
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
File: BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft (raw, json)
Hash identifier: xRnInol4fQH/4UXUFBAjgEk3JXVXcCKMi4bKqfoKosU=
Subject key identifier: A2:F9:EB:4D:1B:D2:97:BE:48:42:F8:A8:16:37:29:84:A9:4E:45:5E
Authority key identifier: 06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
Certificate issuer: /CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Certificate serial: 174B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
Manifest number: 172F
Signing time: Tue 12 May 2026 16:38:06 +0000
Manifest this update: Tue 12 May 2026 16:38:05 +0000
Manifest next update: Tue 19 May 2026 16:38:05 +0000
Files and hashes: 1: BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl (hash: FFzcz34vcBc9WZjy0P8RTfn1ELSad+Qli7PocGaQN/I=)
2: 091435C84FA911EFB86F4D40C4F9AE02.roa (hash: CJNG/K8L9+DgV5sR3qhRIaI7DfSSiBEZ1i4T4JpMdyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl
rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:38:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5963 (0x174b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CE8, serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Validity
Not Before: May 12 16:38:05 2026 GMT
Not After : May 19 16:38:05 2026 GMT
Subject: CN=6a03576e-0694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:94:0a:08:70:14:08:f4:e3:c2:fd:16:34:
48:92:35:cb:4e:f3:b9:a3:7c:cb:b2:3e:9c:6a:24:
78:c5:12:03:27:f9:4c:13:c1:37:4e:03:d2:0b:67:
f7:c1:62:8d:a8:1d:e6:18:65:6a:99:e7:68:5d:a0:
6f:bc:01:0f:a7:46:e0:59:db:37:0a:06:13:0c:69:
ad:38:dd:96:08:3d:97:19:f4:b0:8e:a2:f8:08:90:
50:7f:4a:1f:ea:c7:dd:a3:86:6c:d1:64:c3:5a:ec:
ff:31:1b:13:5c:21:d1:21:50:1e:a8:f9:f3:4f:5c:
71:4a:ed:ce:02:95:f5:64:b4:d6:83:dc:1f:7f:3c:
0f:72:07:e8:c3:cf:41:7f:6e:d0:49:9b:d4:1f:77:
f6:2b:4c:8d:f6:83:e2:f6:ca:a8:17:46:23:44:10:
ba:34:f8:e9:4d:82:2c:f9:0a:59:26:c5:91:24:68:
50:0b:8d:92:5b:e8:a2:c7:82:19:c1:b0:8f:30:6d:
31:7d:5c:80:ac:67:54:3b:58:34:2d:6a:ee:61:d4:
f3:88:85:4d:c6:68:b4:20:81:0b:84:1f:d6:de:1b:
17:b7:8d:b3:9b:0d:81:7d:3b:64:a0:e1:28:b9:ab:
2a:f1:9e:88:76:a8:57:72:5f:e6:4c:e3:b3:db:79:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F9:EB:4D:1B:D2:97:BE:48:42:F8:A8:16:37:29:84:A9:4E:45:5E
X509v3 Authority Key Identifier:
keyid:06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:0f:d2:f3:bc:13:88:6c:43:78:5e:96:c4:26:a5:cc:ff:a4:
24:e3:f2:81:9b:53:2b:ff:7f:88:e2:35:77:d8:ca:f7:8b:d0:
82:62:71:55:05:73:10:dc:41:8c:5d:09:0b:41:56:cd:3f:d9:
f0:d5:af:ae:ad:92:47:47:a7:3c:60:ab:46:71:84:2f:38:0b:
0b:a8:b5:fe:a7:94:a2:df:0c:86:b7:ca:44:a5:86:fd:a1:58:
04:07:19:34:59:d8:0c:92:b1:13:80:27:ed:c9:b3:8b:03:68:
b0:2a:73:90:83:ff:57:c0:94:59:bd:06:fb:6f:04:21:53:04:
a7:bd:b4:32:58:14:5b:c6:8e:7d:e9:7e:2a:ec:8d:e5:20:6d:
5e:c9:de:c8:a9:fb:e5:8a:88:6c:75:ee:8e:51:9b:6e:a5:00:
41:65:91:04:d2:ea:b9:58:fc:b6:bf:b7:f1:47:13:83:a8:7c:
a5:47:55:90:97:2c:73:69:83:d9:be:2f:94:78:ca:f4:85:11:
b4:6e:84:91:1c:60:01:6d:bd:e7:1f:48:02:fc:8b:2e:7f:f9:
53:05:29:5f:b7:25:c6:07:d7:3b:29:71:08:e0:ca:20:f2:d4:
3b:c5:2d:c9:af:89:f8:22:38:78:4d:87:eb:b1:f2:f8:2b:1e:
2e:ec:3b:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBDRTgxMTAvBgNVBAUTKDA2QzYyN0Q5QzMxMkM3QjQ3RDFDM0E1M0I0NDc1NUEx
MEE2ODQ4N0MwHhcNMjYwNTEyMTYzODA1WhcNMjYwNTE5MTYzODA1WjAYMRYwFAYD
VQQDEw02YTAzNTc2ZS0wNjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1FeUCghwFAj048L9FjRIkjXLTvO5o3zLsj6caiR4xRIDJ/lME8E3TgPSC2f3
wWKNqB3mGGVqmedoXaBvvAEPp0bgWds3CgYTDGmtON2WCD2XGfSwjqL4CJBQf0of
6sfdo4Zs0WTDWuz/MRsTXCHRIVAeqPnzT1xxSu3OApX1ZLTWg9wffzwPcgfow89B
f27QSZvUH3f2K0yN9oPi9sqoF0YjRBC6NPjpTYIs+QpZJsWRJGhQC42SW+iix4IZ
wbCPMG0xfVyArGdUO1g0LWruYdTziIVNxmi0IIELhB/W3hsXt42zmw2BfTtkoOEo
uasq8Z6IdqhXcl/mTOOz23mSrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKL5600b
0pe+SEL4qBY3KYSpTkVeMB8GA1UdIwQYMBaAFAbGJ9nDEse0fRw6U7RHVaEKaEh8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENFOC85MDBEMjY0NjA2
NkExMUU4QjlCQUY2ODJDNEY5QUUwMi9Cc1luMmNNU3g3UjlIRHBUdEVkVm9RcG9T
SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JzWW4yY01TeDdSOUhEcFR0RWRWb1Fwb1NIdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MENFOC85MDBEMjY0NjA2NkExMUU4QjlCQUY2ODJDNEY5QUUwMi9Cc1luMmNNU3g3
UjlIRHBUdEVkVm9RcG9TSHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACQ/S87wTiGxDeF6WxCalzP+kJOPygZtTK/9/iOI1d9jK94vQgmJxVQVzENxB
jF0JC0FWzT/Z8NWvrq2SR0enPGCrRnGELzgLC6i1/qeUot8MhrfKRKWG/aFYBAcZ
NFnYDJKxE4An7cmziwNosCpzkIP/V8CUWb0G+28EIVMEp720MlgUW8aOfel+KuyN
5SBtXsneyKn75YqIbHXujlGbbqUAQWWRBNLquVj8tr+38UcTg6h8pUdVkJcsc2mD
2b4vlHjK9IURtG6EkRxgAW295x9IAvyLLn/5UwUpX7clxgfXOylxCODKIPLUO8Ut
ya+J+CI4eE2H67Hy+CseLuw73Q==
-----END CERTIFICATE-----
Generated at Wed May 13 11:33:08 2026 by rpki-client