
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
File: bKayrB3RewFNtsdnJ50Ixm5O_AU.mft (raw, json)
Hash identifier: Sn0PKRPYAvMYNfMo/2naa7gWapbHsRs5xtxmSKcLjZ4=
Subject key identifier: 83:48:4E:A8:34:BC:AF:30:3C:11:08:BD:8B:BB:66:57:66:1F:65:19
Authority key identifier: 6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05
Certificate issuer: /CN=A91BC6B4/serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05
Certificate serial: 10CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
Manifest number: 1094
Signing time: Sat 14 Nov 2026 17:17:11 +0000
Manifest this update: Sat 14 Nov 2026 17:17:10 +0000
Manifest next update: Sat 21 Nov 2026 17:17:10 +0000
Files and hashes: 1: bKayrB3RewFNtsdnJ50Ixm5O_AU.crl (hash: MNZY/heobf1NjWpweLfERhCuumLeTVJCFtNwdJ0kbUA=)
2: FD22BBAE231F11EB99F53580C4F9AE02.roa (hash: dE0mhrpGScdBtr0x+KlnwIGm99yJikrZrhFjHazodxg=)
3: 5FB07B1421CF11EBA0C85857C4F9AE02.roa (hash: 2/Kg1E4d6mdqw/RO9m0fS+QFT0c9p4PbHfjjUy6RVkE=)
4: A850C476026E11EBB2E0E72FC4F9AE02.roa (hash: ZQ+Kp0nPniDPrMOYQ35Dp8VH467JhWTHQOyjMWpsMmc=)
5: 61A85BEE21CF11EBA0C85857C4F9AE02.roa (hash: fvafLyxSbKdArJ2YqMsVGihLYKU3CuygMScgak3VV9U=)
6: 425BF5FE7A4711EBAD125258C4F9AE02.roa (hash: 8feuwyIbHncVjc3N1BWNIRSwrUMtJmU1uYxy48QmnWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl
rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 17:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4299 (0x10cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC6B4, serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05
Validity
Not Before: Nov 14 17:17:10 2026 GMT
Not After : Nov 21 17:17:10 2026 GMT
Subject: CN=6af89797-b51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:18:e8:4e:2f:9a:b3:0e:46:8d:d8:8e:da:b7:
4e:f2:27:d7:ab:b3:65:9d:62:53:dd:15:c5:9a:5c:
48:c0:60:b5:8e:d5:f2:b0:e8:65:51:3f:d7:1b:98:
74:24:85:7f:eb:f8:a1:a8:38:b5:56:47:61:91:b1:
46:b7:2f:80:b4:1b:cc:66:06:1a:0e:aa:ef:c0:0e:
4f:59:85:c1:0a:56:fc:b3:a7:01:ee:74:63:10:e1:
1e:5a:ff:00:a1:50:99:e3:fe:09:7c:29:88:0c:98:
e1:02:5a:1f:ef:67:5e:53:b0:fb:74:69:08:27:e4:
4a:48:40:46:75:53:23:b8:56:b8:fc:ae:a9:e8:bc:
b9:e1:d0:17:7d:0c:c0:84:4e:5b:70:25:0e:04:8f:
38:67:9f:18:2a:7e:21:47:cc:8b:cb:6b:c7:09:27:
e2:5a:42:99:7c:df:60:c1:19:d9:3a:92:45:7c:15:
94:3f:fd:27:71:04:17:09:98:83:8c:4b:78:ae:10:
e7:ab:1c:10:57:98:d8:5e:46:c0:6b:de:d8:ae:b9:
49:f2:04:1a:e8:a7:64:1f:dd:59:9e:f4:6b:a5:10:
3c:14:72:b6:4d:ea:1b:ae:42:67:21:a0:fc:2b:b1:
dd:66:c7:ee:b5:e3:1f:ec:a2:2b:47:fb:fd:0e:f4:
e7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:48:4E:A8:34:BC:AF:30:3C:11:08:BD:8B:BB:66:57:66:1F:65:19
X509v3 Authority Key Identifier:
keyid:6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:f5:a5:51:2a:77:f7:b7:ac:0e:84:fc:75:4e:a7:26:89:1f:
70:99:00:58:69:02:8b:7f:5c:e0:22:b2:55:57:db:26:55:59:
bd:b2:05:62:5b:3d:39:73:59:48:e6:0f:14:a9:44:91:b7:cd:
98:ed:39:cc:b1:f7:21:da:43:17:a1:35:38:11:f8:76:73:af:
56:14:9a:7b:85:d7:5c:51:7e:53:58:ba:43:65:2c:e1:42:8d:
78:f8:26:a4:9a:77:17:a3:25:48:6c:f2:36:03:6e:c2:38:b2:
84:2a:56:77:c8:3e:8e:e0:0a:5a:24:78:1c:1f:11:fd:4f:6e:
f0:cb:3e:62:ea:0d:10:2c:67:61:74:ed:54:db:92:54:8d:35:
41:7d:dc:7f:41:70:7f:1c:fe:07:f3:cb:e9:fc:ef:9b:51:19:
cb:48:3d:72:38:16:1c:94:96:ed:9d:f5:3c:b2:9f:88:52:7a:
7f:3d:eb:d0:95:2f:6c:27:76:e7:9a:9d:96:79:16:c1:c4:fc:
24:08:7e:89:51:44:80:6a:f9:0d:8d:cc:e7:83:a3:37:b5:9a:
27:1c:00:ce:88:12:aa:72:3a:16:ca:54:d5:4f:d3:7b:77:62:
14:b6:e3:8c:c8:57:d7:3f:af:3a:f5:cb:dd:53:4d:34:ae:64:
36:d0:8f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:21:48 2026 by rpki-client