
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
File: BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft (raw, json)
Hash identifier: 0Lky4TUN1nZLUlNwWxKKyP+uuKq1B5touT+eVIgqFfE=
Subject key identifier: AB:3B:03:42:FF:B7:B6:29:72:58:D9:71:86:49:2E:58:D5:11:EE:CE
Authority key identifier: 06:66:6A:EC:D7:8C:0A:5E:D1:37:90:A5:E9:AA:40:C3:49:0F:BC:F1
Certificate issuer: /CN=A91F63DC/serialNumber=06666AECD78C0A5ED13790A5E9AA40C3490FBCF1
Certificate serial: 01D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
Manifest number: 01CF
Signing time: Wed 25 Mar 2026 02:57:48 +0000
Manifest this update: Wed 25 Mar 2026 02:57:48 +0000
Manifest next update: Wed 01 Apr 2026 02:57:48 +0000
Files and hashes: 1: BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl (hash: E9AtuIuRxydDTnrwwLuYIDN2dnm4cvv5WIN4muiJ4NU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl
rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F63DC, serialNumber=06666AECD78C0A5ED13790A5E9AA40C3490FBCF1
Validity
Not Before: Mar 25 02:57:48 2026 GMT
Not After : Apr 1 02:57:48 2026 GMT
Subject: CN=69c34f2c-d7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:c7:2a:ed:b3:f0:ab:d7:26:d4:2c:ec:8d:
c3:62:56:28:99:f7:7c:b3:0f:95:61:de:c8:67:86:
ae:8e:5f:2d:b6:f3:12:58:bc:9f:d4:e5:82:e5:1b:
4e:dd:66:19:80:d7:13:d6:5e:95:c7:6f:32:3a:f0:
db:de:07:0f:80:12:12:07:8d:f0:15:6e:8d:79:a1:
bb:5a:c6:9a:ad:65:01:3a:5d:2e:5f:0c:75:ca:ed:
f6:54:c2:4f:b0:07:2b:95:1e:b0:15:dd:b0:e7:08:
3a:e2:28:da:f6:fb:ce:9c:d3:15:f3:5a:66:48:c4:
9d:7f:6d:d4:ae:df:aa:7e:03:33:0b:b7:bc:c7:ad:
c1:a1:9d:a3:dc:91:35:09:72:01:16:32:a9:ab:55:
e4:36:8e:66:6a:db:30:d0:0d:d7:44:e4:76:5a:fb:
41:2a:71:ba:1b:41:14:32:4e:70:c8:ce:96:d4:0a:
50:0a:49:ac:0c:4f:09:50:d5:ca:b7:13:e8:a2:b6:
66:d2:a5:44:b3:a4:eb:10:3f:84:17:d6:6e:81:4f:
f3:e6:2e:70:d2:57:f1:91:a0:d6:79:14:76:d7:30:
3e:f8:74:10:c0:59:3d:3a:82:3c:83:dc:35:aa:d1:
58:42:a6:c3:31:d1:b3:d8:39:89:a6:58:c9:02:aa:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3B:03:42:FF:B7:B6:29:72:58:D9:71:86:49:2E:58:D5:11:EE:CE
X509v3 Authority Key Identifier:
keyid:06:66:6A:EC:D7:8C:0A:5E:D1:37:90:A5:E9:AA:40:C3:49:0F:BC:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:bc:78:ff:02:fc:7a:c5:32:51:ef:4b:d3:1a:7e:19:9f:ba:
0a:bb:f9:07:2e:aa:56:43:1a:4b:89:8b:e8:09:4b:dc:cf:18:
