
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
File: BcMvXW_ZVny3AAWx10pBqFtb5xI.mft (raw, json)
Hash identifier: JRNpjX5cpxKU/GFP6aCceKMRxBFBv7rdDswK0YZgB7Y=
Subject key identifier: 2C:FF:82:4E:69:13:ED:AD:B8:EF:50:77:BB:03:6F:C7:7B:40:17:A8
Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
Certificate issuer: /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Certificate serial: 0709
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
Manifest number: 06F9
Signing time: Sun 26 Jul 2026 23:00:43 +0000
Manifest this update: Sun 26 Jul 2026 23:00:42 +0000
Manifest next update: Sun 02 Aug 2026 23:00:42 +0000
Files and hashes: 1: BcMvXW_ZVny3AAWx10pBqFtb5xI.crl (hash: 5xhw+FySc08CibhGaGcxQR7+yu4eJdRbPrii2c9Dd2U=)
2: 27B648124C9C11ECACB77370C4F9AE02.roa (hash: K7MZ3T0dMRToMyp98c/Q67E9wIW0vsuQeli/CjrwVoo=)
3: F164038CBBE211ED8685DC61C4F9AE02.roa (hash: tT9i1DbRbJsGaFhFIKWc3hF5z1oqGKKoTGSshBbumJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1801 (0x709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB5D3, serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Validity
Not Before: Jul 26 23:00:42 2026 GMT
Not After : Aug 2 23:00:42 2026 GMT
Subject: CN=6a66919b-cf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9e:b7:46:d5:91:04:2c:31:ef:34:12:ce:d9:
b8:16:8a:34:4f:f7:14:e4:f0:15:91:4f:48:95:6b:
5e:79:72:cb:12:ce:12:bb:63:c0:6d:90:a6:3f:41:
fb:2a:34:3d:3c:40:44:f8:46:f8:95:b6:dd:55:b0:
fb:7c:39:b1:32:3b:27:48:2c:6e:3e:2f:c7:41:a5:
84:fc:f2:74:cd:c1:af:ec:3e:4b:7b:6f:75:02:71:
ad:21:2a:13:d5:49:6e:dd:0d:f3:54:56:8b:e1:60:
01:e7:00:59:0e:c8:0f:05:07:9d:75:1a:23:b2:99:
92:ee:72:c2:f6:98:25:e9:ab:a3:26:e3:56:8a:b7:
5d:07:ac:05:5b:22:55:ca:08:a6:ce:2f:b2:7d:33:
7f:a5:01:3e:3a:6a:a1:21:e6:0c:a1:0f:32:b8:48:
a7:d5:3c:22:2f:fc:d9:0e:8c:18:bf:3f:a3:c4:0f:
04:ba:3d:a6:4d:b4:42:a3:37:ff:ff:f3:aa:97:fe:
85:28:eb:6d:d0:91:75:f7:a4:7c:fc:68:19:06:d5:
90:c8:47:74:fe:00:4a:3c:75:06:1c:df:00:a2:17:
31:6f:e6:13:c0:95:14:5b:aa:5a:02:ac:e9:67:55:
2e:86:35:58:2a:a4:5c:01:08:81:bf:23:07:ad:d0:
20:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FF:82:4E:69:13:ED:AD:B8:EF:50:77:BB:03:6F:C7:7B:40:17:A8
X509v3 Authority Key Identifier:
keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f2:ab:38:47:11:11:22:e7:47:19:bd:aa:88:f4:e5:fc:ed:
c9:d7:d6:2d:24:ef:0b:1c:ca:94:fd:0b:72:8e:7f:1f:c9:94:
6e:f9:f5:73:ca:fc:10:e8:65:2d:35:11:d0:0b:f2:ae:b3:f1:
0e:bb:02:96:82:50:74:c9:4c:72:ac:65:fe:c9:f3:f4:ba:e7:
c2:7c:1c:a4:10:84:a9:fc:9a:18:16:ca:a0:58:03:11:3c:62:
0d:99:0b:8b:8e:95:49:8e:81:82:e7:9c:65:42:87:ca:a0:a9:
4e:60:57:db:ef:e6:37:4d:4c:9b:7b:82:4d:1c:e8:c8:88:03:
90:20:8b:d3:c4:72:44:9c:b9:c0:a2:4e:9a:ae:f9:75:a3:9a:
c8:40:f2:17:69:49:11:b3:52:df:52:8b:65:fb:a5:cf:22:4f:
f7:99:37:cc:d0:c7:00:66:45:b9:03:c1:bd:42:f2:37:47:58:
8c:9c:73:50:33:4a:79:f6:20:3e:c8:f5:18:03:e7:8b:b0:5e:
8c:e8:7a:7c:64:3d:1a:6d:06:e0:7e:0d:21:97:4f:03:2a:5b:
08:d6:7b:6a:38:69:5f:74:85:16:c9:1b:de:15:ee:c5:e8:86:
62:b2:78:b0:d9:0d:88:26:6a:4d:c5:a1:17:87:31:66:dd:9c:
44:3d:9b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:30:53 2026 by rpki-client