
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
File: bicEPDr0D8Xll5OLFU9ci-D9_2w.mft (raw, json)
Hash identifier: pXMkqokTbeSOVltKdK9xNU3lXwKJEm9iubNivsPaIBk=
Subject key identifier: 1C:9D:DE:86:EA:AE:B6:6F:04:96:9E:A7:89:B7:80:9C:F3:5D:18:E5
Authority key identifier: 6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C
Certificate issuer: /CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C
Certificate serial: 07F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
Manifest number: 07ED
Signing time: Thu 16 Apr 2026 21:11:10 +0000
Manifest this update: Thu 16 Apr 2026 21:11:09 +0000
Manifest next update: Thu 23 Apr 2026 21:11:09 +0000
Files and hashes: 1: bicEPDr0D8Xll5OLFU9ci-D9_2w.crl (hash: q6EtbAgYpqmOamDPK+tNROZT9MasI20SXDG3VN63VtA=)
2: C4E6FFAE2A5C11EB9D022535C4F9AE02.roa (hash: ezMjWZQ+amBAOJReLf6SLQyIzexobHRKhq9YImsmKVA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl
rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2039 (0x7f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E01F7, serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C
Validity
Not Before: Apr 16 21:11:09 2026 GMT
Not After : Apr 23 21:11:09 2026 GMT
Subject: CN=69e1506d-1cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a8:4b:02:b7:cb:49:15:3d:2a:da:99:51:4d:
e8:b0:4e:2a:30:29:25:f8:c8:dc:88:9c:e9:05:88:
54:7b:3f:87:58:e8:1c:ea:31:79:a9:6c:7f:ff:8e:
07:1f:be:3b:a9:c7:5f:3e:7c:c5:bb:26:5e:b5:84:
cf:0c:28:cb:49:f6:86:fd:46:41:80:b2:0d:fe:02:
83:f3:d8:3a:ad:d0:d0:06:e5:49:e1:cb:ab:83:ba:
db:d5:7a:c0:2c:50:e9:55:99:15:dc:90:44:6b:cf:
f5:28:29:e0:45:ff:30:85:24:48:91:36:9c:78:a8:
dd:02:53:00:1a:95:ee:44:40:bb:7b:52:00:e8:e0:
06:2e:9f:8e:d6:c2:b1:2b:a9:f5:f5:e7:e0:ee:58:
29:e4:57:74:68:e1:9a:a6:8f:89:63:c9:ab:61:ad:
d9:3c:ff:3e:07:b4:75:ac:6d:22:e9:dd:31:f3:17:
e9:97:ea:36:6b:6a:b6:0f:cc:4b:ce:30:c5:5c:1a:
1a:fd:d3:44:4a:ba:28:f9:d8:83:9c:27:1e:c6:0a:
44:46:d2:71:cc:14:8f:85:42:b2:54:37:38:51:9b:
39:22:95:e8:bc:ab:01:3a:34:16:eb:68:80:5d:40:
e6:33:85:20:05:cd:66:67:71:32:ec:97:e7:82:9b:
4b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9D:DE:86:EA:AE:B6:6F:04:96:9E:A7:89:B7:80:9C:F3:5D:18:E5
X509v3 Authority Key Identifier:
keyid:6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:9a:84:ad:db:76:5d:21:74:4b:60:a8:ef:10:d6:5c:8a:c0:
6a:6c:9a:6b:94:f1:bc:e9:ba:ec:b0:23:96:0c:ab:eb:2c:5b:
84:5f:e0:2d:34:72:e0:d0:51:43:15:fe:d2:28:d8:46:9e:12:
58:4c:ca:c3:33:0f:ed:02:4b:5b:d2:88:44:45:56:2d:3c:09:
01:9b:58:10:69:ed:7b:86:06:88:6c:15:a6:e2:e4:45:b8:02:
43:5e:7a:f9:dd:98:33:3e:19:cb:5e:bc:0a:e6:f6:4a:90:17:
eb:21:3b:b4:05:ba:88:23:b5:2c:5a:95:10:2b:2e:46:c2:e5:
c2:ea:17:dd:b4:d2:1d:e9:b9:91:df:80:07:2a:b6:f9:3f:96:
4a:e7:8a:f6:a8:8c:fe:4c:af:dd:71:fd:1f:69:15:a9:74:41:
73:25:58:36:fe:64:e8:05:13:f2:39:f1:82:f4:0a:08:cf:68:
44:b2:7c:98:ed:34:20:76:a5:b7:e8:ee:ed:7e:b3:fa:8d:e1:
9d:7e:80:0b:0e:6c:67:ce:aa:04:7e:d4:c8:e8:55:15:95:4b:
89:e6:3b:53:71:56:77:af:20:3c:4e:c8:a3:97:39:50:ea:d3:
f6:e1:c2:79:5d:7c:8b:de:4d:fa:7a:c7:86:d5:76:5c:2d:97:
4e:a5:e1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:24:34 2026 by rpki-client