
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
File: bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft (raw, json)
Hash identifier: M/jzIGRCw1fmVj3xXKTxReFCaKfuI7cliay5Vqi1wyo=
Subject key identifier: C2:29:CA:14:FB:F4:06:35:39:51:D1:43:E5:B5:25:D5:00:13:66:D5
Authority key identifier: 6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C
Certificate issuer: /CN=A91CF24F/serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C
Certificate serial: 0A94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
Manifest number: 0A84
Signing time: Sun 20 Sep 2026 19:32:36 +0000
Manifest this update: Sun 20 Sep 2026 19:32:35 +0000
Manifest next update: Sun 27 Sep 2026 19:32:35 +0000
Files and hashes: 1: bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl (hash: Z47SWdXOR0PgCR47ndivDUzJsdtNGRbtaOmo3C66Yps=)
2: 75D9F37C007A11ECA444E049C4F9AE02.roa (hash: 1mRV89mqNc+nLOCZGSyR4uuy7wclwLlHSJ3xFNf7VPs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl
rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2708 (0xa94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF24F, serialNumber=6DC5248164BB952E8B9ED9239BE7106A63CEF06C
Validity
Not Before: Sep 20 19:32:35 2026 GMT
Not After : Sep 27 19:32:35 2026 GMT
Subject: CN=6ab034d4-9449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:04:0a:7e:6a:0a:37:65:fa:d6:d1:09:3a:f3:
af:c5:6a:23:0b:e3:17:2a:13:6a:79:99:52:20:66:
56:c3:fd:49:bc:ee:9f:50:20:10:63:f6:0c:dd:d9:
10:e2:af:e2:76:a6:8b:cf:23:4d:9a:63:fe:c9:f3:
8c:bf:b3:3e:ab:b3:bb:e5:24:94:d0:87:14:1f:1e:
81:ab:f3:9d:b7:86:af:17:e1:30:aa:f8:68:bd:3e:
6d:45:5a:3f:3f:48:96:d1:4c:8e:74:5a:c8:89:8a:
3f:10:cb:d0:c0:16:ad:56:8b:b0:90:df:f6:2f:2b:
88:6f:49:14:dd:7a:db:57:bd:05:57:8b:f0:46:7a:
fb:47:38:74:d4:ee:8e:35:5b:0d:bc:12:7a:3b:03:
7e:ea:d3:4f:a5:46:7d:71:e4:1b:9e:fd:c7:38:42:
18:b9:ac:f9:9d:5b:08:ba:57:7f:d8:cc:10:d8:c0:
38:a9:5a:af:ed:65:55:46:a6:0c:46:d2:3c:fd:90:
86:c7:34:e3:b8:c3:14:e3:79:6b:8b:dc:94:d2:d0:
87:05:e9:30:ed:11:cf:24:5e:67:3f:70:c3:67:f3:
9e:73:e7:8d:e1:6b:8a:18:43:7e:ac:0f:31:f8:d6:
fe:1a:35:0d:cb:8a:0e:04:71:f8:7c:d1:60:6a:02:
c4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:29:CA:14:FB:F4:06:35:39:51:D1:43:E5:B5:25:D5:00:13:66:D5
X509v3 Authority Key Identifier:
keyid:6D:C5:24:81:64:BB:95:2E:8B:9E:D9:23:9B:E7:10:6A:63:CE:F0:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcUkgWS7lS6Lntkjm-cQamPO8Gw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF24F/37C110B88F5911EAAB70E234C4F9AE02/bcUkgWS7lS6Lntkjm-cQamPO8Gw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:63:e6:2e:32:35:1c:21:8f:7f:dd:41:09:71:bd:19:55:df:
e3:0c:9c:df:04:5b:d9:e8:55:99:09:50:7d:88:a2:79:c8:28:
fc:25:3f:50:3f:bc:0b:9b:6b:b0:08:b2:94:4b:eb:ea:99:b6:
1f:ec:cb:14:34:40:e8:f3:f5:76:1e:d9:22:f9:d5:f2:a5:6e:
44:86:ad:9d:90:11:81:33:d6:82:6d:bd:ca:f2:b7:2d:bf:6f:
14:43:ed:65:d6:b2:6d:ce:e9:10:42:cb:a8:91:fa:8f:54:f7:
7f:6b:fe:ab:0c:16:88:16:87:de:77:49:a0:1e:82:6b:79:4f:
ab:26:e9:9f:c3:af:40:f7:49:f9:57:e6:6a:b2:42:c3:97:40:
00:64:8f:c4:1e:c0:e7:0b:b0:06:02:91:ed:4b:cd:39:5b:35:
a6:44:a1:ba:02:f2:c4:3d:71:28:ef:e3:7c:e4:31:fe:c4:30:
70:21:71:67:5e:d0:df:76:e4:a7:76:5c:9f:23:01:e0:e8:c6:
51:7d:d1:20:f2:07:89:da:27:03:db:b7:31:32:f6:c1:2c:ce:
8d:58:8c:58:aa:60:db:e1:8e:99:3e:fb:59:fd:65:b7:d1:de:
48:2a:ce:26:31:03:e0:88:21:b1:f4:7e:79:7a:75:60:c5:0f:
74:33:60:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:32:42 2026 by rpki-client