
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft
File: bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft (raw, json)
Hash identifier: /fYQSLuGL84R/Z1gAcqiEaUr8xantWbZblsH4Z/tpaQ=
Subject key identifier: 2E:14:5E:0F:55:96:02:14:12:1F:43:F5:76:B3:F7:9B:56:25:4E:12
Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20
Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420
Certificate serial: 09FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft
Manifest number: 09AE
Signing time: Fri 12 Jun 2026 20:05:28 +0000
Manifest this update: Fri 12 Jun 2026 20:05:28 +0000
Manifest next update: Fri 19 Jun 2026 20:05:28 +0000
Files and hashes: 1: bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl (hash: FvnMqYz6vUBqFBRk1HdUtZdRXbVzy0gpTrclNygzBdk=)
2: CCBF0CF6B55911EC9256FE19C4F9AE02.roa (hash: xihXskffyMmX6uPdr43LH17SKnUp1mNtBqH6MhLI3sk=)
3: 1A8C65506B6E11F0AEECA858C4F9AE02.roa (hash: NpbVQQRWWoFXTrGdsKM32fOCA5zAVZsblj+8rYIeUc4=)
4: CC3B5938B55911EC9256FE19C4F9AE02.roa (hash: lyIUpVCXgqLP2olWGXoY8duGQEhruwus1GboROWSH00=)
5: F2A462E66B6C11F0B453B656C4F9AE02.roa (hash: HMcEW/S22FGTvhiPakps8LsqQxXUXp8fWhqX+TVm2Vw=)
6: 88252000B55C11ECA9565039C4F9AE02.roa (hash: vpFh2/2Ww8n4gYMHhWBePvd1Fheir2EOHQAoooMfRBo=)
7: 50805C5C6CF911F0A63D4C65C4F9AE02.roa (hash: 7GoPVvNzOxqz0b0bUBa7Sq4uOYDaYVX7ArTVXs9QZv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl
rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2554 (0x9fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A546E, serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420
Validity
Not Before: Jun 12 20:05:28 2026 GMT
Not After : Jun 19 20:05:28 2026 GMT
Subject: CN=6a2c6688-cc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c2:b5:5b:73:3a:e7:d0:b9:e7:5d:ad:25:5e:
b5:42:bf:63:69:aa:34:0e:a7:21:d0:f4:78:b9:96:
cd:6e:49:2b:53:05:bb:75:d2:df:47:ec:3c:75:68:
bd:1e:b7:ba:4e:a5:9b:8e:79:a7:85:53:79:9a:fe:
9e:37:89:c8:86:95:9e:4d:b1:98:17:f4:fb:9d:dc:
3b:e5:dd:0e:57:7e:b9:e9:e4:fb:fe:f8:07:9c:94:
10:51:56:77:db:e8:98:0e:d9:5c:d9:fe:47:f4:e5:
23:c9:c3:79:85:7b:1f:ad:0c:65:70:3a:51:4f:04:
2b:d7:e0:18:24:96:06:d6:ec:8c:b3:c0:3b:92:53:
23:21:f6:83:fb:38:57:69:4d:f8:81:bc:d8:58:0a:
33:c9:36:b4:77:4e:c9:66:43:41:c7:8f:74:00:dd:
9f:99:49:37:65:85:c8:39:22:e3:04:2e:6b:7e:39:
59:17:c5:97:a5:46:d9:af:9c:cf:65:de:27:69:2d:
87:9f:7b:80:da:ec:a9:dc:4a:84:45:d1:6b:38:ab:
d3:f3:38:2b:90:3e:2a:20:bb:d0:8a:32:6d:66:ea:
