
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft
File: bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft (raw, json)
Hash identifier: Xz8WPZAWOyC+UgJWMuaFawImJjSBFMJ+J9sv0JerLMA=
Subject key identifier: B7:DF:2D:54:63:DF:CB:2C:9D:A7:52:5F:2D:E8:F5:00:5D:15:7C:25
Authority key identifier: 6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65
Certificate issuer: /CN=A91240E6/serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65
Certificate serial: 2720
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft
Manifest number: 2701
Signing time: Thu 24 Sep 2026 15:38:19 +0000
Manifest this update: Thu 24 Sep 2026 15:38:19 +0000
Manifest next update: Thu 01 Oct 2026 15:38:19 +0000
Files and hashes: 1: bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl (hash: pWRNWOAy8e2eukLc3z63acLC/j+25OiQiC3F0u9Y2cM=)
2: 4DF2AB2886FE11F194514C90ABEE528E.roa (hash: XfRORHPDEUdxdb4LVfe48BfYJNOGVDgQbH1NwVOIeuc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl
rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:38:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10016 (0x2720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91240E6, serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65
Validity
Not Before: Sep 24 15:38:19 2026 GMT
Not After : Oct 1 15:38:19 2026 GMT
Subject: CN=6ab543eb-4b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:ed:2c:23:23:45:e0:9d:6f:39:f2:f2:55:
58:52:56:da:86:4e:46:37:a7:3e:15:00:ee:d9:a2:
73:b9:91:3d:c6:e1:7d:20:08:c5:4c:65:01:01:c6:
c0:e2:0a:cc:51:15:ab:7a:4a:79:61:f4:d4:00:60:
9d:8a:9f:e2:09:f4:8e:44:8e:e9:1e:da:c9:02:d7:
04:f6:d8:66:2d:b0:ea:1e:db:41:96:0b:75:7c:52:
1d:b0:00:14:5e:a0:c5:a1:ce:1e:cf:73:b1:9c:f0:
36:85:73:41:12:fc:1a:b5:5e:33:46:81:1a:62:8a:
f9:78:f1:65:c6:0a:ef:f7:65:e8:b6:d1:82:b4:43:
ba:bb:c1:f6:75:37:b9:b7:71:20:75:ab:a5:85:eb:
25:ac:cc:43:a3:36:d2:ab:54:c6:68:c4:7f:de:9e:
e2:c9:1f:ce:04:26:7d:a9:3d:14:20:12:63:c2:26:
27:f4:32:f9:8d:c0:9d:3f:fa:d8:19:b7:d5:6d:e0:
e9:a1:61:e1:9d:28:83:04:82:c2:38:0f:25:c5:66:
f8:4e:89:bd:19:83:8e:10:9f:3e:d2:18:fe:8e:dd:
1d:11:f2:93:f3:8d:99:dc:f4:79:21:2a:4c:8a:8a:
be:74:7e:4f:0a:62:1b:14:4b:e7:af:8c:70:ba:f0:
81:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DF:2D:54:63:DF:CB:2C:9D:A7:52:5F:2D:E8:F5:00:5D:15:7C:25
X509v3 Authority Key Identifier:
keyid:6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:0a:aa:52:ee:65:66:0b:9f:7b:68:6a:fe:ce:cb:4d:c2:38:
97:a5:c3:7b:d4:19:c2:64:75:93:1c:cf:6e:17:c2:4f:2b:ea:
6c:08:e7:f2:fc:a8:7d:30:04:47:f6:79:67:08:49:2e:19:8b:
53:7c:29:2e:6f:40:8e:4b:bb:b1:7e:47:8b:57:27:8c:a9:96:
3a:23:3a:db:e3:a0:2c:ed:b3:1b:6e:17:cb:86:a6:0e:de:00:
98:78:bc:45:51:87:2b:e6:97:30:cd:45:3f:52:2e:10:a0:96:
b4:d3:2c:8b:0d:23:cc:4b:d7:a2:35:48:07:64:4a:75:5b:d3:
f0:dc:37:0f:5a:9f:39:7e:a8:e2:7e:50:ac:e6:a2:b3:a3:94:
5f:e9:7a:8a:c6:e8:22:18:c1:3c:c8:fe:df:91:88:d0:f6:d1:
41:54:81:d4:0a:8b:ff:ce:ce:d7:92:c4:97:af:c2:d3:76:65:
73:ec:09:95:99:9f:08:16:04:85:32:34:15:0f:b5:e8:ba:38:
e7:c6:67:33:ea:8f:9f:fb:09:3d:50:7c:42:e0:bc:fd:e4:2b:
2e:9c:fc:72:25:aa:e1:c6:f1:37:8c:5a:62:a8:56:93:e3:e9:
1d:b5:cc:d0:f1:74:96:a8:ee:28:c4:b4:cb:a8:1f:fb:01:99:
a5:66:4a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:42:47 2026 by rpki-client