
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
File: BKfrBJqTf9nyuG4Vnd310sma1B4.mft (raw, json)
Hash identifier: Lu/RagMKPMoTolbS8hGWenhQJk0LGQ2YvQNK+zmDmyI=
Subject key identifier: 26:A2:76:B4:D8:37:7C:D7:DF:7E:3C:63:45:34:4C:E2:CC:AC:25:37
Authority key identifier: 04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E
Certificate issuer: /CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E
Certificate serial: 0602
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
Manifest number: 05F9
Signing time: Fri 16 Oct 2026 23:09:10 +0000
Manifest this update: Fri 16 Oct 2026 23:09:10 +0000
Manifest next update: Fri 23 Oct 2026 23:09:10 +0000
Files and hashes: 1: BKfrBJqTf9nyuG4Vnd310sma1B4.crl (hash: xmNB0z/UDW+CablGMULBnY9aAkOdSFukk/7T7OTzkv4=)
2: 709F3B2E145C11EC9A902165C4F9AE02.roa (hash: SmXQ1SFMrsEIIaY56t+M+nddsnk+Z8U9mmLAhEWuQV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl
rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Oct 2026 23:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1538 (0x602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E87AB, serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E
Validity
Not Before: Oct 16 23:09:10 2026 GMT
Not After : Oct 23 23:09:10 2026 GMT
Subject: CN=6ad2ae96-4eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:02:5c:df:6a:19:ff:a2:14:6c:5e:40:c7:89:
9a:15:fe:a8:e7:af:c8:94:fd:8c:84:00:eb:cf:f9:
c5:08:74:37:33:14:a5:58:d3:60:d0:4a:56:e0:cf:
e2:e4:f9:ed:34:dd:b1:10:5d:06:a8:86:bb:f4:5b:
87:9f:47:ba:bd:19:5b:d3:8a:02:f9:66:5a:45:90:
c4:17:a0:1c:4f:f8:b5:d2:19:03:a8:5a:3c:b5:35:
ac:1e:9b:61:63:ca:a9:08:9f:c1:d1:ee:74:ad:cf:
5f:86:06:a1:e6:4c:45:a9:56:56:4c:2d:cc:00:02:
ba:80:c1:e9:bb:6d:e2:61:5e:6c:7b:e3:c0:18:37:
b1:2e:5b:6f:be:ff:eb:c2:59:40:4e:ee:91:0f:8e:
bb:e6:31:3b:0d:6f:63:ce:41:ab:47:2d:1f:79:08:
ae:94:72:15:a3:b0:dc:91:7a:cb:e9:04:fc:d3:c3:
30:19:fe:21:37:79:9c:8c:8c:fc:62:ed:67:f0:69:
6f:39:4b:ef:5f:a5:c3:5a:da:99:c7:6c:0f:38:b4:
8b:3c:90:6c:43:53:6d:d0:8b:f2:1b:ca:d2:a2:39:
2d:46:c0:22:11:15:f1:76:71:b1:10:47:a2:c5:5c:
50:b6:bf:ea:4b:57:dd:82:fa:4f:36:5b:89:93:a9:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A2:76:B4:D8:37:7C:D7:DF:7E:3C:63:45:34:4C:E2:CC:AC:25:37
X509v3 Authority Key Identifier:
keyid:04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:80:40:af:30:26:8a:5c:75:55:9e:8f:7d:26:c7:42:55:f9:
5a:7d:79:40:79:47:a6:99:c2:6e:4e:74:0e:bc:03:1e:78:ed:
a0:1d:b1:d5:ab:44:43:d3:91:06:a0:c3:31:cd:a7:b2:5d:b6:
00:0c:3b:db:2c:6d:a3:ed:9a:36:aa:39:72:74:2d:5e:c0:a8:
8b:83:a7:1a:61:3b:5a:eb:0d:53:2e:f7:7a:56:52:d5:99:a4:
c0:0d:e0:98:3b:a0:f7:a6:56:d9:cd:14:29:c0:84:45:96:45:
fd:7e:02:82:65:52:dd:f2:78:f2:89:d2:b0:4e:5c:b7:24:48:
ea:d5:c7:89:48:74:4f:97:6c:27:fe:2d:4f:cd:17:5e:6c:5c:
d6:50:02:82:74:b7:9f:78:92:42:ea:b4:75:ea:43:7c:77:7d:
d7:3f:78:f5:2b:3d:26:5e:e4:c6:a6:42:cd:6d:7a:c5:31:c5:
42:7b:46:73:dd:41:2c:b2:fa:75:25:d9:08:e8:0c:12:11:be:
a5:39:b4:c1:3b:6b:54:c3:3f:48:f2:af:7d:a9:6b:30:f6:c8:
70:43:36:f7:da:bb:7d:8c:af:c8:bf:3b:1c:48:67:34:2b:e4:
64:e1:3d:12:95:86:c9:2e:36:55:fb:eb:c3:fa:59:77:1f:17:
1c:55:94:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:14:23 2026 by rpki-client