
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
File: bCTOJGStN3HjLDMIGNG32gFMaQk.mft (raw, json)
Hash identifier: KcDlZvtH3rxBH0Z7p70f0T2QMMLPBhVUw6ZU8CbQL08=
Subject key identifier: 25:F5:A0:32:67:78:61:C0:62:E9:CD:21:1D:41:35:D5:D7:7A:2B:7E
Authority key identifier: 6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09
Certificate issuer: /CN=A91DC84C/serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909
Certificate serial: 01D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
Manifest number: 01D1
Signing time: Thu 23 Jul 2026 05:01:58 +0000
Manifest this update: Thu 23 Jul 2026 05:01:58 +0000
Manifest next update: Thu 30 Jul 2026 05:01:58 +0000
Files and hashes: 1: bCTOJGStN3HjLDMIGNG32gFMaQk.crl (hash: BLnpmjucvEf2YOX0MdCo15K17jbf/bjbiUtt5j+Qrdw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl
rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC84C, serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909
Validity
Not Before: Jul 23 05:01:58 2026 GMT
Not After : Jul 30 05:01:58 2026 GMT
Subject: CN=6a61a046-7dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b5:ee:01:cd:39:2a:54:a4:7a:c8:a8:13:04:
6a:87:a9:92:9f:f6:9f:a7:10:df:92:ec:ad:0d:70:
53:26:19:9c:3e:0c:37:c8:d1:8b:af:61:91:61:b9:
9d:50:6b:d3:27:a9:ee:74:71:9e:ae:ef:0d:ec:97:
2c:5b:bd:e8:d2:96:09:38:e1:14:c8:f9:30:5f:43:
8d:41:b8:f5:c5:6f:4a:28:11:1c:43:63:b7:7d:0a:
39:b4:ad:a7:fb:19:0c:8a:fd:fe:d3:ac:39:79:4a:
f9:86:42:ab:b4:e7:4b:b7:16:c0:1a:cb:c6:92:54:
70:80:af:13:80:ec:c4:29:d2:25:39:74:e7:b0:a3:
3a:e6:7c:cb:52:de:5a:0c:a6:5a:67:6f:a8:2e:d7:
c4:f7:2d:7f:54:34:92:cb:2d:37:0c:0c:01:c6:32:
7c:c8:9d:e2:91:95:13:e1:42:43:1e:b1:9d:a0:51:
e7:aa:77:5d:78:8d:b6:1e:12:4e:4e:19:ea:a6:39:
23:54:7b:fd:03:79:bf:cd:28:8c:7a:88:44:26:8d:
f0:6b:f7:ab:5a:0f:62:4c:f2:58:11:88:48:47:97:
e3:40:b1:cb:27:5d:d4:f4:3f:82:32:84:9d:7f:44:
3e:2b:16:d2:15:d4:05:e5:67:da:f9:46:12:ac:4a:
34:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F5:A0:32:67:78:61:C0:62:E9:CD:21:1D:41:35:D5:D7:7A:2B:7E
X509v3 Authority Key Identifier:
keyid:6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:95:39:bd:98:4a:e4:68:cb:a9:d2:69:45:10:c5:9e:06:85:
c4:90:b2:9f:64:35:2c:1b:6c:5c:d7:ef:db:95:ac:47:98:e3:
a2:7f:84:65:d4:d7:0b:50:58:4c:00:66:cc:03:eb:c0:f8:10:
f0:be:a3:b3:fc:95:39:a6:4b:0d:52:80:27:1d:94:11:35:26:
88:14:3f:53:9e:45:e7:30:c0:13:3d:2e:57:de:21:7e:4c:8f:
af:7b:45:ea:fb:80:91:06:4a:7c:13:ea:7e:7f:c9:0a:4d:c3:
3c:59:e1:d8:a3:32:3c:a7:a4:69:79:eb:f2:dd:ef:7a:46:61:
65:44:da:16:a4:ef:02:a1:f7:15:5a:c0:20:7d:2d:39:b1:3c:
99:85:12:ff:c2:db:ba:bd:a1:0b:34:51:40:1f:e1:26:15:6c:
e2:78:d8:43:2a:00:d7:5b:c4:82:68:dc:b1:1d:8d:db:dd:4c:
bf:4a:0d:46:aa:c0:7f:3b:db:f5:2a:a9:60:19:86:f8:3e:16:
c0:72:2e:c3:f0:4f:42:a0:85:e6:e6:20:6b:8f:27:65:92:ce:
2f:2c:0f:65:11:31:fb:f1:a3:36:e9:99:32:be:b5:60:8d:11:
9a:e5:2b:c6:12:75:07:43:4d:e2:2e:d6:b8:76:7b:f8:a2:c5:
79:e5:76:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:28 2026 by rpki-client