
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
File: Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft (raw, json)
Hash identifier: OJfsr9yeWzUbMxI8U20/ua6Po7qVIoh/pIiyA6a/KOA=
Subject key identifier: 7F:30:F9:3F:1F:C3:43:F5:58:12:68:12:E5:00:01:C1:C6:AD:B7:0A
Authority key identifier: 07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36
Certificate issuer: /CN=A91C37ED/serialNumber=071F8119171441802BE3261F15627DAF289DB336
Certificate serial: 0213
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
Manifest number: 020E
Signing time: Mon 27 Jul 2026 04:32:52 +0000
Manifest this update: Mon 27 Jul 2026 04:32:51 +0000
Manifest next update: Mon 03 Aug 2026 04:32:51 +0000
Files and hashes: 1: Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl (hash: 9smqGy1TJRldAXTVy+sXlaSng1PMMkx4H4Wee9ceAd4=)
2: 6CE66CFC630E11EEA9EDC20FC4F9AE02.roa (hash: K86E1zTfM01TUEyEgpEGBIR331MHYQp37XTW/fR1JKE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl
rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531 (0x213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C37ED, serialNumber=071F8119171441802BE3261F15627DAF289DB336
Validity
Not Before: Jul 27 04:32:51 2026 GMT
Not After : Aug 3 04:32:51 2026 GMT
Subject: CN=6a66df74-c461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:97:e1:b6:28:53:ca:11:12:a4:83:53:22:
4f:fd:48:6e:b6:80:06:51:74:53:fa:9f:58:5a:38:
3d:4e:66:39:b3:1c:59:dd:e0:b2:94:1c:c6:62:02:
c7:0f:64:be:91:66:96:78:1d:de:b5:10:77:ac:3a:
ea:78:78:73:87:79:dc:b0:1e:73:f0:28:5b:53:18:
ce:0c:4b:11:96:c3:f7:d0:22:d2:f6:b1:56:33:31:
6e:45:7b:3a:b5:8e:59:e9:47:7c:f7:2c:8b:97:c3:
a1:b3:ce:54:93:1b:7e:22:3f:8c:e5:e0:13:ee:2b:
6a:e2:9b:22:ea:76:4c:cc:28:31:9e:bc:ab:3e:80:
ee:fb:54:e9:35:d1:c7:92:83:e7:3e:be:3f:2a:6c:
e4:66:f4:c1:28:8d:96:ae:fe:13:f4:da:8f:7d:24:
c3:2d:22:60:e0:9c:11:39:bb:0f:75:39:45:d5:bf:
f1:9c:c2:a7:6c:e5:1c:58:52:3c:76:85:ed:0e:e3:
f3:44:a7:59:82:7c:07:fa:3b:dc:a4:db:6e:13:ef:
84:0e:16:7c:fe:4c:00:38:85:a1:2e:86:ca:92:6b:
1d:ef:69:8d:f5:b9:1e:32:59:15:af:9f:9c:9d:35:
10:77:c1:e7:49:34:10:af:1c:22:ad:95:02:12:b0:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:30:F9:3F:1F:C3:43:F5:58:12:68:12:E5:00:01:C1:C6:AD:B7:0A
X509v3 Authority Key Identifier:
keyid:07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:0a:0b:13:96:42:01:ab:c9:87:1a:86:f6:0e:c9:a7:ae:f7:
ac:98:2e:df:a2:ed:f7:9c:dd:b5:46:57:76:da:a7:d1:22:6b:
99:f9:67:e5:bb:c8:b4:19:a6:a8:65:dc:d9:53:1c:8b:72:2b:
72:26:ab:b8:fe:16:79:22:4e:4d:f8:e9:31:36:55:ae:0e:4a:
82:de:be:b9:95:b0:b6:79:2e:58:06:e6:b4:35:19:b8:99:7b:
9f:30:fd:05:2f:59:37:c7:72:f9:8e:b5:ba:69:a2:4f:46:0e:
70:38:be:2d:5c:48:bb:34:c3:25:3e:d4:39:87:39:cd:51:96:
cd:4d:ec:55:7a:03:ea:5e:10:2b:4b:0d:78:f1:29:9d:cc:95:
2f:7e:74:ff:26:5d:a1:8a:14:00:a8:3c:59:b9:f8:9e:ad:5b:
b2:33:08:16:f5:8e:31:72:63:d0:83:f2:29:7a:39:6a:99:ae:
81:9e:92:d7:3b:b9:8a:50:d9:85:7a:2a:fc:10:6e:5d:31:7a:
af:71:2d:81:fd:3f:7d:c3:99:48:51:19:34:48:8c:f5:5b:e4:
2f:af:72:93:70:5b:3c:72:f9:78:aa:90:e0:1f:ec:28:0b:3e:
df:30:d5:20:c8:f1:85:c8:e1:0c:1a:86:bd:51:71:6b:16:31:
1b:1a:dc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:13:09 2026 by rpki-client