
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft
File: BFm798uEwX7tUbaM6tlBlX14X68.mft (raw, json)
Hash identifier: mS/mIwXhWkqBWLa8LekGEgRXfguvCbgSkvo6grS9zVE=
Subject key identifier: 0B:54:5D:AF:9F:B2:C6:3B:EA:B8:DE:3A:12:7F:B3:B4:E0:EA:B5:B7
Authority key identifier: 04:59:BB:F7:CB:84:C1:7E:ED:51:B6:8C:EA:D9:41:95:7D:78:5F:AF
Certificate issuer: /CN=A91CFBA9/serialNumber=0459BBF7CB84C17EED51B68CEAD941957D785FAF
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft
Manifest number: B7
Signing time: Sun 27 Sep 2026 07:32:09 +0000
Manifest this update: Sun 27 Sep 2026 07:32:08 +0000
Manifest next update: Sun 04 Oct 2026 07:32:08 +0000
Files and hashes: 1: BFm798uEwX7tUbaM6tlBlX14X68.crl (hash: oH0ss2EKcZ/3B8GSHN0NsfBmIgYpuJT/79EYM9af+M4=)
2: 88B9736AA77811F092FD731BC4F9AE02.roa (hash: t9dZnts+IlYuSJrBx0IgU/pwjcYxg43h5hJtdZZSKtM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.crl
rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 07:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFBA9, serialNumber=0459BBF7CB84C17EED51B68CEAD941957D785FAF
Validity
Not Before: Sep 27 07:32:08 2026 GMT
Not After : Oct 4 07:32:08 2026 GMT
Subject: CN=6ab8c679-f3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:97:9a:eb:91:02:b2:29:88:7d:6d:57:a4:
30:4f:7e:7c:41:11:f0:0f:94:c1:69:80:bc:2d:9f:
6d:e9:b4:cc:3f:65:28:63:7e:0e:a1:0f:f5:b8:48:
8e:36:e8:f2:83:c9:22:23:57:3f:c2:d6:4e:85:13:
98:c6:48:dc:34:b3:e8:e6:c9:07:62:03:45:c7:bd:
c4:85:8a:b2:d8:cb:27:13:ce:b6:97:96:5b:c0:b6:
76:5d:3e:41:da:ec:39:0a:69:94:94:41:b0:36:cb:
a0:39:c6:69:dd:82:25:b1:ba:42:af:bd:eb:fd:c0:
b1:b1:73:d8:03:1a:f1:73:03:79:30:78:08:a7:1e:
b3:a0:6d:52:f1:bc:c3:28:af:cd:ce:dd:1a:62:0a:
d4:da:53:f1:b3:9c:4f:24:35:96:30:34:72:31:46:
94:6a:7f:3f:9c:65:ef:c6:64:87:fd:49:74:8a:61:
1e:31:55:c7:be:47:9b:71:fc:66:38:20:8d:fe:63:
a9:25:ff:e5:ed:bc:9c:42:0a:e9:a9:f8:92:bc:6e:
85:ee:28:6f:b1:54:1c:52:1e:e5:1c:07:9b:11:74:
88:64:cf:1c:66:93:3c:fa:5b:83:b4:a2:80:54:a4:
12:f8:df:77:d6:99:46:7d:7a:eb:bf:8b:42:c1:e2:
56:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:54:5D:AF:9F:B2:C6:3B:EA:B8:DE:3A:12:7F:B3:B4:E0:EA:B5:B7
X509v3 Authority Key Identifier:
keyid:04:59:BB:F7:CB:84:C1:7E:ED:51:B6:8C:EA:D9:41:95:7D:78:5F:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BFm798uEwX7tUbaM6tlBlX14X68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBA9/5730159AA77511F094DEBF2DC4F9AE02/BFm798uEwX7tUbaM6tlBlX14X68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:dd:b5:65:b2:28:18:07:61:a0:2c:14:c6:e8:c3:2c:91:ba:
a7:6b:ce:f2:bf:df:a8:31:b1:9c:a5:b5:46:e0:9c:a5:d6:1d:
8b:50:49:92:20:07:6a:18:d7:1c:58:e6:22:91:37:ce:83:fd:
ff:c5:59:c8:c9:1e:cf:8e:10:3b:ee:27:b0:1f:6b:c0:fd:46:
09:d5:fc:25:db:e8:9e:89:53:e3:66:68:ef:65:28:77:46:7e:
ab:16:70:9f:3c:a4:18:ef:f9:ab:25:7e:63:38:1e:ed:7f:7a:
ca:af:01:42:bd:71:ef:7a:a6:7c:97:2c:eb:80:4b:b8:15:40:
9e:b1:0f:99:26:3b:e4:3c:b6:75:d1:cb:cf:c3:56:f0:d7:a3:
a9:29:3a:ad:e7:70:83:ac:0c:86:b1:07:a8:4e:28:4a:a7:ca:
59:98:45:bf:68:ec:e4:e0:15:85:58:69:1c:60:14:7b:0c:51:
7f:15:e6:7e:ce:64:c2:72:b0:72:93:42:f7:57:da:db:12:17:
f5:b7:99:3b:5d:eb:37:16:69:1e:51:6e:3f:02:98:32:1b:a8:
99:99:37:b5:c3:5e:50:9d:0b:ce:67:a4:7f:db:89:e2:c1:b9:
cc:bf:b4:24:cf:4e:b2:47:fa:e5:5e:75:d7:00:7c:10:f5:d1:
5e:7f:82:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:11:09 2026 by rpki-client