
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91556B2/BAE22920A5E911F18ED456753B11F970/be04CQlvg7CwOKEzxWYtwZXkDy0.mft
File: be04CQlvg7CwOKEzxWYtwZXkDy0.mft (raw, json)
Hash identifier: WL0BnFIRd6drl9SmsvlJA/9EgzwVm545tD9rKA6N3fI=
Subject key identifier: 5D:FA:75:B0:F8:24:C8:0F:B1:CD:93:39:5B:00:D7:F3:4E:51:DC:45
Authority key identifier: 6D:ED:38:09:09:6F:83:B0:B0:38:A1:33:C5:66:2D:C1:95:E4:0F:2D
Certificate issuer: /CN=A91556B2/serialNumber=6DED3809096F83B0B038A133C5662DC195E40F2D
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/be04CQlvg7CwOKEzxWYtwZXkDy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91556B2/BAE22920A5E911F18ED456753B11F970/be04CQlvg7CwOKEzxWYtwZXkDy0.mft
Manifest number: 16
Signing time: Sun 11 Oct 2026 09:42:28 +0000
Manifest this update: Sun 11 Oct 2026 09:42:28 +0000
Manifest next update: Sun 18 Oct 2026 09:42:28 +0000
Files and hashes: 1: be04CQlvg7CwOKEzxWYtwZXkDy0.crl (hash: zgphFiHxL9Z+RLOT1yD6CWUykjFOYTANVAzQ8Z4qKis=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91556B2/BAE22920A5E911F18ED456753B11F970/be04CQlvg7CwOKEzxWYtwZXkDy0.crl
rsync://rpki.apnic.net/member_repository/A91556B2/BAE22920A5E911F18ED456753B11F970/be04CQlvg7CwOKEzxWYtwZXkDy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/be04CQlvg7CwOKEzxWYtwZXkDy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 09:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91556B2, serialNumber=6DED3809096F83B0B038A133C5662DC195E40F2D
Validity
Not Before: Oct 11 09:42:28 2026 GMT
Not After : Oct 18 09:42:28 2026 GMT
Subject: CN=6acb5a04-ba52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:91:93:be:76:52:31:d8:3d:ed:d7:cc:9a:
36:29:0e:d2:a8:55:8b:87:ef:6f:c4:cb:b0:63:7b:
3d:68:8a:f9:b1:0c:15:8d:dc:f0:9d:46:03:b5:fb:
1d:62:f7:59:b4:f4:a0:1c:eb:15:da:a5:59:19:ff:
2a:ab:01:8e:37:f4:ef:10:c1:d4:bf:e6:16:24:c0:
ac:02:00:0e:96:a9:b7:3a:d2:1d:5d:da:94:7a:31:
2b:f3:b6:33:08:eb:7d:b1:0c:49:4f:6b:4b:6f:65:
15:14:f2:86:9b:51:2f:da:3b:98:81:b0:46:d9:bb:
c6:05:ff:c9:c2:e3:f1:73:2a:bc:a2:38:02:87:00:
b0:1f:21:1f:d8:91:8e:c7:84:22:d4:ce:b4:0e:fd:
3c:dc:f6:7d:7a:84:98:9e:f1:53:7b:9a:15:69:4e:
85:1a:d0:fd:f8:81:98:ed:da:42:52:72:23:1f:ff:
82:5b:78:c5:7d:cd:6e:04:15:83:7d:52:a5:9d:14:
d7:6c:3c:df:97:78:21:47:85:a5:33:a8:e1:5f:42:
c3:4c:d7:26:9e:6a:ed:05:9d:76:ae:ec:8e:98:b8:
32:96:31:3f:87:5f:08:4c:87:1c:cf:4e:22:eb:2b:
1c:8c:9f:ac:7a:8d:11:bf:da:48:b9:94:9f:f3:89:
c1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FA:75:B0:F8:24:C8:0F:B1:CD:93:39:5B:00:D7:F3:4E:51:DC:45
X509v3 Authority Key Identifier:
keyid:6D:ED:38:09:09:6F:83:B0:B0:38:A1:33:C5:66:2D:C1:95:E4:0F:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91556B2/BAE22920A5E911F18ED456753B11F970/be04CQlvg7CwOKEzxWYtwZXkDy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/be04CQlvg7CwOKEzxWYtwZXkDy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91556B2/BAE22920A5E911F18ED456753B11F970/be04CQlvg7CwOKEzxWYtwZXkDy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e8:cc:6c:4e:91:e8:93:cd:55:82:28:e3:69:76:ab:72:98:84:
13:58:94:ec:5c:73:e1:df:db:7b:da:b4:ae:ee:26:23:20:33:
28:20:33:15:8d:f8:3d:2d:d5:ca:7e:f2:00:9a:73:5b:5e:38:
7e:26:66:9e:16:c5:79:07:88:09:21:20:94:91:58:99:40:e5:
32:70:f1:2e:57:b7:a0:b2:9f:28:9b:43:ee:74:cf:2e:f1:9b:
31:a0:ab:83:d6:ca:2b:cd:4d:52:fe:c1:e2:ef:59:55:61:d0:
90:e1:19:59:a1:3e:2d:04:3c:3f:57:27:05:47:3b:cf:5f:d1:
8e:e8:cf:54:6b:b7:6c:49:5a:d0:e1:76:45:de:ed:fa:f0:3a:
a5:83:d8:4f:cd:7f:88:3b:f8:ce:60:2f:d8:26:86:8b:db:07:
2d:41:8e:6b:f7:fa:dd:d2:96:cf:a5:70:2c:b8:95:2c:81:71:
91:2f:2d:7a:6e:80:03:24:22:cc:01:11:bf:78:63:8d:32:3f:
0f:d2:c3:57:b4:81:03:b9:fd:9d:8b:2b:a4:08:b6:95:19:7d:
b3:45:fb:c7:c5:2e:2c:8c:b0:02:dc:fc:55:27:c9:b3:17:18:
b8:77:93:aa:7e:c8:ff:a2:6e:c9:2f:67:8b:cb:02:d2:a6:8b:
b8:cf:ab:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:50:16 2026 by rpki-client