c8:
64:08:e8:d9:63:c0:96:3d:21:75:aa:26:3c:35:cf:b9:6b:28:
43:ed:f4:c1:b7:00:32:05:68:90:c7:bd:0d:52:cb:26:5c:98:
72:dd:95:24:6e:ba:5f:46:3b:09:44:06:5e:6d:68:f4:1e:5d:
1d:87:ec:27:ee:fe:b7:db:db:65:27:4b:95:a0:91:26:b7:5f:
75:de:88:29:b1:a0:83:ea:49:99:52:7f:e6:14:2b:10:cc:4c:
48:7f:54:27:54:09:90:56:dd:14:34:c8:dc:e9:e7:f3:58:75:
71:2f:28:39:00:01:94:82:fa:49:7a:e3:dc:22:08:c3:ca:ce:
ee:da:76:11:66:d6:d1:e2:e7:6e:8f:5f:45:92:d0:02:4d:56:
cf:ea:8f:af:83:f7:30:2e:b5:f2:98:60:ef:4c:29:1e:38:99:
94:56:f6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:07:00 2026 by rpki-client