
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft
File: BFm798uEwX7tUbaM6tlBlX14X68.mft (raw, json)
Hash identifier: IKTpgZZR/Z5Yed9/rPmEszeUt0kEDGhKhLQe3Ky+DxM=
Subject key identifier: E7:18:06:3C:33:C7:84:B6:B5:E8:6B:AB:2F:54:30:2A:7D:C5:AF:3D
Authority key identifier: 04:59:BB:F7:CB:84:C1:7E:ED:51:B6:8C:EA:D9:41:95:7D:78:5F:AF
Certificate issuer: /CN=A91CFBA9/serialNumber=0459BBF7CB84C17EED51B68CEAD941957D785FAF
Certificate serial: 9A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft
Manifest number: 97
Signing time: Mon 27 Jul 2026 09:33:50 +0000
Manifest this update: Mon 27 Jul 2026 09:33:49 +0000
Manifest next update: Mon 03 Aug 2026 09:33:49 +0000
Files and hashes: 1: BFm798uEwX7tUbaM6tlBlX14X68.crl (hash: FKSOK8ucupVf3Aa/+lkOaRHGnh41SWArbq/NK+BPSGE=)
2: 88B9736AA77811F092FD731BC4F9AE02.roa (hash: t9dZnts+IlYuSJrBx0IgU/pwjcYxg43h5hJtdZZSKtM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.crl
rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:33:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFBA9, serialNumber=0459BBF7CB84C17EED51B68CEAD941957D785FAF
Validity
Not Before: Jul 27 09:33:49 2026 GMT
Not After : Aug 3 09:33:49 2026 GMT
Subject: CN=6a6725fe-8c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:fb:f0:43:62:35:e0:f3:6d:0d:ca:0f:e3:
18:e8:c6:91:fb:a1:85:ae:8b:84:4a:76:c1:4a:fc:
40:9d:a7:22:27:58:a8:72:b1:4c:e6:99:b2:cf:24:
4b:b4:c8:48:11:97:17:ac:c3:45:be:b3:6e:6d:6c:
50:f7:d5:96:20:c6:9b:b8:98:20:60:c0:ff:26:6d:
64:0c:ed:c7:a6:7b:30:cb:f6:38:4c:6e:e8:66:fb:
9f:62:d4:36:e0:a9:e3:df:54:02:3e:4e:b2:df:2b:
80:55:a6:30:22:1f:ea:32:d0:16:3b:17:ee:61:ca:
af:77:fb:8e:9d:6e:4c:59:0d:64:e0:f0:a2:be:0a:
65:36:3b:66:0e:fb:44:0d:f2:fb:12:f6:1f:82:4d:
fe:4c:d5:6b:59:6e:2f:bd:a3:e0:1e:09:0e:ca:31:
99:7f:f5:63:97:d5:2c:b9:48:2a:af:c7:e2:0e:55:
2b:ff:b7:c5:39:b7:0d:5b:90:6c:e1:95:aa:73:63:
bc:f4:93:2c:85:41:00:e6:c0:ec:5d:b9:46:32:2d:
c9:c4:68:46:f6:a3:41:19:fd:44:c6:51:99:3a:77:
7e:d9:3f:b5:61:c1:47:1a:e1:9c:21:d6:d3:13:f0:
76:5a:0e:7d:b0:af:02:69:8a:d2:1c:ad:62:58:d7:
68:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:18:06:3C:33:C7:84:B6:B5:E8:6B:AB:2F:54:30:2A:7D:C5:AF:3D
X509v3 Authority Key Identifier:
keyid:04:59:BB:F7:CB:84:C1:7E:ED:51:B6:8C:EA:D9:41:95:7D:78:5F:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:9e:d8:40:7a:38:ec:83:aa:da:ae:f2:05:e2:26:9b:00:d9:
38:96:39:e8:44:df:d8:4a:94:25:79:1a:d3:89:90:29:9e:2f:
14:fd:a3:f4:42:b9:13:18:49:d9:ae:4c:00:b1:29:93:1e:ab:
81:4f:e4:8a:93:3b:95:ae:40:74:a4:ff:3e:17:d5:68:64:f3:
40:bf:75:84:c9:cd:7f:30:b2:f8:67:b9:b6:de:5b:38:18:1d:
c9:23:38:8b:9d:f7:60:d1:d5:e0:f2:5e:e8:70:de:ff:92:1d:
c8:91:b8:1c:05:ed:f6:1c:5f:cd:ba:f8:6c:2a:ad:98:3d:66:
22:41:4c:fe:e4:42:04:0e:43:50:c8:a1:4c:b1:8a:c0:77:27:
0b:79:86:3b:1c:55:dd:1f:45:ba:da:18:11:48:bd:c5:e2:a5:
a8:9d:b9:3a:4b:43:4e:48:a5:c4:f5:1b:39:84:1a:ca:69:6a:
22:42:4f:fd:6f:97:b4:b4:d9:9c:d0:57:e0:8a:cf:f0:68:45:
29:ba:1a:4d:85:9f:e3:d1:2f:af:84:a9:71:c7:ed:95:ac:a4:
92:7b:e8:07:63:3e:cd:e1:5b:3f:c8:8c:16:c0:dd:aa:e0:85:
5a:df:89:03:22:94:01:75:4c:65:cf:be:9c:6a:a9:48:8d:fa:
ea:77:4b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:56:18 2026 by rpki-client