
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
File: BKfrBJqTf9nyuG4Vnd310sma1B4.mft (raw, json)
Hash identifier: W60MezVNM4WDTp+HGTxnziyj+eHe2pHUb25+H6D/owo=
Subject key identifier: 9E:FC:37:5D:48:DC:D1:34:1D:F9:3B:C4:45:B1:27:7A:4E:1B:F3:86
Authority key identifier: 04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E
Certificate issuer: /CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E
Certificate serial: 05C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
Manifest number: 05B9
Signing time: Fri 12 Jun 2026 23:09:44 +0000
Manifest this update: Fri 12 Jun 2026 23:09:43 +0000
Manifest next update: Fri 19 Jun 2026 23:09:43 +0000
Files and hashes: 1: BKfrBJqTf9nyuG4Vnd310sma1B4.crl (hash: vm5TuepvSl5ZEEESOujg+mjRDFRU4KaCrYKhAIKWlyk=)
2: 709F3B2E145C11EC9A902165C4F9AE02.roa (hash: SmXQ1SFMrsEIIaY56t+M+nddsnk+Z8U9mmLAhEWuQV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl
rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:09:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1474 (0x5c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E87AB, serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E
Validity
Not Before: Jun 12 23:09:43 2026 GMT
Not After : Jun 19 23:09:43 2026 GMT
Subject: CN=6a2c91b8-cfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:0b:0d:d8:3c:37:a2:ce:24:c5:3e:0a:2a:
94:ca:65:2d:ef:33:0a:5c:03:2f:d4:b0:f9:7c:57:
e9:7c:10:ec:49:10:b7:8a:4f:b1:9b:94:da:41:4a:
0f:b5:a9:f2:4b:8c:a7:37:bf:a5:2b:e1:a8:5e:80:
31:35:42:58:ed:9d:d2:d7:c4:29:a1:3c:e7:3a:f8:
69:50:c4:6e:04:22:3a:bd:68:a3:ee:9c:b9:55:53:
4a:47:9d:a0:75:ad:92:6d:c1:8e:2a:3e:22:dc:25:
19:59:14:bf:8b:90:a5:80:c0:d5:91:a7:3a:c8:7d:
62:e5:e6:db:45:88:e3:87:df:df:a6:e5:03:4f:2d:
1e:1f:de:88:db:24:87:a1:7e:ab:b7:8c:bf:76:04:
17:90:b4:9a:79:f5:7b:dd:d0:74:a6:d1:2e:7b:ee:
c5:6b:59:e6:f5:de:82:6d:2e:d9:56:f2:88:62:a7:
b9:cb:f5:9d:af:c9:5a:8d:ec:4c:ee:cb:62:d3:96:
63:0a:b3:7a:e0:1f:a6:07:0f:74:af:ff:f7:83:ca:
c4:ae:fa:2d:ca:cc:88:ae:fd:72:f0:3e:77:e0:fd:
80:10:6b:05:d7:44:07:dc:c9:9b:38:26:00:fc:6d:
a6:76:94:8f:01:11:45:8f:80:57:28:3a:30:b1:c6:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FC:37:5D:48:DC:D1:34:1D:F9:3B:C4:45:B1:27:7A:4E:1B:F3:86
X509v3 Authority Key Identifier:
keyid:04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:dd:b8:21:db:53:b5:dd:49:90:6d:f2:9a:ba:8f:05:6c:7a:
af:7c:ac:1d:7b:94:76:e3:fa:ef:15:ce:e6:8b:1c:c3:df:7d:
0c:dd:ac:c2:3a:3e:88:b9:b6:2f:d0:69:07:8f:b0:d0:f5:e0:
26:04:14:be:f4:da:b0:4c:70:9b:ae:2f:fd:70:a9:10:82:2f:
ef:c0:bb:ad:e6:31:92:71:81:33:18:70:6c:d7:67:ed:b9:12:
25:15:ba:97:dc:45:04:03:97:d5:c9:a8:f1:ce:12:7a:af:75:
74:c6:83:a2:68:92:2a:66:9a:49:87:0b:86:4d:02:d1:f3:f4:
22:51:22:29:a5:48:ab:52:fb:ef:be:a1:2f:8e:2e:5c:a2:38:
54:f0:13:39:03:43:3a:d4:fd:4c:53:d2:b6:46:8e:48:dc:b0:
56:a4:68:f1:d9:a4:ef:b4:e5:65:d2:76:34:08:9a:bb:56:bc:
dd:58:81:d8:c5:5b:b5:79:1d:41:af:c7:fa:2e:38:8d:83:7c:
15:da:be:95:68:fa:c5:34:b8:80:a3:37:cc:cb:bd:1a:78:ff:
df:7a:a0:9d:19:eb:51:10:fe:d7:ad:bd:ce:a7:64:c7:be:23:
36:11:83:ab:c2:91:03:a6:3c:4c:21:02:3d:16:00:33:e8:95:
92:5a:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:54:03 2026 by rpki-client