
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft
File: bjPVE5klw9tNCFk3zmms03vqeU0.mft (raw, json)
Hash identifier: ZsXdi9Zmbv2RmLSWUnkMlpVHaE758OOzfJ/jaS690RQ=
Subject key identifier: AA:05:DE:96:D8:24:8A:F1:38:E8:6E:AF:75:4F:30:02:6E:3B:04:B8
Authority key identifier: 6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D
Certificate issuer: /CN=A91A8CD2/serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D
Certificate serial: 0625
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft
Manifest number: 061F
Signing time: Tue 24 Mar 2026 22:29:35 +0000
Manifest this update: Tue 24 Mar 2026 22:29:34 +0000
Manifest next update: Tue 31 Mar 2026 22:29:34 +0000
Files and hashes: 1: bjPVE5klw9tNCFk3zmms03vqeU0.crl (hash: yLSeg/8PeVk0Ly2yI5szP2hC6+tOmeVrPlIqvdGoNwI=)
2: 5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa (hash: 9EBALdwwijjeO4khfYPIpOopAS9O0iSalAHNRXIRSj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl
rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1573 (0x625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8CD2, serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D
Validity
Not Before: Mar 24 22:29:34 2026 GMT
Not After : Mar 31 22:29:34 2026 GMT
Subject: CN=69c3104e-a82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:eb:74:4e:be:02:51:58:2e:a1:5a:e3:1c:
da:ea:7f:dd:f4:37:0a:2e:f1:6f:50:79:da:e8:a8:
49:c0:91:00:93:f8:32:eb:80:33:cb:2f:f9:e1:8f:
64:35:7f:b0:d2:67:ee:f8:33:d1:49:66:cf:2c:5b:
b5:54:70:96:f8:b0:2b:7d:95:d2:2c:fc:d5:89:0b:
4c:7b:8a:40:e7:b7:3b:03:01:2f:8d:50:24:60:b4:
86:9f:cc:b0:f3:21:04:84:7c:ed:73:09:63:9c:c7:
84:94:4f:90:18:c5:4a:59:36:6f:6b:0b:e3:97:29:
b9:ba:b2:48:e1:ae:56:a0:63:3e:0c:91:46:ca:50:
33:75:83:30:06:7f:ae:0b:f6:62:73:a0:5c:cc:2e:
e7:15:37:d4:95:25:68:a0:39:e8:43:e0:ce:db:6d:
e2:a1:92:ee:bd:1d:0a:89:8c:d4:b5:fe:9c:38:89:
24:d8:f6:3c:e6:5b:d0:3d:69:9f:57:31:10:53:ba:
49:24:b6:96:d1:81:a3:98:f7:5b:d1:f8:3d:08:d5:
75:9b:9f:15:23:62:56:d4:3e:30:0d:69:95:ba:fc:
11:e5:09:4e:24:5e:37:ad:32:ef:d2:fc:38:13:b1:
47:c3:9e:e3:76:bc:94:47:31:12:f3:fc:99:ec:de:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:05:DE:96:D8:24:8A:F1:38:E8:6E:AF:75:4F:30:02:6E:3B:04:B8
X509v3 Authority Key Identifier:
keyid:6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:72:a0:2f:02:e0:fa:14:a9:e2:db:d6:a6:a5:55:db:1a:5f:
0d:28:c9:46:0b:53:c4:d1:bf:13:c6:79:ba:67:80:2a:aa:9c:
07:47:44:48:bf:f5:70:3a:4b:cd:99:29:4a:d9:ae:a4:56:5c:
62:e7:ba:5b:52:96:85:15:dc:7d:2e:a5:81:32:5a:a8:88:9e:
11:3c:e2:2c:fc:2b:d6:16:6d:73:09:91:2b:3d:f1:41:7c:1e:
4e:b0:5b:ca:3a:f4:be:f8:65:e0:b1:c1:d5:59:b2:f1:39:8e:
ed:98:78:dc:70:1b:f8:96:5d:5d:8b:37:4b:35:f0:93:11:5e:
89:44:bb:46:79:17:9e:6d:8a:db:e6:0a:7a:d0:b7:39:8d:08:
27:79:81:76:14:a5:28:18:4e:e7:65:55:54:89:2a:78:b7:e8:
2f:a1:9d:af:92:8b:ba:53:8e:a3:a2:3b:e0:9f:97:ed:bc:1e:
57:49:00:f5:2a:dc:a8:83:ec:c8:88:3d:e6:71:db:9d:18:9c:
8e:c4:b7:54:45:1f:17:d8:01:35:99:67:4c:46:b4:ea:1e:7f:
9a:49:86:de:f6:9d:22:8c:b5:1d:bf:80:b1:ec:67:9b:d7:c2:
7b:ff:6c:b3:80:ba:8c:4e:b4:bd:fc:79:25:08:3d:fe:99:96:
c7:27:3d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:10:18 2026 by rpki-client