
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
File: bCTOJGStN3HjLDMIGNG32gFMaQk.mft (raw, json)
Hash identifier: +Dmc7BQJpMIwi/r0sAs/uINBrd1yXHyZ6xuPfk9WowU=
Subject key identifier: 27:64:DB:C1:65:67:28:95:71:0C:D8:5E:C3:75:25:DD:1F:79:AD:43
Authority key identifier: 6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09
Certificate issuer: /CN=A91DC84C/serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
Manifest number: 0196
Signing time: Fri 27 Mar 2026 03:48:56 +0000
Manifest this update: Fri 27 Mar 2026 03:48:56 +0000
Manifest next update: Fri 03 Apr 2026 03:48:56 +0000
Files and hashes: 1: bCTOJGStN3HjLDMIGNG32gFMaQk.crl (hash: T638uue16zpRvzHz8e8z/a2w17Uz5SfCqhQ+cGiU/i8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl
rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 03:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC84C, serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909
Validity
Not Before: Mar 27 03:48:56 2026 GMT
Not After : Apr 3 03:48:56 2026 GMT
Subject: CN=69c5fe28-9195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:95:3a:43:e3:72:d0:c6:d7:93:8f:58:06:2c:
08:5e:8b:01:ef:fc:87:4a:be:04:e3:28:ef:7f:2b:
8a:f1:4a:20:a4:b3:97:b7:59:89:2d:18:6f:db:12:
88:69:68:f1:98:10:d4:eb:40:56:53:e9:b9:88:d4:
2c:34:51:ad:e9:e2:41:01:c6:40:5a:31:8f:f9:0a:
be:cd:0d:1f:e9:ca:eb:97:17:ca:a7:d7:be:58:dc:
11:93:6c:29:44:68:2f:35:2b:b1:65:79:61:4a:f4:
82:cd:f7:35:6d:d0:3f:35:75:10:1d:55:44:10:9f:
ed:f9:3b:cc:bb:06:0a:9d:55:f2:52:59:4a:61:56:
4d:bf:5c:ba:96:94:38:43:01:f2:20:20:97:e7:36:
d0:f7:0a:07:ff:bd:50:ac:02:d8:27:18:7c:ab:4f:
fc:2b:3e:a6:a4:ac:90:c1:88:d2:30:a7:fd:24:9a:
4e:4f:1b:c2:47:20:99:be:92:da:55:8b:0b:41:64:
a2:36:72:14:85:30:14:7a:de:3c:7b:ea:40:12:5a:
9a:1a:b5:19:7d:e1:f6:b6:b0:05:8d:15:b9:73:fe:
e9:aa:46:86:70:cd:86:b8:b0:4e:c1:c9:1c:17:50:
93:1a:ca:55:37:b2:9d:5b:bb:9d:06:91:e4:4c:80:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:64:DB:C1:65:67:28:95:71:0C:D8:5E:C3:75:25:DD:1F:79:AD:43
X509v3 Authority Key Identifier:
keyid:6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c0:22:f8:52:b0:db:3b:2d:c4:ae:56:8a:52:7e:6b:ce:d0:
08:ca:c4:fa:66:bb:f0:0f:db:a1:a5:6b:f4:9a:da:e2:c2:c7:
b1:7d:b1:b4:9d:14:7a:57:ce:bf:9d:c9:ed:c0:ed:53:61:b1:
18:1c:0b:6e:73:e4:55:06:52:88:6c:b6:b9:1e:28:5b:96:41:
c2:f3:7f:16:68:9e:1c:da:1b:74:06:d4:33:89:34:e1:5e:d9:
ac:e7:77:74:85:f7:84:3d:5a:09:95:1c:18:c4:2b:e4:7a:8f:
14:90:2d:0d:5f:83:e8:ef:1b:37:b4:f4:fc:e1:71:0d:f7:cf:
cb:f2:3f:cd:23:47:7c:33:98:91:5d:c9:76:73:37:a6:a4:50:
54:54:d5:93:89:3d:bf:57:6c:38:07:34:c8:28:ac:ce:7a:ed:
a6:ac:a3:ba:78:82:f7:80:cd:06:75:71:63:cb:72:23:37:d8:
6d:03:d4:c4:62:4f:68:a4:a0:55:1b:d2:80:09:b8:3c:2b:36:
48:cc:94:aa:32:d5:0e:88:09:45:fd:2d:79:a2:c8:23:5d:95:
f7:9a:48:12:d1:c6:1e:27:c0:93:04:22:62:c3:6c:3b:3e:ab:
79:cf:7a:09:73:64:da:35:55:f8:b9:41:6f:0b:00:be:5e:f4:
f6:22:38:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:46:51 2026 by rpki-client