
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
File: bIAwUr-WwqtKuqntJqOptGOWBaM.mft (raw, json)
Hash identifier: oL/zywNXmCroYIy63z/+dR9K5qwMpAwZikju2NYk57E=
Subject key identifier: 7A:A1:A1:F0:9E:30:57:62:32:DD:52:5C:45:D1:54:98:4B:DC:29:AA
Authority key identifier: 6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3
Certificate issuer: /CN=A91F89A2/serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3
Certificate serial: 0193
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
Manifest number: 0190
Signing time: Wed 25 Mar 2026 03:39:55 +0000
Manifest this update: Wed 25 Mar 2026 03:39:55 +0000
Manifest next update: Wed 01 Apr 2026 03:39:55 +0000
Files and hashes: 1: bIAwUr-WwqtKuqntJqOptGOWBaM.crl (hash: NGEh2PmtylY6gu7eyTgm8Xpb7PrfGoJ7T0sCVlhjhgE=)
2: 0FBF57D2F16611EEB75BE640C4F9AE02.roa (hash: cs0XXfBuh/azVaZsG4BADKeGQ7mBKcl8emhLzIxBwKs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl
rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89A2, serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3
Validity
Not Before: Mar 25 03:39:55 2026 GMT
Not After : Apr 1 03:39:55 2026 GMT
Subject: CN=69c3590b-21e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:af:87:09:b7:a4:00:97:93:87:7b:7d:ff:
45:fd:f9:a3:36:56:e1:54:5f:4c:9f:ad:e5:f9:df:
a1:e5:91:2c:99:d4:51:0f:93:55:4d:9d:dc:c1:42:
57:29:01:16:5a:21:79:64:7b:51:c4:f9:f2:aa:8b:
47:a4:33:f4:cf:c0:d5:49:b3:78:72:c8:8f:28:cb:
35:4e:6a:b4:d8:69:9a:96:63:42:0b:26:37:97:11:
fe:25:12:7f:1e:2d:b8:d1:bd:38:24:da:20:2a:d2:
14:f8:3e:f8:72:79:f7:e0:8e:56:c0:30:fd:8a:69:
07:04:cf:a9:04:8e:04:5b:69:0a:d8:11:de:9a:a3:
74:0c:b9:d1:0d:c9:b8:86:33:11:00:74:0d:04:c2:
6b:74:2c:94:ad:a5:3e:65:7c:3d:26:88:2a:22:d6:
18:90:ef:b2:b7:55:41:44:45:8e:ce:5f:54:55:a4:
81:de:5e:83:3c:da:90:d7:19:4f:52:fa:90:e4:67:
77:63:2d:76:a1:b7:13:d7:35:2f:68:22:cc:1b:ac:
85:8c:ec:51:19:e7:8d:7f:7b:78:28:4a:24:83:80:
53:53:5b:94:e9:a3:8d:4b:73:80:e5:fe:fa:76:e1:
fc:b7:d9:28:57:a1:c7:a6:53:3d:d9:c6:9d:30:ee:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A1:A1:F0:9E:30:57:62:32:DD:52:5C:45:D1:54:98:4B:DC:29:AA
X509v3 Authority Key Identifier:
keyid:6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:52:62:02:f2:d5:3a:eb:3a:49:26:d4:4a:4f:cf:7d:e5:42:
9e:9a:b2:61:4f:a4:5d:01:69:5b:ec:af:6e:d5:c2:7c:96:a1:
c3:ad:86:46:50:62:ee:42:10:bd:96:68:80:5c:d8:f6:60:ca:
f3:1f:66:b8:ab:42:0b:8c:09:6a:18:ff:82:9f:3f:53:c5:fd:
ab:d3:57:27:fa:06:f5:ad:8a:61:63:03:6a:99:cc:e6:8a:0e:
12:56:b9:e4:86:fe:33:37:bd:fc:09:9d:33:b6:6e:31:0a:f3:
f7:99:94:b5:28:13:5d:ac:d2:78:06:66:cb:e0:18:f9:24:4b:
96:7c:15:ba:03:01:e6:90:35:44:f8:54:fd:44:5b:42:77:5d:
d2:5c:9c:42:ab:00:28:ff:80:e3:27:6c:67:79:b8:cb:90:b3:
72:f2:19:1f:75:2b:35:32:fe:a3:29:7f:58:ee:c3:78:05:19:
2b:af:df:ca:fb:40:97:c1:22:3a:10:f0:f6:ca:d9:2a:e2:90:
73:9e:33:d7:78:4c:59:5c:ab:03:ec:a8:80:56:71:82:c1:ad:
2d:42:8d:68:55:71:e8:6e:97:44:89:db:b7:53:ac:4c:23:1f:
0d:e7:21:79:09:37:6a:37:8f:39:15:9f:58:fa:12:6b:0c:8a:
c3:d3:b4:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5QTIxMTAvBgNVBAUTKDZDODAzMDUyQkY5NkMyQUI0QUJBQTlFRDI2QTNBOUI0
NjM5NjA1QTMwHhcNMjYwMzI1MDMzOTU1WhcNMjYwNDAxMDMzOTU1WjAYMRYwFAYD
VQQDEw02OWMzNTkwYi0yMWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuXGvhwm3pACXk4d7ff9F/fmjNlbhVF9Mn63l+d+h5ZEsmdRRD5NVTZ3cwUJX
KQEWWiF5ZHtRxPnyqotHpDP0z8DVSbN4csiPKMs1Tmq02GmalmNCCyY3lxH+JRJ/
Hi240b04JNogKtIU+D74cnn34I5WwDD9imkHBM+pBI4EW2kK2BHemqN0DLnRDcm4
hjMRAHQNBMJrdCyUraU+ZXw9JogqItYYkO+yt1VBREWOzl9UVaSB3l6DPNqQ1xlP
UvqQ5Gd3Yy12obcT1zUvaCLMG6yFjOxRGeeNf3t4KEokg4BTU1uU6aONS3OA5f76
duH8t9koV6HHplM92cadMO7PWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHqhofCe
MFdiMt1SXEXRVJhL3CmqMB8GA1UdIwQYMBaAFGyAMFK/lsKrSrqp7SajqbRjlgWj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlBMi9CQ0JBRTBDRUM1
NDExMUVFQUJDMkMzODVDNEY5QUUwMi9iSUF3VXItV3dxdEt1cW50SnFPcHRHT1dC
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JJQXdVci1Xd3F0S3VxbnRKcU9wdEdPV0JhTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODlBMi9CQ0JBRTBDRUM1NDExMUVFQUJDMkMzODVDNEY5QUUwMi9iSUF3VXItV3dx
dEt1cW50SnFPcHRHT1dCYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAflJiAvLVOus6SSbUSk/PfeVCnpqyYU+kXQFpW+yvbtXCfJahw62GRlBi7kIQ
vZZogFzY9mDK8x9muKtCC4wJahj/gp8/U8X9q9NXJ/oG9a2KYWMDapnM5ooOEla5
5Ib+Mze9/AmdM7ZuMQrz95mUtSgTXazSeAZmy+AY+SRLlnwVugMB5pA1RPhU/URb
Qndd0lycQqsAKP+A4ydsZ3m4y5CzcvIZH3UrNTL+oyl/WO7DeAUZK6/fyvtAl8Ei
OhDw9srZKuKQc54z13hMWVyrA+yogFZxgsGtLUKNaFVx6G6XRInbt1OsTCMfDech
eQk3ajePORWfWPoSawyKw9O0Ew==
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:45:49 2026 by rpki-client