
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
File: BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft (raw, json)
Hash identifier: Vke6MoPE5+IwKDsneNSXpQJPfiW27q2z6IT/VCD9Qe4=
Subject key identifier: 1A:EB:AE:EA:35:C2:1C:84:15:D8:54:DA:6F:4E:67:B6:89:53:C2:0E
Authority key identifier: 06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
Certificate issuer: /CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Certificate serial: 1798
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
Manifest number: 177C
Signing time: Sat 10 Oct 2026 16:36:30 +0000
Manifest this update: Sat 10 Oct 2026 16:36:29 +0000
Manifest next update: Sat 17 Oct 2026 16:36:29 +0000
Files and hashes: 1: BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl (hash: 7FKhKN7mgtYCcOfDGPz1qV3gB++WlKmli2Lhya4gOYg=)
2: 091435C84FA911EFB86F4D40C4F9AE02.roa (hash: CJNG/K8L9+DgV5sR3qhRIaI7DfSSiBEZ1i4T4JpMdyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl
rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6040 (0x1798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CE8, serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Validity
Not Before: Oct 10 16:36:29 2026 GMT
Not After : Oct 17 16:36:29 2026 GMT
Subject: CN=6aca698e-8c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:f8:43:18:44:69:df:34:f5:6f:00:c9:81:
09:90:14:64:8b:92:5f:7e:88:7d:0c:5e:cc:d0:26:
61:32:5a:eb:49:05:e5:f2:0f:96:34:6b:52:13:0f:
61:22:db:a3:92:68:30:35:c7:64:2c:f3:7a:05:c7:
d3:65:9f:0a:ac:4b:27:b6:21:4b:05:4b:97:b9:ae:
ea:2f:7c:90:1d:25:22:fe:db:4a:91:b4:51:53:b2:
dc:c0:b6:43:bd:c1:7b:18:43:c0:0c:74:d9:fe:1a:
54:6e:51:49:0d:55:b2:7f:32:f1:17:06:4c:75:2d:
cc:d7:25:51:f2:6c:cf:27:0c:89:58:85:75:75:7a:
19:95:04:20:be:07:6a:c7:28:b1:bf:c1:87:6c:8e:
51:9d:b6:88:dd:18:7b:7c:a1:a5:94:47:d2:53:a4:
0e:22:71:2b:5a:32:2a:42:3f:85:5e:65:2a:cb:36:
64:e9:57:09:e5:be:c8:a3:13:2f:40:40:43:1b:8b:
d7:d5:09:52:8c:b6:08:0f:5f:ac:68:c5:78:23:2e:
f4:c4:d1:c7:6b:f9:29:5a:95:a4:77:5b:86:09:39:
5a:7c:ea:24:fa:23:1f:c0:00:ec:e0:11:c5:3a:6d:
ec:2a:ec:81:8a:f6:78:15:82:ff:5f:17:a7:91:5d:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EB:AE:EA:35:C2:1C:84:15:D8:54:DA:6F:4E:67:B6:89:53:C2:0E
X509v3 Authority Key Identifier:
keyid:06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:0e:c2:ad:3e:72:b5:34:05:44:92:d8:b3:41:11:9c:38:1b:
f2:05:0a:b3:87:99:9e:43:e9:34:3b:e6:db:c7:5b:21:26:10:
c8:1b:02:61:26:cc:94:ad:58:a5:d1:cc:39:a9:c1:b8:e8:7f:
d2:5f:ec:13:f7:ae:dd:a1:8c:e8:46:bf:ad:49:d5:86:cd:5b:
d8:d6:fc:ac:cd:af:cb:83:70:0c:f0:c4:58:f7:70:d7:39:8a:
10:4b:3d:d4:55:dd:e8:d8:ff:db:74:fe:db:b2:80:49:3f:c9:
ba:14:16:9a:ea:3d:da:47:21:fc:55:a9:29:6f:68:ba:30:65:
da:27:ea:76:78:ec:99:f2:bc:d7:39:a1:e2:51:41:87:af:11:
e7:c5:00:2d:a2:5a:4b:7a:c8:3b:3b:97:87:69:2f:92:b0:cd:
05:37:3f:46:02:86:44:d8:1d:c4:3a:f3:b8:ac:9c:2b:6c:f8:
9b:45:c7:a4:03:5c:0e:0f:02:77:32:19:81:36:1d:83:30:60:
d6:7d:1f:f2:88:2f:a4:23:be:80:36:aa:2a:70:fb:99:ba:11:
a0:51:69:e8:09:98:a6:0e:62:11:2e:da:01:8a:23:d0:5d:1f:
f4:d9:48:ae:44:ad:fa:fd:16:e9:df:cc:e5:cd:66:02:8f:dd:
04:53:3a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:28:23 2026 by rpki-client