
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
File: bz4CYgDVU58n4POqUNMgokUo1X0.mft (raw, json)
Hash identifier: wUzYjvyRAP65SEsvUZ1PSAfzp2LMupdJvx4DAq2Eduw=
Subject key identifier: 7B:67:78:48:02:22:FE:1F:D8:EC:0E:17:6A:19:37:D1:6B:5C:3C:F2
Authority key identifier: 6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D
Certificate issuer: /CN=A91B732A/serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D
Certificate serial: 0164
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
Manifest number: 015F
Signing time: Sun 11 Oct 2026 05:45:03 +0000
Manifest this update: Sun 11 Oct 2026 05:45:02 +0000
Manifest next update: Sun 18 Oct 2026 05:45:02 +0000
Files and hashes: 1: bz4CYgDVU58n4POqUNMgokUo1X0.crl (hash: M0/ySyn7YNsq9InHJfwuC46Rb210hzuXnDxI+vyd3bg=)
2: 31EC2E5CBAAB11EFA97B2C66C4F9AE02.roa (hash: nV38DqB6S2s+obaWtL39HR2W0RXsAZejFz8xEU6bYCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl
rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B732A, serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D
Validity
Not Before: Oct 11 05:45:02 2026 GMT
Not After : Oct 18 05:45:02 2026 GMT
Subject: CN=6acb225e-9753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:6f:ec:85:d2:40:bb:90:01:d2:98:63:63:
bf:20:5c:61:41:b3:ce:f7:f8:3d:be:bf:9b:3a:a5:
d6:2e:ed:b2:13:0b:0c:aa:8e:9f:56:95:24:6b:01:
ed:d3:f0:23:7b:fd:09:86:f7:b3:cf:45:ed:a8:96:
2e:52:cf:51:97:07:05:c5:20:a4:bc:c9:af:87:28:
4a:21:07:da:f9:b8:3b:ac:84:9c:8a:ab:54:bc:e0:
82:ed:cb:2b:0c:c3:07:2a:a3:4e:ad:b0:df:ea:fe:
ed:6a:f1:70:a3:b5:5e:c9:37:f2:0a:d9:27:cf:ec:
42:0c:dc:95:6d:9c:e4:3c:29:c6:b0:b2:cf:85:91:
a8:8f:b3:43:1b:29:54:42:42:d2:23:0f:64:92:23:
b0:43:24:2d:a5:73:b9:7f:73:ee:22:77:0e:54:94:
3a:8b:e2:4b:22:d6:3b:66:5a:73:7b:aa:c0:e4:88:
20:06:44:b4:63:9c:a1:f9:fb:13:70:c1:a1:52:16:
a6:2f:c8:8a:c4:31:10:a6:9c:f9:42:9c:21:2f:68:
b5:ea:71:12:7e:cc:0a:ab:8f:89:30:3e:d6:e2:0b:
b6:58:c6:e9:05:f5:6e:61:90:88:d8:03:e2:22:a3:
96:05:77:f3:63:78:ec:47:ca:09:35:1a:9a:b8:35:
47:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:67:78:48:02:22:FE:1F:D8:EC:0E:17:6A:19:37:D1:6B:5C:3C:F2
X509v3 Authority Key Identifier:
keyid:6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:bb:18:f2:88:f9:55:cf:a7:1f:a8:44:35:dd:ce:cc:5a:5d:
59:c8:a7:cb:92:22:98:41:f6:72:0e:3e:ff:a0:0c:3d:43:64:
ad:68:8c:27:0b:ff:bd:07:32:fd:43:58:7b:a0:b8:29:83:60:
67:b7:31:1d:4f:7a:11:9b:20:5d:0c:3c:30:d2:e4:ff:31:0a:
66:b2:96:91:24:63:40:d2:b7:c6:1a:8d:8f:7b:2d:47:05:0e:
60:db:a6:00:6a:b7:82:8f:e0:60:2c:e5:d1:b0:e9:70:2a:18:
45:9c:68:1d:31:36:39:99:38:4b:69:e9:6c:51:27:b5:6f:a0:
94:99:18:6c:66:14:80:0c:63:87:76:57:58:a7:1f:ad:c9:03:
ba:db:58:e1:65:83:9e:6f:54:e6:dc:28:98:d0:b9:ed:84:f7:
32:de:6f:f6:a6:9c:d5:5f:24:63:32:6f:84:cd:a9:99:c0:33:
e1:18:77:57:91:d7:c3:b6:9b:4c:02:07:85:c7:8a:d7:8e:4e:
f0:d1:68:13:62:ef:33:1b:7f:d0:ae:8b:7c:42:29:0f:9a:40:
c6:a1:7b:56:1e:51:9c:b8:5f:72:6d:4f:1a:6f:56:7f:fd:7b:
e5:f3:b3:07:2e:a7:d1:26:82:fa:98:f6:14:b1:94:cd:00:42:
88:93:9b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:18:11 2026 by rpki-client