
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
File: BstI9X1UOpeC2KfJbaTh3tvDwws.mft (raw, json)
Hash identifier: HwYIbgiQRS5083hcvDKyuKZAADWX08QFKOxDz1ie0Hc=
Subject key identifier: E2:9A:B2:9D:92:AD:F6:95:D8:E5:AB:37:47:DA:D4:99:84:7C:01:D7
Authority key identifier: 06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B
Certificate issuer: /CN=A91E2EFF/serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
Manifest number: BD
Signing time: Sat 13 Jun 2026 07:36:59 +0000
Manifest this update: Sat 13 Jun 2026 07:36:58 +0000
Manifest next update: Sat 20 Jun 2026 07:36:58 +0000
Files and hashes: 1: BstI9X1UOpeC2KfJbaTh3tvDwws.crl (hash: QOG9hooK/gwM4igpctWtKqE1wEZ7CZIChizWgv+d3tA=)
2: 3698C9BA484A11F0B96B9D10C4F9AE02.roa (hash: eZ3EEtlXaLlDs9X0uWHzm5rU29IYfnYnEpW+Tcx5wts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.crl
rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:36:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2EFF, serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B
Validity
Not Before: Jun 13 07:36:58 2026 GMT
Not After : Jun 20 07:36:58 2026 GMT
Subject: CN=6a2d089b-c7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:52:71:79:7c:94:f7:c6:a9:fe:fa:81:21:
6a:de:3f:99:a4:42:3d:3d:27:4b:86:75:43:55:cc:
f8:82:e8:06:42:c9:d9:2f:5c:bb:dc:73:4e:b9:1e:
6f:47:ab:93:de:65:4f:a0:f5:96:fb:61:ec:e4:ee:
7b:1f:8c:b0:a6:76:fd:cb:11:46:b0:b5:47:bb:c2:
70:ec:eb:d2:92:31:72:7c:07:c7:8b:c7:26:16:a6:
4f:9e:74:8d:a6:39:33:8b:97:33:6d:6a:ea:0d:82:
7e:d3:90:57:7e:4d:18:de:23:5f:ca:e6:32:0d:ed:
17:62:e0:88:6f:48:3d:ee:72:b0:96:48:e4:62:b2:
a2:80:9b:cd:3a:a7:79:db:2d:d5:64:1e:5a:d7:a0:
f7:19:f1:76:f6:21:8d:fe:61:2c:ae:da:8e:fc:13:
ca:3b:3c:4d:54:37:c0:77:40:52:92:bf:7d:9a:be:
57:b4:bf:17:f7:e6:46:de:60:98:c5:f7:a2:ce:6b:
fd:fa:aa:01:12:24:1f:92:17:34:77:1d:c6:ea:4a:
5f:f7:77:1a:73:0f:1c:b6:b3:9b:91:13:94:29:62:
0c:91:ee:b3:54:81:da:be:c6:4e:37:a7:47:33:d7:
c4:b3:d2:5e:91:a7:c2:2d:db:a9:b1:71:88:79:fd:
ed:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9A:B2:9D:92:AD:F6:95:D8:E5:AB:37:47:DA:D4:99:84:7C:01:D7
X509v3 Authority Key Identifier:
keyid:06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:e0:d3:06:18:7a:31:f2:fa:d2:69:d2:3c:15:33:89:19:58:
fa:82:c9:d6:12:b0:fb:20:5c:3a:a0:51:8d:bc:8d:0e:5f:ab:
