
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
File: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft (raw, json)
Hash identifier: T4lqmjFxdSu3IsYO6bxdlrF/LADllwHPVM51XaEy4/4=
Subject key identifier: 6D:44:E3:93:4F:4F:48:40:7E:7B:E6:3D:EF:D0:E4:E2:F1:7E:07:84
Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D
Certificate issuer: /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
Certificate serial: 0226
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
Manifest number: 0219
Signing time: Tue 13 Oct 2026 03:31:41 +0000
Manifest this update: Tue 13 Oct 2026 03:31:41 +0000
Manifest next update: Tue 20 Oct 2026 03:31:41 +0000
Files and hashes: 1: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl (hash: NvsYRzuKX+sTOHriPY6vydST38R4HORV+gNmRG0CErg=)
2: 13E4471298B711EE99FD1F09C4F9AE02.roa (hash: CSGjDy/wdYYzGXyvOOUl98bHiR5LO+1hU3+jdzF0bhY=)
3: 134D519098B711EE99FD1F09C4F9AE02.roa (hash: TP4JixOOcg9YnuGelQlIMV1MqlMNS4cHb5eiwzX8uV8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl
rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 03:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3526, serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
Validity
Not Before: Oct 13 03:31:41 2026 GMT
Not After : Oct 20 03:31:41 2026 GMT
Subject: CN=6acda61d-6cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fc:f1:ff:36:ac:91:52:8a:0b:9d:ad:00:c6:
6e:82:a8:56:91:98:4c:83:00:68:f5:d4:d6:ed:77:
d1:15:5a:d4:9d:c1:d0:a2:a7:77:4c:94:91:a3:2f:
3e:fe:a4:c1:c5:1f:7e:b6:79:5e:49:17:e0:6e:ed:
e1:c5:60:63:1f:f2:18:6d:ab:3c:13:6a:6f:23:f5:
01:3d:52:4d:af:e3:35:57:bc:e7:01:1d:ca:ef:92:
52:4f:ff:e9:87:23:48:38:1f:ea:3a:4e:c2:88:85:
6c:43:77:14:26:53:69:3a:e1:ab:9b:f2:70:3b:d5:
91:70:ff:41:18:dc:68:87:10:77:5b:da:08:24:d0:
89:7d:02:ad:8c:15:ab:ee:b7:4e:69:f6:d3:17:0a:
dd:9d:91:d2:6b:92:37:15:86:20:32:52:4b:0b:f7:
ba:0d:e4:e3:ee:53:ce:5f:21:7b:a5:9d:7c:58:74:
cc:46:17:13:8f:4a:7e:1e:ae:71:7f:5d:d2:0d:12:
f1:36:d9:69:f6:fd:55:0a:bc:45:c3:26:2c:cb:46:
93:4b:2f:12:8d:e8:09:07:fb:a6:b2:32:6d:26:20:
a7:a6:6b:a0:ad:69:e0:d0:db:c8:d8:75:21:9b:3d:
34:ea:fa:60:25:d0:af:5b:40:85:9c:c8:20:8b:c8:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:44:E3:93:4F:4F:48:40:7E:7B:E6:3D:EF:D0:E4:E2:F1:7E:07:84
X509v3 Authority Key Identifier:
keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:fe:a0:d1:fb:21:fc:77:02:60:63:3b:2a:38:42:19:99:d0:
e8:1c:63:eb:24:de:4c:bc:c5:b5:a4:f1:da:dc:dc:5d:45:37:
09:1a:c9:0d:ad:51:31:61:40:2c:d3:5e:c7:dd:65:be:5b:1f:
f4:96:65:f7:ac:78:c8:1d:56:34:a4:58:c4:2e:bc:9f:fc:db:
f0:9a:09:6d:06:0c:b0:75:c1:c6:5c:ba:90:44:1d:52:6f:6e:
80:5c:d1:a3:e1:03:a6:8c:25:09:a7:1a:f8:92:56:b6:b1:99:
08:d2:8f:88:93:e3:0e:5c:1c:21:0c:76:aa:c0:c4:88:2d:d6:
32:7d:3b:1d:eb:c7:93:88:09:4f:83:30:f8:62:e9:14:98:68:
00:c2:5d:89:ed:01:de:fa:17:08:bf:9b:2e:28:aa:6c:75:1e:
da:53:6f:ff:d5:1d:e4:a4:59:44:62:f0:61:0f:9d:10:ef:c6:
b6:5b:4f:a8:c4:25:41:48:97:ec:9f:4c:b5:cc:c0:73:ef:04:
9d:81:9a:39:4c:f5:f3:84:95:73:86:27:11:97:f4:bb:7d:94:
93:2c:e0:cf:7b:f2:72:34:ce:a2:91:9b:49:a4:1d:4a:70:92:
6d:c3:34:f6:5d:0b:e2:4b:2f:2a:73:ac:3e:0e:17:b9:31:e6:
ac:85:ac:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM1MjYxMTAvBgNVBAUTKDA1RkQyRDUxOUQ0MENCMjA4OTM3QkY4QThFNDYzRTZE
ODQyQ0MwN0QwHhcNMjYxMDEzMDMzMTQxWhcNMjYxMDIwMDMzMTQxWjAYMRYwFAYD
VQQDEw02YWNkYTYxZC02Y2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmvzx/zaskVKKC52tAMZugqhWkZhMgwBo9dTW7XfRFVrUncHQoqd3TJSRoy8+
/qTBxR9+tnleSRfgbu3hxWBjH/IYbas8E2pvI/UBPVJNr+M1V7znAR3K75JST//p
hyNIOB/qOk7CiIVsQ3cUJlNpOuGrm/JwO9WRcP9BGNxohxB3W9oIJNCJfQKtjBWr
7rdOafbTFwrdnZHSa5I3FYYgMlJLC/e6DeTj7lPOXyF7pZ18WHTMRhcTj0p+Hq5x
f13SDRLxNtlp9v1VCrxFwyYsy0aTSy8SjegJB/umsjJtJiCnpmugrWng0NvI2HUh
mz006vpgJdCvW0CFnMggi8g22wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG1E45NP
T0hAfnvmPe/Q5OLxfgeEMB8GA1UdIwQYMBaAFAX9LVGdQMsgiTe/io5GPm2ELMB9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzUyNi9BMTNDNTVDRTk4
QjYxMUVFOEI0OTA0ODdDNEY5QUUwMi9CZjB0VVoxQXl5Q0pONy1LamtZLWJZUXN3
SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JmMHRVWjFBeXlDSk43LUtqa1ktYllRc3dIMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzUyNi9BMTNDNTVDRTk4QjYxMUVFOEI0OTA0ODdDNEY5QUUwMi9CZjB0VVoxQXl5
Q0pONy1LamtZLWJZUXN3SDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYv6g0fsh/HcCYGM7KjhCGZnQ6Bxj6yTeTLzFtaTx2tzcXUU3CRrJDa1RMWFA
LNNex91lvlsf9JZl96x4yB1WNKRYxC68n/zb8JoJbQYMsHXBxly6kEQdUm9ugFzR
o+EDpowlCaca+JJWtrGZCNKPiJPjDlwcIQx2qsDEiC3WMn07HevHk4gJT4Mw+GLp
FJhoAMJdie0B3voXCL+bLiiqbHUe2lNv/9Ud5KRZRGLwYQ+dEO/GtltPqMQlQUiX
7J9MtczAc+8EnYGaOUz184SVc4YnEZf0u32Ukyzgz3vycjTOopGbSaQdSnCSbcM0
9l0L4ksvKnOsPg4XuTHmrIWsEA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 00:25:12 2026 by rpki-client