
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
File: Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft (raw, json)
Hash identifier: 4JzPk7N74hqpYl1kZKsDZI8ythtZb0QSYz9xtoCeNfg=
Subject key identifier: 66:B6:5A:3D:99:54:21:C9:59:2F:F3:A6:39:76:5C:4E:6D:BC:BD:21
Authority key identifier: 07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36
Certificate issuer: /CN=A91C37ED/serialNumber=071F8119171441802BE3261F15627DAF289DB336
Certificate serial: 01C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
Manifest number: 01C4
Signing time: Sun 01 Mar 2026 23:38:52 +0000
Manifest this update: Sun 01 Mar 2026 23:38:50 +0000
Manifest next update: Sun 08 Mar 2026 23:38:50 +0000
Files and hashes: 1: Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl (hash: vYtLf7+HMK9iH3+INZX7/VvHcaY1Mp17LHYkkg5YB+w=)
2: 6CE66CFC630E11EEA9EDC20FC4F9AE02.roa (hash: K86E1zTfM01TUEyEgpEGBIR331MHYQp37XTW/fR1JKE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl
rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C37ED, serialNumber=071F8119171441802BE3261F15627DAF289DB336
Validity
Not Before: Mar 1 23:38:50 2026 GMT
Not After : Mar 8 23:38:50 2026 GMT
Subject: CN=69a4ce0b-dd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d7:87:42:73:3c:20:ae:c7:91:b4:95:8b:98:
95:fe:54:1d:15:b1:85:c7:56:0f:f1:c2:c6:f6:b3:
ca:20:84:0e:67:aa:a5:31:ca:5c:d7:da:79:69:d1:
cb:4a:b4:86:dd:d9:1a:0e:68:65:28:1a:2e:73:ce:
0c:0a:de:2d:2f:94:7e:0e:ab:4a:e0:6d:d0:bf:32:
cd:0e:a4:b5:c5:b2:20:6a:6c:b3:52:a3:ce:11:ff:
33:c2:6f:4e:3d:44:74:3c:ab:22:e2:22:8a:f5:91:
46:20:58:c7:a6:41:91:91:e5:64:f3:cf:9c:0e:57:
e3:94:19:0d:17:96:ea:5e:af:91:2d:a9:8b:ab:00:
cb:87:c2:47:b1:cd:b0:29:cd:b2:f1:f4:6b:eb:a7:
ff:a1:e1:93:db:19:1d:47:68:35:b2:6c:83:fb:e6:
58:14:e7:86:ae:bd:89:b3:f6:cb:e3:ed:b9:80:82:
70:9f:b3:cc:43:9f:01:06:17:ad:17:c7:4c:c5:19:
26:04:a4:e8:b8:25:1c:d1:eb:92:b0:0e:1c:44:2c:
bc:05:1e:59:ac:44:40:d2:01:32:df:ad:11:26:18:
7a:f1:e3:d4:60:0e:29:95:d9:03:c7:c7:25:6e:8c:
76:4c:f4:e7:1f:28:e4:c5:c0:57:ff:67:84:84:fe:
0c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B6:5A:3D:99:54:21:C9:59:2F:F3:A6:39:76:5C:4E:6D:BC:BD:21
X509v3 Authority Key Identifier:
keyid:07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:9e:ef:7a:fc:f4:d9:96:19:1f:b3:67:ef:bd:9e:cc:b8:83:
54:e3:57:54:4b:f3:e8:02:d6:bd:00:85:42:49:7f:30:69:18:
da:f3:f3:24:f4:09:35:05:06:fa:27:1a:93:ea:e3:3e:5d:83:
99:9c:a4:d7:15:49:41:35:3f:3b:17:27:77:a4:42:05:86:32:
11:94:64:14:fc:50:35:92:57:0a:a5:ed:bd:12:8b:59:f2:60:
c8:3b:09:65:e5:76:96:91:ad:2e:bb:ca:d2:c8:b3:31:38:64:
05:91:5e:2f:f3:34:e4:99:16:0d:de:d1:e9:61:11:66:62:c8:
66:d0:ae:f7:c2:bc:f8:a6:82:82:3d:47:2f:fe:2b:62:12:22:
99:a5:b2:9d:08:a9:e5:25:42:e0:47:3b:d3:05:a0:2f:7e:fa:
40:bc:90:f9:39:dc:00:7f:82:60:29:74:ef:74:ed:4f:67:e4:
21:35:a3:6e:b2:f9:32:48:89:1f:dd:05:44:a6:7e:49:47:70:
77:c1:9f:6f:bb:41:ee:20:4e:ed:26:7f:90:ae:3a:1d:db:b8:
3e:38:e4:2a:a9:cd:37:c8:64:22:63:9d:5f:ba:2a:ae:d1:fb:
cb:17:0c:03:e8:c5:29:6b:ad:cd:c7:8c:58:1d:57:44:c8:14:
83:6c:be:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:26 2026 by rpki-client