5c:0d:18:d0:6e:4a:c8:67:1e:de:67:f9:74:50:9a:85:92:3a:
62:d2:38:e2:88:7e:ce:d6:b8:13:79:56:76:e7:d0:6c:b1:32:
e7:5e:da:69:fa:c4:85:cc:ac:2a:38:dd:f7:e2:9d:46:53:8d:
37:6c:94:a3:9e:ab:ad:5b:fb:e5:f7:4a:29:0c:a6:fe:57:14:
b2:4f:5b:fc:76:ef:f6:3f:2b:81:62:7d:81:d1:7a:df:59:47:
46:b6:48:b9:07:32:e6:f6:2b:32:15:1a:f3:70:36:02:7c:09:
2b:fa:ab:b6:da:c1:56:a5:47:aa:e6:a8:c5:be:ff:fd:1c:ac:
ac:09:04:8c:ee:be:ae:5d:d9:2d:ca:55:11:f5:0e:9b:ea:1c:
8b:c6:f8:03:1a:8b:60:32:83:70:4a:b0:39:f5:eb:9a:06:95:
18:f5:48:6e:f4:1e:f8:b1:3d:84:9b:c5:21:9f:ab:ea:fb:89:
ff:03:f5:6a:78:7e:1c:53:b8:e0:fb:6d:fb:0e:de:31:b8:55:
28:5e:a3:27:14:ef:c8:12:85:e8:99:1f:c4:53:6e:70:51:5f:
84:e9:3e:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTJFRkYxMTAvBgNVBAUTKDA2Q0I0OEY1N0Q1NDNBOTc4MkQ4QTdDOTZEQTRFMURF
REJDM0MzMEIwHhcNMjYwNjEzMDczNjU4WhcNMjYwNjIwMDczNjU4WjAYMRYwFAYD
VQQDEw02YTJkMDg5Yi1jN2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApP5ScXl8lPfGqf76gSFq3j+ZpEI9PSdLhnVDVcz4gugGQsnZL1y73HNOuR5v
R6uT3mVPoPWW+2Hs5O57H4ywpnb9yxFGsLVHu8Jw7OvSkjFyfAfHi8cmFqZPnnSN
pjkzi5czbWrqDYJ+05BXfk0Y3iNfyuYyDe0XYuCIb0g97nKwlkjkYrKigJvNOqd5
2y3VZB5a16D3GfF29iGN/mEsrtqO/BPKOzxNVDfAd0BSkr99mr5XtL8X9+ZG3mCY
xfeizmv9+qoBEiQfkhc0dx3G6kpf93cacw8ctrObkROUKWIMke6zVIHavsZON6dH
M9fEs9JekafCLdupsXGIef3tLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKasp2S
rfaV2OWrN0fa1JmEfAHXMB8GA1UdIwQYMBaAFAbLSPV9VDqXgtinyW2k4d7bw8ML
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGRi9BMzE0ODQ3QzQ4
NDkxMUYwQkYwNzAzNzBDNEY5QUUwMi9Cc3RJOVgxVU9wZUMyS2ZKYmFUaDN0dkR3
d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0JzdEk5WDFVT3BlQzJLZkpiYVRoM3R2RHd3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MkVGRi9BMzE0ODQ3QzQ4NDkxMUYwQkYwNzAzNzBDNEY5QUUwMi9Cc3RJOVgxVU9w
ZUMyS2ZKYmFUaDN0dkR3d3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUeDTBhh6MfL60mnSPBUziRlY+oLJ1hKw+yBcOqBRjbyNDl+rXA0Y0G5KyGce
3mf5dFCahZI6YtI44oh+zta4E3lWdufQbLEy517aafrEhcysKjjd9+KdRlONN2yU
o56rrVv75fdKKQym/lcUsk9b/Hbv9j8rgWJ9gdF631lHRrZIuQcy5vYrMhUa83A2
AnwJK/qrttrBVqVHquaoxb7//RysrAkEjO6+rl3ZLcpVEfUOm+oci8b4AxqLYDKD
cEqwOfXrmgaVGPVIbvQe+LE9hJvFIZ+r6vuJ/wP1anh+HFO44Ptt+w7eMbhVKF6j
JxTvyBKF6JkfxFNucFFfhOk+Sg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:40:55 2026 by rpki-client