
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft
File: bKwrcgiF6COCTBln7fw2Psh0do0.mft (raw, json)
Hash identifier: IJsLfp0HAIC3NAquPSM2oVtZrzheRVt0gNY1ale1KPA=
Subject key identifier: 81:3A:86:CB:E1:E6:CA:00:6B:5D:74:77:92:76:3A:2F:0F:A9:BD:45
Authority key identifier: 6C:AC:2B:72:08:85:E8:23:82:4C:19:67:ED:FC:36:3E:C8:74:76:8D
Certificate issuer: /CN=A91D5BA2/serialNumber=6CAC2B720885E823824C1967EDFC363EC874768D
Certificate serial: 0504
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft
Manifest number: 04FD
Signing time: Sun 10 May 2026 23:45:54 +0000
Manifest this update: Sun 10 May 2026 23:45:54 +0000
Manifest next update: Sun 17 May 2026 23:45:54 +0000
Files and hashes: 1: bKwrcgiF6COCTBln7fw2Psh0do0.crl (hash: sCv4NXvb0DselZMiXHXuuO13JiK14202obiyBgEFMOI=)
2: AA5ADA7C579511ECA9BDE14AC4F9AE02.roa (hash: +cG95cMT4bOP7gonlzVBmEDm9qPAdHE8HAO4W9Qjhh4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.crl
rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 17 May 2026 23:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1284 (0x504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5BA2, serialNumber=6CAC2B720885E823824C1967EDFC363EC874768D
Validity
Not Before: May 10 23:45:54 2026 GMT
Not After : May 17 23:45:54 2026 GMT
Subject: CN=6a0118b2-f66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:28:0b:36:b0:e6:c9:d5:0a:44:bc:a4:8b:
ab:0c:e0:3e:67:fc:80:ec:14:0e:31:19:24:99:7c:
c0:95:56:25:5a:f5:15:92:61:0d:e2:9a:b3:c6:18:
ea:99:aa:85:d3:2e:fa:10:2c:d7:32:87:b1:b9:d2:
7c:29:ab:96:40:9c:7f:be:32:c7:52:d5:f7:7b:5e:
f8:23:36:94:71:95:74:6a:92:c5:2f:fc:52:cb:93:
71:8b:70:2c:23:54:b6:00:4b:93:99:4c:d5:2a:41:
6c:fc:cc:3e:d7:08:18:e3:88:5d:be:e5:90:c8:fb:
ec:26:4a:98:80:df:57:26:41:e1:7f:98:7c:52:64:
04:53:e4:ff:96:97:12:65:42:33:06:34:8c:19:44:
55:0e:20:07:e1:da:69:23:27:e0:3b:e1:55:f2:da:
68:3d:03:0e:a5:87:06:cf:df:92:45:05:2f:c3:fb:
0d:99:28:63:ad:a8:e0:52:d3:ca:aa:a5:2d:ee:d7:
d0:8e:5a:12:dc:ed:83:f1:68:b6:31:73:37:c2:31:
79:a5:7c:c2:97:82:18:d0:d1:71:40:d9:e9:23:61:
87:0a:3b:b7:62:05:81:f9:64:34:0f:1d:77:ea:de:
e4:f4:29:1e:29:62:70:2c:71:77:a1:73:75:7d:b4:
4b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3A:86:CB:E1:E6:CA:00:6B:5D:74:77:92:76:3A:2F:0F:A9:BD:45
X509v3 Authority Key Identifier:
keyid:6C:AC:2B:72:08:85:E8:23:82:4C:19:67:ED:FC:36:3E:C8:74:76:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4c:cd:48:c2:2e:52:6d:61:9f:1a:15:9d:f1:82:c9:32:4d:
4c:c6:50:ed:f7:c7:e1:47:5a:03:0a:2f:f0:bb:c7:40:46:ed:
4a:02:9e:67:0a:ac:56:af:ff:42:d3:ae:60:d4:15:38:f5:d2:
79:7f:70:16:53:b3:62:bf:3d:e4:0d:c0:b6:6e:63:78:93:e1:
77:41:ad:0f:dd:9a:b5:3b:87:dc:c8:8e:14:b0:65:9e:eb:77:
58:36:b5:68:3c:2c:8c:17:87:40:b5:72:35:88:74:bd:15:d5:
47:18:d5:96:b1:3c:ca:ae:3c:ba:f0:3c:5b:a6:81:87:c3:e9:
d3:46:db:23:d4:24:17:21:78:4d:c9:2e:a9:b0:84:c6:90:6c:
d6:ed:37:63:2e:2f:2f:cd:60:23:19:0b:7b:13:47:e1:f3:7f:
a3:62:86:ed:83:55:2a:4a:92:09:3b:ce:3d:ab:a6:a8:44:20:
ea:fa:41:02:22:96:d6:2f:be:ab:d0:a3:38:25:ea:ba:b1:f7:
20:c9:14:4a:f3:25:60:49:8e:ed:bc:4e:80:22:00:f2:de:bf:
3c:8f:23:67:32:2b:c0:07:b9:15:e3:74:83:4e:17:13:61:8e:
05:a8:74:4d:15:7f:76:bb:a5:18:f0:b0:db:8f:6e:fb:f3:10:
d7:25:99:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:24:21 2026 by rpki-client