
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.mft
File: Bc1Un1RUvTKyKPavyN424Ej2SA0.mft (raw, json)
Hash identifier: BWAcZSt18VHVgE9sRhosAbEJZcnsrAVwA7o5XJmyWkA=
Subject key identifier: BC:31:71:C1:22:CE:75:3C:AA:49:4D:E3:88:EF:89:1E:8F:48:99:35
Authority key identifier: 05:CD:54:9F:54:54:BD:32:B2:28:F6:AF:C8:DE:36:E0:48:F6:48:0D
Certificate issuer: /CN=A91E8881/serialNumber=05CD549F5454BD32B228F6AFC8DE36E048F6480D
Certificate serial: 085F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bc1Un1RUvTKyKPavyN424Ej2SA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.mft
Manifest number: 0855
Signing time: Thu 16 Apr 2026 20:41:15 +0000
Manifest this update: Thu 16 Apr 2026 20:41:15 +0000
Manifest next update: Thu 23 Apr 2026 20:41:15 +0000
Files and hashes: 1: Bc1Un1RUvTKyKPavyN424Ej2SA0.crl (hash: dXN2NX751TYE/nE0kmGJmEGV5pmFMAuQEzBSalrEE2c=)
2: EAC9D46200F911EB8E61B84CC4F9AE02.roa (hash: IVZD8aLhn54TzXqlxKqb/t3AB0WmVZh5xxfA9310khA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.crl
rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bc1Un1RUvTKyKPavyN424Ej2SA0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2143 (0x85f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8881, serialNumber=05CD549F5454BD32B228F6AFC8DE36E048F6480D
Validity
Not Before: Apr 16 20:41:15 2026 GMT
Not After : Apr 23 20:41:15 2026 GMT
Subject: CN=69e1496b-531b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:f8:a6:11:ba:be:01:1c:69:e5:78:ce:eb:
88:61:7b:a6:4b:b2:fe:50:97:75:ed:22:36:14:7c:
37:37:02:3d:37:99:a8:48:d4:66:9c:49:ff:1d:a6:
9f:50:03:41:07:ac:d3:93:09:65:40:14:99:67:8d:
11:94:35:33:6a:3d:da:17:35:73:48:91:ca:b7:a1:
81:b4:79:63:11:8d:c8:99:d2:e5:05:b7:ca:a6:8a:
33:71:9c:14:97:ba:35:f5:02:45:93:0c:60:94:a3:
ed:8f:19:83:bd:b8:a9:92:b4:7f:e9:e3:e6:dd:be:
bc:52:96:a5:85:6c:0b:36:39:d9:47:b2:2e:5f:6f:
96:2e:cd:c1:db:31:08:e5:a8:8f:49:a5:48:6e:72:
6e:cb:23:48:24:e6:4e:f3:b0:4f:c8:29:15:45:ff:
51:c5:59:eb:07:86:2e:15:21:2d:30:65:be:4e:6d:
4e:2b:a0:7c:17:be:b2:2e:27:f1:de:6e:b9:af:08:
56:3f:78:4c:3d:c5:97:28:81:49:39:87:a3:cf:cd:
51:cd:a1:17:94:33:6b:e0:95:3e:69:af:c1:18:9d:
d7:48:24:8c:95:43:00:53:e2:73:a2:fc:56:4e:e9:
d2:67:9f:0e:27:7b:d7:67:c4:86:dc:05:30:ee:10:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:31:71:C1:22:CE:75:3C:AA:49:4D:E3:88:EF:89:1E:8F:48:99:35
X509v3 Authority Key Identifier:
keyid:05:CD:54:9F:54:54:BD:32:B2:28:F6:AF:C8:DE:36:E0:48:F6:48:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bc1Un1RUvTKyKPavyN424Ej2SA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:ef:c2:b3:27:f5:47:a5:85:2c:be:01:7d:2c:58:cf:c8:60:
ca:83:9b:ab:6b:af:1e:d5:f2:10:f8:e5:12:2a:2e:79:ab:c3:
35:d3:b2:d1:25:16:e8:45:bf:69:cf:e8:f0:66:8e:e4:8e:92:
b6:e6:16:33:ba:5b:66:d4:e9:e3:95:54:38:1e:b7:63:4a:1b:
3a:23:fc:ea:01:45:6b:f6:5d:dd:6b:e4:01:23:e8:1e:f0:72:
d9:45:f8:6d:09:cc:a2:8f:f3:63:52:a2:ee:ce:a1:cb:7f:9f:
82:77:3b:93:f1:0f:bd:88:28:49:67:94:a6:31:01:47:62:03:
cf:fe:5f:cd:da:70:bb:ff:42:ad:df:f9:de:e7:a6:85:19:f8:
b3:34:c5:5c:1e:f9:f1:28:30:fe:01:ce:39:0e:ab:d1:b3:97:
9f:8c:34:16:77:c2:cd:b7:93:08:9c:5d:38:e2:35:a6:e2:f4:
97:23:e9:99:9d:f8:76:2a:d9:ef:78:9c:25:5a:8b:3f:56:c0:
1c:ee:ec:96:24:cd:3d:b0:14:0e:f5:18:69:2b:51:41:71:8f:
1f:44:cc:1f:98:3f:14:7b:c2:d3:46:4d:d0:6a:1e:43:ac:8c:
25:96:37:ce:12:24:4b:6f:bd:52:9e:90:ef:d6:ea:db:2b:ea:
a8:e6:44:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:41 2026 by rpki-client