ea:6d:5f:4d:fd:35:51:b8:c9:f1:29:b1:08:fb:c1:
e7:5b:72:df:61:bc:08:48:c2:f4:94:0b:94:73:70:
98:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:14:5E:0F:55:96:02:14:12:1F:43:F5:76:B3:F7:9B:56:25:4E:12
X509v3 Authority Key Identifier:
keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:11:71:2d:78:9c:51:5d:02:d9:f4:2f:e0:d7:a8:85:f8:b9:
fc:c2:3a:2d:a2:80:36:0a:01:c3:85:8e:ca:d9:c2:a6:79:cb:
86:e0:4f:5a:6b:13:ff:73:c2:0f:9e:16:53:63:5f:81:b9:3b:
bf:35:81:da:d4:87:16:1e:1d:ee:09:67:9e:a0:2f:0d:59:42:
9f:6f:ef:c6:ad:3f:fd:c1:28:10:28:04:32:aa:5c:3c:44:5c:
87:90:db:5d:6b:e1:1e:08:3f:3b:6a:f7:36:6b:f0:e8:93:8d:
f2:5c:48:f5:4e:f0:b8:4f:4f:aa:90:01:0d:b6:d0:cf:8f:11:
1a:f3:e8:f3:cc:22:32:c2:84:47:8e:d5:75:be:1e:fa:42:72:
fb:96:6c:3a:9b:71:cc:2e:c5:82:e7:90:df:76:37:0b:e2:35:
7d:54:e5:64:03:c1:55:aa:ec:3d:ca:52:17:32:3a:a8:c4:4f:
57:c0:e8:e8:d7:2a:15:7d:13:f5:d0:bd:b6:88:36:63:c3:1f:
8b:0c:ef:f4:a9:1c:0b:1d:98:6b:ef:25:74:98:a1:36:ab:44:
37:3a:04:f8:14:d9:8e:0f:56:76:86:44:46:e6:9d:ce:29:ae:
d6:19:87:51:f3:10:1a:25:ee:59:15:0e:3f:98:ff:bf:70:8d:
e6:37:7a:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5
Mjc1NzQ0MjAwHhcNMjYwNjEyMjAwNTI4WhcNMjYwNjE5MjAwNTI4WjAYMRYwFAYD
VQQDEw02YTJjNjY4OC1jYzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA28K1W3M659C5512tJV61Qr9jaao0Dqch0PR4uZbNbkkrUwW7ddLfR+w8dWi9
Hre6TqWbjnmnhVN5mv6eN4nIhpWeTbGYF/T7ndw75d0OV3656eT7/vgHnJQQUVZ3
2+iYDtlc2f5H9OUjycN5hXsfrQxlcDpRTwQr1+AYJJYG1uyMs8A7klMjIfaD+zhX
aU34gbzYWAozyTa0d07JZkNBx490AN2fmUk3ZYXIOSLjBC5rfjlZF8WXpUbZr5zP
Zd4naS2Hn3uA2uyp3EqERdFrOKvT8zgrkD4qILvQijJtZurqbV9N/TVRuMnxKbEI
+8HnW3LfYbwISML0lAuUc3CYyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4UXg9V
lgIUEh9D9Xaz95tWJU4SMB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3
NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS
Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTQ2RS8wQ0Q0MURBOEI3NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZi
N1JfWW4xcl9Zd3lTZFhSQ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMhFxLXicUV0C2fQv4Neohfi5/MI6LaKANgoBw4WOytnCpnnLhuBPWmsT/3PC
D54WU2Nfgbk7vzWB2tSHFh4d7glnnqAvDVlCn2/vxq0//cEoECgEMqpcPERch5Db
XWvhHgg/O2r3Nmvw6JON8lxI9U7wuE9PqpABDbbQz48RGvPo88wiMsKER47Vdb4e
+kJy+5ZsOptxzC7FgueQ33Y3C+I1fVTlZAPBVarsPcpSFzI6qMRPV8Do6NcqFX0T
9dC9tog2Y8Mfiwzv9KkcCx2Ya+8ldJihNqtENzoE+BTZjg9WdoZERuadzimu1hmH
UfMQGiXuWRUOP5j/v3CN5jd60A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:36:15 2026 by rpki-client