
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft
File: BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft (raw, json)
Hash identifier: /+X0eCdCOyvFsGM+4h5nNy9zCeWbWQVk9sHbizwNJD4=
Subject key identifier: 10:09:5A:58:A0:2F:65:2B:53:A6:98:A6:76:D3:BB:1D:87:A6:BD:20
Authority key identifier: 04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9
Certificate issuer: /CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9
Certificate serial: 090E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft
Manifest number: 08FF
Signing time: Thu 24 Sep 2026 20:16:25 +0000
Manifest this update: Thu 24 Sep 2026 20:16:25 +0000
Manifest next update: Thu 01 Oct 2026 20:16:25 +0000
Files and hashes: 1: BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl (hash: XrdejOuJByEBvsqlu66FOdTJ2qzHgTUaEmB3pc5L/Us=)
2: 02F863F6C09211EC8950E57AC4F9AE02.roa (hash: kaqTTfX4xcgq0jrDteDEHbQZsGepuw4xi4fZYEf2NxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl
rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2318 (0x90e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4AA0, serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9
Validity
Not Before: Sep 24 20:16:25 2026 GMT
Not After : Oct 1 20:16:25 2026 GMT
Subject: CN=6ab58519-f1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:f2:cb:37:c3:32:1c:69:6a:09:7b:76:a5:
e5:4f:17:83:68:7d:a6:ca:c2:a9:15:dc:8b:a6:8f:
b6:2d:ec:cc:a4:11:ac:0b:4a:2d:c9:03:ef:47:fa:
27:b9:4f:e2:15:ce:df:d7:34:da:90:99:52:14:c2:
95:28:ca:46:13:f8:65:ab:73:18:07:9f:e7:16:14:
d1:44:e9:48:77:88:e9:34:c5:9d:67:2a:31:eb:b3:
bb:89:40:d4:15:0c:44:a0:73:0f:59:b8:ba:b2:11:
95:b2:c3:74:f6:b1:00:6f:06:58:0e:83:fd:ac:5a:
35:0d:bd:7c:27:e2:b5:9b:7d:61:36:ca:6d:12:ff:
59:12:9f:93:4c:3d:e1:48:8e:04:ae:7e:00:1f:42:
7b:6f:51:e1:c9:b2:71:b7:be:10:13:e8:5c:2a:bd:
ad:b4:63:23:94:bb:a8:1c:07:4b:5c:fe:c4:4a:62:
ae:9f:81:86:44:a1:e9:25:29:bf:ff:c8:1f:59:45:
6a:15:70:42:97:32:5f:2d:fc:a7:1e:65:09:f0:28:
37:60:9f:d8:cb:17:88:30:3b:3b:d0:cf:c8:a9:72:
45:b5:9e:47:74:03:cf:7b:cb:52:57:13:0d:eb:94:
05:5d:91:72:94:23:ec:e8:a5:81:af:ea:27:dd:67:
03:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:09:5A:58:A0:2F:65:2B:53:A6:98:A6:76:D3:BB:1D:87:A6:BD:20
X509v3 Authority Key Identifier:
keyid:04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:8d:f7:ce:94:31:07:db:cd:1e:6c:1d:f2:f1:c0:2d:8c:e0:
e5:fa:a9:fa:d4:3a:30:98:85:64:b6:30:fe:4c:29:3b:73:f2:
a5:50:cd:b4:14:07:96:a8:8a:27:e8:31:49:87:8c:78:93:07:
48:7a:b0:e6:c4:e6:24:7d:a0:75:bc:d1:e8:eb:73:03:55:9f:
ea:fc:31:8a:60:c8:61:b5:d7:bf:67:f4:f0:2b:90:14:29:7b:
03:a8:dd:95:c0:39:45:84:b0:5b:e5:80:46:ba:35:2b:dd:3b:
b1:f7:89:bc:4e:7e:71:a1:00:0b:0d:ee:4d:4e:a4:0e:15:ac:
02:5e:ad:be:82:f9:83:1d:f6:e2:72:ca:ef:27:b2:9d:26:c9:
6c:f1:56:a2:cc:f6:c6:86:ba:95:94:37:36:16:92:f6:83:d6:
d9:11:52:5b:1b:d5:e9:36:91:10:db:f5:8b:10:7d:d8:d7:5c:
69:c3:49:a3:84:f2:c5:ac:06:d5:cc:d1:7e:2b:2f:88:80:b8:
35:b8:77:00:72:d5:d0:7a:cb:5f:4f:80:ff:56:cf:33:81:9a:
b2:30:6b:19:c6:b3:7d:1c:55:55:d9:b7:92:a4:57:3c:1b:6d:
09:3c:25:2f:1c:ce:d1:95:cc:2f:dd:66:74:0f:d1:4a:bf:45:
0d:1e:eb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:15:16 2026 by rpki-client