
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
File: BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft (raw, json)
Hash identifier: OrJPcmmTl1mAw0CB/OQ/Ly4TWChNentWNqEC42ZbqU4=
Subject key identifier: CD:29:CE:35:65:F9:B8:9C:2D:24:86:87:CE:9B:D2:02:80:50:9E:21
Authority key identifier: 06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
Certificate issuer: /CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Certificate serial: 176F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
Manifest number: 1753
Signing time: Wed 22 Jul 2026 16:42:24 +0000
Manifest this update: Wed 22 Jul 2026 16:42:23 +0000
Manifest next update: Wed 29 Jul 2026 16:42:23 +0000
Files and hashes: 1: BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl (hash: ICnU+hGahDan+qsnqsurH04jDauSRdM/Ay2clOZGHtc=)
2: 091435C84FA911EFB86F4D40C4F9AE02.roa (hash: CJNG/K8L9+DgV5sR3qhRIaI7DfSSiBEZ1i4T4JpMdyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl
rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5999 (0x176f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CE8, serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Validity
Not Before: Jul 22 16:42:23 2026 GMT
Not After : Jul 29 16:42:23 2026 GMT
Subject: CN=6a60f2f0-cb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:a0:90:b1:64:4e:0d:66:4b:e8:d7:e9:df:
f0:6c:bd:67:79:e0:60:29:c6:5b:31:ab:9b:4a:30:
12:8e:d4:2f:27:c7:66:f5:21:6e:91:a0:f1:55:6a:
99:65:b7:2b:1c:e1:56:2e:64:dc:d4:b2:9f:81:56:
06:b1:9d:a3:35:e6:45:43:86:6d:99:3d:f8:a5:01:
2a:7b:ad:48:28:f2:ec:d9:dd:9b:59:88:12:93:02:
88:13:11:3d:34:c0:0b:18:46:aa:85:a7:cf:75:f3:
91:a8:1b:cb:af:94:b2:97:8d:06:d7:7a:fc:e3:2f:
2d:89:c9:3f:06:22:cc:b4:f4:16:04:56:ba:c3:ca:
6f:f1:2c:9c:bf:d9:a5:f5:56:75:1b:be:46:49:5c:
0f:de:5a:d4:53:d7:60:1d:44:d4:78:b5:94:e3:0a:
d8:1e:5b:14:6e:3b:5d:8d:50:f5:5f:38:78:18:38:
f0:1a:a9:89:d8:96:92:e2:7c:6d:61:b8:1f:c8:c2:
d5:42:49:dd:03:58:0c:95:8a:74:bc:6b:36:e8:d5:
fb:22:16:22:30:45:d8:ca:57:40:a9:e9:c5:0d:ae:
69:19:ae:bd:9d:f4:ab:bf:89:eb:31:60:1c:19:7d:
9e:1e:ea:89:ae:52:09:a2:a9:18:09:ff:d8:84:d1:
4a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:29:CE:35:65:F9:B8:9C:2D:24:86:87:CE:9B:D2:02:80:50:9E:21
X509v3 Authority Key Identifier:
keyid:06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d2:37:a8:f3:65:3a:80:cc:ff:2a:ff:4b:0e:10:97:dc:91:
e4:79:e1:f0:5f:9b:12:9d:2a:88:8e:20:ad:dc:1a:86:34:10:
76:ef:30:63:65:51:4e:85:2a:5f:99:1e:0a:64:7b:bb:c7:7a:
16:08:6a:61:c8:45:f3:8f:dc:3d:73:7b:26:a4:f4:67:4a:c2:
4d:1f:f3:95:ec:ca:af:4c:6a:52:a4:3f:11:d9:fb:48:63:d8:
61:dd:52:b8:96:fb:81:11:ee:2c:f5:33:9f:2f:36:37:e1:22:
a7:aa:c5:73:83:1c:02:0c:4e:5f:9d:1c:5b:e3:33:00:44:11:
b0:c5:bf:05:70:c2:22:1a:2e:25:57:f3:50:16:94:b6:15:b0:
8e:a3:af:1b:5f:36:09:51:d1:a1:44:7f:8f:e8:4e:22:3f:8e:
56:35:36:f6:20:30:dc:78:8c:5b:c8:4d:b9:1e:47:8b:bf:36:
ed:9a:ce:4a:d0:98:e5:2b:11:55:e8:4d:ed:f0:f6:44:59:94:
2c:9c:cf:6b:d6:15:f4:e3:68:ef:0c:ec:70:f8:19:64:12:e8:
b8:6c:ee:c2:55:57:bf:a0:fe:40:b7:74:4f:77:dd:f1:77:1b:
c1:16:9e:0e:8a:7b:3e:95:6b:07:35:73:31:54:0a:fb:c9:19:
f4:5d:f6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:01:09 2026 by rpki-client