
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
File: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft (raw, json)
Hash identifier: Nj5JNAk+AW0jzAoZL+sI1kHI6O08ZOHPmCa/XJdCafE=
Subject key identifier: 2F:A3:A7:34:BF:E3:42:19:A9:EF:CD:91:BD:3A:96:8D:1D:9D:3C:3C
Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D
Certificate issuer: /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
Certificate serial: 0221
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
Manifest number: 0214
Signing time: Sat 03 Oct 2026 03:40:02 +0000
Manifest this update: Sat 03 Oct 2026 03:40:02 +0000
Manifest next update: Sat 10 Oct 2026 03:40:02 +0000
Files and hashes: 1: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl (hash: LMAJUTDr7cW2yOmGCck5boYwxSyOwtH4UYByjzY/4aw=)
2: 134D519098B711EE99FD1F09C4F9AE02.roa (hash: TP4JixOOcg9YnuGelQlIMV1MqlMNS4cHb5eiwzX8uV8=)
3: 13E4471298B711EE99FD1F09C4F9AE02.roa (hash: CSGjDy/wdYYzGXyvOOUl98bHiR5LO+1hU3+jdzF0bhY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl
rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3526, serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
Validity
Not Before: Oct 3 03:40:02 2026 GMT
Not After : Oct 10 03:40:02 2026 GMT
Subject: CN=6ac07912-90ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:88:17:8c:84:95:e6:12:b2:8f:ff:76:b4:
6e:e7:4e:c6:85:71:3c:ee:93:b9:7c:58:cf:4b:90:
08:b1:82:15:00:f5:5b:e6:f4:64:98:cb:15:7a:aa:
fd:5d:f3:53:d5:05:3d:d0:9d:e1:07:99:4a:31:5b:
d8:d0:29:0a:3b:8d:e4:53:b4:eb:b1:b3:52:57:f9:
07:07:86:ac:4d:f3:8d:d8:2e:4a:99:a6:ab:27:a2:
c5:12:9f:ba:46:f2:cb:eb:d3:61:6a:c2:ad:ad:6c:
b6:c9:dd:a0:11:b2:26:dd:8b:d6:80:7b:3c:a2:e0:
b8:c3:21:46:ea:5e:4f:d2:67:c8:7c:42:1f:44:31:
7a:7f:ce:b7:89:73:a8:77:1c:d5:81:8f:fa:3e:13:
7f:f0:a3:0d:6f:b6:7c:50:a6:f0:65:bd:51:86:fc:
43:74:88:46:80:a1:4f:df:bc:e0:18:db:29:f8:8c:
15:96:3b:c0:c5:12:81:99:5f:f3:64:9f:25:a3:40:
9b:08:bc:1c:c3:8f:40:44:74:69:c0:fc:91:ed:2e:
d4:03:dc:47:1a:2b:8e:b9:46:fb:87:36:a6:ee:c8:
1c:48:cc:da:3a:5c:43:5d:01:5a:d7:f0:71:c7:6e:
77:cc:d3:c7:25:e4:7d:99:f7:11:75:eb:fd:d7:cf:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A3:A7:34:BF:E3:42:19:A9:EF:CD:91:BD:3A:96:8D:1D:9D:3C:3C
X509v3 Authority Key Identifier:
keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:7d:f9:fb:d0:10:ae:c2:68:e1:7e:4b:2d:0a:73:58:4b:49:
be:ab:6c:51:60:98:25:d0:1f:f7:75:5f:42:d5:c3:43:06:91:
54:ff:01:6f:58:45:83:22:df:e7:5e:f3:ea:f7:40:8b:af:9b:
65:4e:51:b6:55:57:08:bf:2c:7e:0b:73:eb:b9:8d:be:02:2a:
58:6a:18:86:f2:44:9a:1b:43:9d:6c:e6:3a:a5:22:d3:f1:40:
ad:5f:86:13:83:60:f1:18:a7:bb:5b:23:e6:7b:54:e6:ca:7d:
35:13:75:9d:a0:72:9d:26:1d:7a:07:47:8c:39:07:9a:d2:57:
4f:7f:d1:02:03:cc:95:10:9e:33:22:e4:09:51:f9:0e:ca:77:
13:bf:2f:1c:00:79:57:b7:35:41:52:35:18:c7:9d:55:34:c9:
2d:af:08:7b:23:45:14:a7:60:7f:ba:3e:19:e5:4e:4b:0e:45:
a9:88:01:be:14:60:7e:22:33:28:3b:13:f7:5e:ba:f4:f0:43:
98:2a:a2:26:1f:8a:cc:11:b5:4c:d9:ca:6b:40:2b:7f:28:c0:
93:65:df:69:5b:da:12:55:6b:37:8e:51:44:cd:46:23:a8:89:
af:93:8e:a9:08:ac:fa:26:ea:66:0e:ae:71:60:42:1a:9a:72:
d6:a5:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:39:10 2026 by rpki-client