c2:e8:57:20:ed:fb:6d:ae:82:9e:ad:8f:36:16:0d:b8:f3:89:
56:a3:e0:fe:cf:d9:64:5b:58:1e:4c:32:aa:20:d9:1d:23:4d:
90:2f:f1:35:81:3f:9a:03:67:14:52:9d:2f:53:31:04:1d:5b:
78:0b:e5:2a:85:b2:5e:67:c9:ee:9d:b2:58:43:66:5d:b7:a4:
f5:b0:14:2b:03:b2:dc:87:dd:1f:67:14:27:42:77:bc:82:a7:
fa:90:5d:5c:a5:a0:8e:41:63:a8:6c:5c:0e:0b:e1:3c:4c:b5:
79:60:6a:b5:04:5c:99:b2:5d:60:89:9e:b6:6c:47:d5:98:80:
75:d9:90:36:4b:53:58:b3:98:19:8f:3c:9c:d2:8e:05:0b:61:
66:ba:ec:fe:8a:26:5d:95:d6:fd:14:fc:05:08:f0:d9:e4:e7:
5d:69:71:6e:bb:e5:5b:cc:83:f4:03:52:4a:0a:99:11:1a:ca:
47:8a:43:1c:30:01:7a:cc:d4:57:05:d1:e2:61:93:93:65:c5:
49:ab:2d:5b:db:75:8e:7e:fe:0c:9c:60:8c:cf:6f:a2:ff:3d:
5f:73:85:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjYzREMxMTAvBgNVBAUTKDA2NjY2QUVDRDc4QzBBNUVEMTM3OTBBNUU5QUE0MEMz
NDkwRkJDRjEwHhcNMjYwMzI1MDI1NzQ4WhcNMjYwNDAxMDI1NzQ4WjAYMRYwFAYD
VQQDEw02OWMzNGYyYy1kN2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxnDHKu2z8KvXJtQs7I3DYlYomfd8sw+VYd7IZ4aujl8ttvMSWLyf1OWC5RtO
3WYZgNcT1l6Vx28yOvDb3gcPgBISB43wFW6NeaG7WsaarWUBOl0uXwx1yu32VMJP
sAcrlR6wFd2w5wg64ija9vvOnNMV81pmSMSdf23Urt+qfgMzC7e8x63BoZ2j3JE1
CXIBFjKpq1XkNo5matsw0A3XROR2WvtBKnG6G0EUMk5wyM6W1ApQCkmsDE8JUNXK
txPoorZm0qVEs6TrED+EF9ZugU/z5i5w0lfxkaDWeRR21zA++HQQwFk9OoI8g9w1
qtFYQqbDMdGz2DmJpljJAqrZHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKs7A0L/
t7YpcljZcYZJLljVEe7OMB8GA1UdIwQYMBaAFAZmauzXjApe0TeQpemqQMNJD7zx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjNEQy8wNDMxNTJFMjY2
NTMxMUVFOUM2OEVFMkJDNEY5QUUwMi9CbVpxN05lTUNsN1JONUNsNmFwQXcwa1B2
UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JtWnE3TmVNQ2w3Uk41Q2w2YXBBdzBrUHZQRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NjNEQy8wNDMxNTJFMjY2NTMxMUVFOUM2OEVFMkJDNEY5QUUwMi9CbVpxN05lTUNs
N1JONUNsNmFwQXcwa1B2UEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOLx4/wL8esUyUe9L0xp+GZ+6Crv5By6qVkMaS4mL6AlL3M8YwuhXIO37ba6C
nq2PNhYNuPOJVqPg/s/ZZFtYHkwyqiDZHSNNkC/xNYE/mgNnFFKdL1MxBB1beAvl
KoWyXmfJ7p2yWENmXbek9bAUKwOy3IfdH2cUJ0J3vIKn+pBdXKWgjkFjqGxcDgvh
PEy1eWBqtQRcmbJdYImetmxH1ZiAddmQNktTWLOYGY88nNKOBQthZrrs/oomXZXW
/RT8BQjw2eTnXWlxbrvlW8yD9ANSSgqZERrKR4pDHDABeszUVwXR4mGTk2XFSast
W9t1jn7+DJxgjM9vov89X3OF6w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:16:21 2026 by rpki-client