
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
File: bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json)
Hash identifier: XsjRU3jy6ndMaQZiWN/nR5tB47KTNNhnZ95YAh2qfqA=
Subject key identifier: 6F:E6:A2:12:0A:01:C8:9F:26:49:22:F6:91:1A:F8:63:41:E4:2F:16
Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C
Certificate issuer: /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C
Certificate serial: 0A38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
Manifest number: 0A28
Signing time: Tue 24 Mar 2026 19:34:20 +0000
Manifest this update: Tue 24 Mar 2026 19:34:19 +0000
Manifest next update: Tue 31 Mar 2026 19:34:19 +0000
Files and hashes: 1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: 3vf6NSn+2B10pQHeq0cG+h6p6+tnLXzi6nCKR20AR2I=)
2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: 1mRV89mqNc+nLOCZGSyR4uuy7wclwLlHSJ3xFNf7VPs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl
rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2616 (0xa38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF24F, serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C
Validity
Not Before: Mar 24 19:34:19 2026 GMT
Not After : Mar 31 19:34:19 2026 GMT
Subject: CN=69c2e73c-3163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:ea:15:51:a6:3b:da:42:98:9e:e1:6f:bf:
a7:c3:83:39:cb:4f:60:4b:e1:53:fd:50:ae:cd:ce:
7f:0c:7b:34:35:00:bd:ed:8e:52:f6:87:8b:44:fc:
b9:e0:95:31:8d:7e:12:06:2c:2b:da:f1:47:02:42:
7d:60:a8:1d:db:5a:c1:6e:c0:92:26:fd:34:9d:97:
fb:26:16:ff:25:ec:81:cf:92:8c:b2:ca:76:46:a6:
4e:69:de:c9:66:a7:e5:fc:4f:53:ab:14:d2:63:16:
74:99:c0:34:d0:26:88:1e:4f:ce:6e:93:6e:ee:c0:
dc:06:8d:29:60:5a:b1:29:8c:6e:44:08:6b:2f:91:
af:5d:f7:6d:57:47:12:59:ea:5e:75:29:fa:9c:6c:
34:ec:87:e3:47:63:1f:2b:68:38:b4:75:7f:03:a8:
a7:1b:94:be:7f:9d:02:2d:0c:13:06:df:a7:15:ae:
10:4e:d0:6c:92:6d:50:99:78:4b:ef:5e:7a:67:3e:
fd:da:85:79:a6:39:29:f8:33:2b:16:15:35:2a:e2:
5e:5b:b1:a0:52:d6:27:c0:1f:73:5b:10:c4:24:f8:
c6:35:d0:a3:7c:25:be:64:62:d4:fd:67:30:12:29:
86:26:c3:a5:7c:b9:41:b6:94:c1:7b:75:43:6b:e1:
ee:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E6:A2:12:0A:01:C8:9F:26:49:22:F6:91:1A:F8:63:41:E4:2F:16
X509v3 Authority Key Identifier:
keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:9b:4e:15:2a:e3:30:f8:32:10:99:79:68:cc:25:d7:78:68:
2c:5b:c3:51:5f:28:b4:ee:99:06:e1:ad:f6:ae:f3:bb:ff:0b:
18:36:21:0c:33:47:cd:9d:e1:11:b7:59:07:76:f4:2e:fc:5b:
24:dd:b3:5b:d9:0e:94:97:bd:d7:6f:ed:99:7a:96:2b:ae:b0:
ca:c9:15:61:8f:d1:f0:37:95:9c:06:02:47:a1:16:36:9c:f1:
72:9c:ea:77:ef:05:70:8f:ae:67:e5:82:d7:39:b6:1e:cf:55:
9d:07:8c:47:9c:a2:94:99:f8:5f:8f:f1:53:83:9a:58:26:8c:
22:63:54:23:30:df:6d:8d:ed:54:5b:09:e9:00:c1:80:aa:5d:
fd:23:e3:da:91:4b:8f:ce:09:68:af:0e:19:10:b9:7d:6d:c4:
9d:b2:2b:7b:5e:48:57:e0:51:40:03:a4:9a:b0:3f:d9:37:37:
91:0f:90:41:d7:dd:92:86:05:19:ad:26:c8:ca:1d:28:8f:57:
de:a6:2e:f8:33:4e:d6:de:7e:bf:ee:1b:59:70:ea:fd:83:97:
1e:53:6a:bb:a4:1d:02:3a:db:fc:4a:2b:77:3e:16:df:23:40:
fd:db:e8:fa:c5:9e:14:6e:7c:e4:70:28:cb:4f:3c:80:ad:ef:
e1:73:36:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:41:29 2026 by rpki-client