
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
File: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft (raw, json)
Hash identifier: yDbRPFBR12vXxUaCjuWtLtrgYtUGQ22g9jUE6boFlk0=
Subject key identifier: 11:32:22:5A:B2:9E:79:57:F6:7C:A5:E2:D4:5A:3F:A5:F6:37:EB:72
Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D
Certificate issuer: /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
Certificate serial: 01E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
Manifest number: 01DB
Signing time: Sat 13 Jun 2026 03:37:53 +0000
Manifest this update: Sat 13 Jun 2026 03:37:53 +0000
Manifest next update: Sat 20 Jun 2026 03:37:53 +0000
Files and hashes: 1: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl (hash: JZs3WxxHKg15aN1SRFZYhHdN8L/D2rs9jiqdcWlgqpE=)
2: 13E4471298B711EE99FD1F09C4F9AE02.roa (hash: CSGjDy/wdYYzGXyvOOUl98bHiR5LO+1hU3+jdzF0bhY=)
3: 134D519098B711EE99FD1F09C4F9AE02.roa (hash: TP4JixOOcg9YnuGelQlIMV1MqlMNS4cHb5eiwzX8uV8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl
rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:37:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488 (0x1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3526, serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
Validity
Not Before: Jun 13 03:37:53 2026 GMT
Not After : Jun 20 03:37:53 2026 GMT
Subject: CN=6a2cd091-cd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:0c:3b:2b:a7:f9:46:ec:03:b0:72:fe:23:
e7:ab:ce:4f:9d:59:69:53:c2:44:0a:f8:fb:c8:df:
04:03:df:a4:29:7c:7b:5c:e3:21:5d:7a:1e:87:a0:
35:e3:45:5c:7f:61:89:15:a3:ba:d8:37:e9:e9:25:
74:2c:c4:52:3f:fa:7f:f0:c4:05:c4:49:a8:c1:5c:
1f:62:87:dd:94:66:b2:86:64:63:65:53:62:d8:d9:
21:d4:0f:bf:ab:db:43:9d:93:71:04:b4:30:b7:af:
0a:dd:f7:56:25:bd:f7:9b:74:86:89:ec:d4:be:a2:
69:0d:ae:1c:8f:b4:77:38:6a:91:41:44:64:02:ca:
df:03:3c:5a:a6:d2:2a:74:43:09:c5:b6:4a:39:88:
12:3a:1e:a3:59:e7:64:51:1f:b3:16:c5:28:bb:d2:
8e:3a:98:56:a2:98:46:cc:ec:7c:4f:68:10:8e:a9:
ed:63:6c:99:e6:54:30:bb:cc:76:01:8e:e3:6e:bd:
9f:13:6f:99:ea:f2:18:36:4c:64:db:a4:a6:e4:f7:
c7:16:df:a9:43:b5:13:a8:6a:22:fb:23:4b:7b:e6:
65:35:28:b3:ad:0d:ca:71:18:5d:9f:99:5a:06:07:
13:40:3b:cf:a8:48:5a:36:a3:19:81:32:f7:c1:77:
a0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:32:22:5A:B2:9E:79:57:F6:7C:A5:E2:D4:5A:3F:A5:F6:37:EB:72
X509v3 Authority Key Identifier:
keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:92:2e:e7:31:9c:b5:2d:f6:bc:a7:17:62:d6:90:70:3a:24:
52:74:3f:10:2c:f8:ee:8a:ce:06:3b:55:80:4c:12:d0:30:ac:
51:83:9a:cc:2f:a9:77:32:ad:6f:5a:e2:a9:a9:25:cc:1f:ac:
2c:0e:7c:86:46:d1:58:4d:34:60:eb:57:13:9a:da:b0:87:2a:
89:e9:97:ea:20:3c:60:b5:6c:41:93:19:23:39:d8:ea:ca:a7:
5f:fd:c5:53:b0:56:56:23:3c:cc:41:9b:44:98:6a:c6:db:3e:
19:a6:15:9e:34:5d:77:da:dd:5d:30:b2:a5:fd:f0:0c:c8:ce:
bf:ae:02:cf:b1:2d:fa:00:76:f9:15:19:80:5c:c3:0b:63:df:
75:17:fb:86:aa:09:2d:a5:78:8a:85:00:3c:ee:47:f7:5b:47:
7f:57:9b:0d:15:04:5c:9f:ca:02:5c:69:6c:20:54:b2:f3:e2:
b8:85:eb:5e:14:ce:b8:41:6a:39:f7:4d:6e:32:cb:1a:18:d6:
32:12:90:2a:f4:34:74:b0:b8:a8:c3:4c:4f:dc:6a:7c:64:d2:
44:78:1a:31:a0:18:65:e4:95:60:0a:b6:e3:85:08:81:c9:a2:
a9:55:dd:b6:8b:bf:04:4c:0c:01:05:68:87:10:67:67:6b:72:
19:50:e3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:10:24 2026 by rpki-client