
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
File: bCTOJGStN3HjLDMIGNG32gFMaQk.mft (raw, json)
Hash identifier: XDHoqJBMlmlYwa5QnrwtbrjlSdAlZF/JTfiRhgK9yeI=
Subject key identifier: 7A:99:24:5E:8D:A0:78:35:AE:E9:DE:DA:8A:69:F7:08:7F:F6:C2:FD
Authority key identifier: 6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09
Certificate issuer: /CN=A91DC84C/serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909
Certificate serial: 01BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
Manifest number: 01BD
Signing time: Sat 13 Jun 2026 03:54:09 +0000
Manifest this update: Sat 13 Jun 2026 03:54:09 +0000
Manifest next update: Sat 20 Jun 2026 03:54:09 +0000
Files and hashes: 1: bCTOJGStN3HjLDMIGNG32gFMaQk.crl (hash: oIsBkD7bKmNXNw/AJ0k+vdIuN0LcEpLQ6sBAFotnQOE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl
rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC84C, serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909
Validity
Not Before: Jun 13 03:54:09 2026 GMT
Not After : Jun 20 03:54:09 2026 GMT
Subject: CN=6a2cd461-4374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:2e:c0:f8:6f:92:53:2c:d6:9d:65:26:56:
74:29:4f:0e:70:4b:87:ec:05:25:a9:14:f6:1d:21:
d5:4b:24:8e:8b:8f:1e:a6:a1:64:75:bd:d8:37:54:
74:c3:95:12:ee:71:86:e3:ae:79:96:fd:82:91:ec:
49:aa:87:13:e4:55:99:6d:f9:f4:e7:05:9c:b4:c4:
60:0b:71:b7:d4:82:ce:fa:e0:68:83:8a:ae:8c:fe:
e4:44:9b:e6:67:2d:3e:5f:6e:58:f5:ad:78:01:0b:
0e:79:04:bd:86:1c:3e:13:bd:c6:64:3e:45:e9:ec:
0b:07:bc:f5:4b:de:74:54:2b:ad:cf:67:3b:84:d4:
e4:8c:60:dc:36:e6:f5:fd:ba:94:3b:a7:6a:26:0e:
93:24:af:9d:42:39:f5:2b:1b:4c:ec:88:6d:24:29:
12:23:4c:d0:fd:fa:ec:39:cb:c0:dc:05:28:43:b9:
06:67:c5:b7:1c:77:21:3e:b7:51:92:de:75:4c:f8:
10:34:15:30:6d:e2:c5:fb:1b:e3:cf:07:7f:de:af:
99:60:4d:8e:20:ce:33:ba:9b:61:34:ab:44:9d:e7:
3c:88:ad:56:c0:53:0a:9a:55:cc:da:b1:3d:6f:94:
f4:17:7d:a1:00:e7:87:e9:fa:5f:35:19:d2:44:13:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:99:24:5E:8D:A0:78:35:AE:E9:DE:DA:8A:69:F7:08:7F:F6:C2:FD
X509v3 Authority Key Identifier:
keyid:6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:62:08:fc:ac:a2:83:24:34:21:02:4c:dc:6c:f9:9b:19:15:
16:dd:e9:f1:95:c5:47:3b:aa:f4:67:25:7a:b4:0b:86:74:73:
f6:70:4c:b1:a2:b9:a8:09:65:88:45:82:90:3e:30:ac:13:3e:
a4:8d:5d:7f:03:b6:8e:31:42:df:13:33:a4:18:fa:4e:61:65:
d2:41:34:4f:2e:2e:b0:79:a0:9b:e1:f9:79:29:02:cb:fe:89:
89:8d:24:af:15:e9:03:79:4b:7f:4b:0d:a2:ed:82:2a:5c:8d:
36:ed:65:ba:12:05:cc:4c:82:0d:e6:10:90:2d:f2:29:e3:f9:
08:e5:16:9d:7d:02:05:37:03:d8:75:27:3f:94:59:66:7a:8f:
26:f0:c5:58:b9:b3:77:a0:ac:cf:1e:ad:c7:2e:ce:c5:4d:6c:
26:5c:ce:8d:de:42:c3:ef:08:eb:15:c8:8a:51:d2:1c:d8:fd:
0a:41:f4:32:88:a3:7a:38:b7:47:bd:d4:5d:3b:27:52:02:40:
fd:50:10:07:3a:da:5b:8b:02:9d:82:33:1e:44:e7:cc:9a:31:
22:59:95:37:50:bf:16:f2:d9:cd:58:b9:f0:bc:ab:4b:77:21:
e7:6a:0e:13:4d:67:4a:bd:fd:a6:8a:16:02:e6:de:07:a4:65:
f6:db:51:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:35 2026 by rpki-client