
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
File: BcMvXW_ZVny3AAWx10pBqFtb5xI.mft (raw, json)
Hash identifier: Hfii2y10HRXnxsmiU10Cnhr3/Ms9guvbxW/MUohBR48=
Subject key identifier: F9:55:35:3E:00:C0:C9:86:5F:46:1A:F1:55:34:65:9C:45:64:E1:E2
Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
Certificate issuer: /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Certificate serial: 06BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
Manifest number: 06AC
Signing time: Mon 02 Mar 2026 01:08:14 +0000
Manifest this update: Mon 02 Mar 2026 01:08:11 +0000
Manifest next update: Mon 09 Mar 2026 01:08:11 +0000
Files and hashes: 1: BcMvXW_ZVny3AAWx10pBqFtb5xI.crl (hash: a9wC+SAsbcKsNplnRfqqMog112WzhIPPGgHL9aiaQWw=)
2: 27B648124C9C11ECACB77370C4F9AE02.roa (hash: T8QGsnE10BPWJ4MJbxVVFGRfXPX6MRjP3DVv4S6Rqx8=)
3: F164038CBBE211ED8685DC61C4F9AE02.roa (hash: KI77GgT+UX9jlaO4DgV6Wg7UQcHDXz/g2286KEtVD+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1722 (0x6ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB5D3, serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Validity
Not Before: Mar 2 01:08:11 2026 GMT
Not After : Mar 9 01:08:11 2026 GMT
Subject: CN=69a4e2fd-e410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:35:f7:31:a7:90:d0:27:b1:35:b1:73:b4:
ec:42:d0:0c:22:00:bd:2f:c0:9d:97:e7:13:ee:e3:
02:c2:bc:1f:19:95:87:60:2d:3b:2d:98:32:7b:72:
d8:fd:e8:fb:ae:c0:97:0c:70:b2:2e:06:91:77:de:
bb:a6:dd:e4:34:ad:c4:1b:64:e3:7a:97:60:83:50:
3e:ac:7c:59:4a:5b:21:72:ab:89:9d:3a:68:21:ca:
15:c5:3a:a1:0d:ff:36:cd:47:88:86:74:56:a3:11:
0c:99:26:bb:83:50:c0:40:44:13:6a:80:49:4a:e6:
f5:56:0e:2d:85:99:07:c9:df:3d:59:9a:64:94:c1:
78:39:dc:5a:44:b3:78:b8:84:42:14:5d:c2:b7:9f:
48:a9:3a:0d:3c:13:90:df:a9:ea:3a:ba:17:50:d4:
d0:22:a9:ad:54:99:ae:94:50:86:0e:43:09:70:3c:
10:45:15:f1:00:59:4d:5d:03:da:9d:08:52:4c:b6:
9a:3f:49:c7:3f:01:a3:18:72:f5:c5:60:78:6a:a8:
86:f8:7b:94:23:6f:a2:04:67:0e:55:8f:23:03:e7:
96:8e:47:a5:62:81:c0:56:bf:93:b0:4d:b4:3c:d6:
9f:de:38:9d:b0:50:ee:0b:e9:c8:f2:60:7c:4e:eb:
04:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:55:35:3E:00:C0:C9:86:5F:46:1A:F1:55:34:65:9C:45:64:E1:E2
X509v3 Authority Key Identifier:
keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:12:2b:02:08:14:85:d9:6f:c3:c1:f8:92:67:6f:7d:b5:fd:
87:2a:3c:96:15:a1:d9:e4:f6:93:ba:aa:0b:08:a3:c9:7b:e7:
12:cd:55:6b:8d:14:7d:b9:b6:62:8f:f1:6d:78:cf:cb:f9:c6:
a7:24:43:02:c5:71:b6:23:bf:25:64:f0:54:bb:9f:c1:17:a0:
25:8f:ca:6f:c7:57:dd:e4:ab:9c:ea:56:c9:d2:1f:b2:22:40:
6d:dc:68:85:09:0a:c9:42:4a:3d:93:98:0d:14:41:ce:bb:7e:
79:70:a0:b6:2d:78:6d:fd:c3:4c:95:0b:61:36:27:fa:2f:d8:
62:01:fd:99:81:42:29:1f:65:c7:b0:8f:69:e6:ba:8c:42:2b:
20:90:76:e4:94:23:76:27:bc:7c:8f:01:45:50:61:45:c0:cb:
f0:30:e9:2a:05:5f:b1:01:0c:1c:ea:04:3e:e2:f7:4f:8c:10:
51:c4:3a:88:52:c4:dc:fb:8d:ce:ca:7a:1a:a0:34:cf:70:0b:
67:39:de:57:25:6d:18:bb:4d:c8:e1:09:83:e9:2a:a1:fc:09:
59:0f:b7:5f:63:16:28:14:ec:6f:81:10:da:36:40:e3:e7:87:
21:27:00:7c:28:ca:b5:42:12:b3:25:0c:e0:d0:a0:47:ec:04:
9b:2c:a7:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI1RDMxMTAvBgNVBAUTKDA1QzMyRjVENkZEOTU2N0NCNzAwMDVCMUQ3NEE0MUE4
NUI1QkU3MTIwHhcNMjYwMzAyMDEwODExWhcNMjYwMzA5MDEwODExWjAYMRYwFAYD
VQQDEw02OWE0ZTJmZC1lNDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApN019zGnkNAnsTWxc7TsQtAMIgC9L8Cdl+cT7uMCwrwfGZWHYC07LZgye3LY
/ej7rsCXDHCyLgaRd967pt3kNK3EG2Tjepdgg1A+rHxZSlshcquJnTpoIcoVxTqh
Df82zUeIhnRWoxEMmSa7g1DAQEQTaoBJSub1Vg4thZkHyd89WZpklMF4OdxaRLN4
uIRCFF3Ct59IqToNPBOQ36nqOroXUNTQIqmtVJmulFCGDkMJcDwQRRXxAFlNXQPa
nQhSTLaaP0nHPwGjGHL1xWB4aqiG+HuUI2+iBGcOVY8jA+eWjkelYoHAVr+TsE20
PNaf3jidsFDuC+nI8mB8TusEbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPlVNT4A
wMmGX0Ya8VU0ZZxFZOHiMB8GA1UdIwQYMBaAFAXDL11v2VZ8twAFsddKQahbW+cS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVEMy82Q0E5RDY5MEEx
QTgxMUVCODMyMTRDNzRDNEY5QUUwMi9CY012WFdfWlZueTNBQVd4MTBwQnFGdGI1
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JjTXZYV19aVm55M0FBV3gxMHBCcUZ0YjV4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjVEMy82Q0E5RDY5MEExQTgxMUVCODMyMTRDNzRDNEY5QUUwMi9CY012WFdfWlZu
eTNBQVd4MTBwQnFGdGI1eEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdRIrAggUhdlvw8H4kmdvfbX9hyo8lhWh2eT2k7qqCwijyXvnEs1Va40Ufbm2
Yo/xbXjPy/nGpyRDAsVxtiO/JWTwVLufwRegJY/Kb8dX3eSrnOpWydIfsiJAbdxo
hQkKyUJKPZOYDRRBzrt+eXCgti14bf3DTJULYTYn+i/YYgH9mYFCKR9lx7CPaea6
jEIrIJB25JQjdie8fI8BRVBhRcDL8DDpKgVfsQEMHOoEPuL3T4wQUcQ6iFLE3PuN
zsp6GqA0z3ALZzneVyVtGLtNyOEJg+kqofwJWQ+3X2MWKBTsb4EQ2jZA4+eHIScA
fCjKtUISsyUM4NCgR+wEmyynNg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:30:28 2026 by rpki-client