
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.mft
File: Bc1Un1RUvTKyKPavyN424Ej2SA0.mft (raw, json)
Hash identifier: WYV7hpUq7l6zcIZfVkgxppgQghSHwgwwgy3Xbwfh7CU=
Subject key identifier: 6D:28:02:17:1A:16:B8:8C:07:07:62:91:DF:40:E1:F1:2C:0E:7D:6F
Authority key identifier: 05:CD:54:9F:54:54:BD:32:B2:28:F6:AF:C8:DE:36:E0:48:F6:48:0D
Certificate issuer: /CN=A91E8881/serialNumber=05CD549F5454BD32B228F6AFC8DE36E048F6480D
Certificate serial: 0847
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bc1Un1RUvTKyKPavyN424Ej2SA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.mft
Manifest number: 083D
Signing time: Mon 02 Mar 2026 02:42:35 +0000
Manifest this update: Mon 02 Mar 2026 02:42:34 +0000
Manifest next update: Mon 09 Mar 2026 02:42:34 +0000
Files and hashes: 1: Bc1Un1RUvTKyKPavyN424Ej2SA0.crl (hash: t2OUFfpJqYtHLw6hoMO7hYO8A6NRYsSEiCsucDE36ns=)
2: EAC9D46200F911EB8E61B84CC4F9AE02.roa (hash: IVZD8aLhn54TzXqlxKqb/t3AB0WmVZh5xxfA9310khA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.crl
rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bc1Un1RUvTKyKPavyN424Ej2SA0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:42:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2119 (0x847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8881, serialNumber=05CD549F5454BD32B228F6AFC8DE36E048F6480D
Validity
Not Before: Mar 2 02:42:34 2026 GMT
Not After : Mar 9 02:42:34 2026 GMT
Subject: CN=69a4f91a-a5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:37:d8:c8:a9:e6:3d:2e:51:57:26:85:b1:
bc:fb:05:01:2b:b2:00:24:15:db:08:ba:39:c7:3a:
4a:84:51:84:d2:fd:08:a9:a0:d1:0e:8b:85:94:f1:
60:80:b5:cd:a9:fa:ea:fe:2d:31:a7:76:40:85:40:
74:5f:e6:91:b0:22:5f:2c:c7:92:33:67:3d:fe:8e:
ac:74:0d:ca:9c:52:1e:4c:6b:9d:60:ed:46:50:05:
8e:3e:b5:89:0b:7c:2b:89:43:9e:f0:41:ce:d7:28:
83:0c:ce:4f:39:c3:6c:8c:40:b8:d2:f8:a2:8b:85:
2c:e1:82:8e:4b:ae:2a:59:a3:a7:22:4d:58:be:84:
1a:2c:55:8f:00:50:3c:70:16:f0:ef:fa:0f:e9:d1:
6a:23:0f:ed:c0:a5:fd:f4:a6:4b:ab:51:ab:5c:bc:
23:1f:19:ac:f9:5b:a8:e6:5a:d0:0e:24:8c:b9:9c:
7d:95:3d:ef:b3:33:79:8e:d4:12:54:96:5c:7f:94:
77:58:b2:fc:75:2a:dd:e2:b9:8c:80:18:51:d6:fa:
4e:64:8a:4e:dc:24:75:78:26:0e:c7:55:3b:a5:1c:
35:d4:5b:05:76:d9:e3:af:e2:80:f2:90:c1:ac:b8:
16:e4:7b:d2:72:53:72:36:08:fa:8e:44:97:6f:b8:
14:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:28:02:17:1A:16:B8:8C:07:07:62:91:DF:40:E1:F1:2C:0E:7D:6F
X509v3 Authority Key Identifier:
keyid:05:CD:54:9F:54:54:BD:32:B2:28:F6:AF:C8:DE:36:E0:48:F6:48:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bc1Un1RUvTKyKPavyN424Ej2SA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:ce:a6:32:8f:db:3e:73:10:f4:c5:5c:a9:74:2e:9f:47:42:
1f:e4:48:69:e8:68:8b:da:cb:ad:3f:e6:a4:d4:33:75:a9:b7:
9a:16:f4:1e:0c:7e:9a:7b:eb:22:d5:00:4b:fe:2e:0c:fe:65:
98:b1:72:b5:14:d4:f6:bf:bf:34:6b:6c:bb:11:0d:d8:de:6b:
68:eb:57:e5:d8:08:14:8c:8f:01:df:d9:91:12:b8:10:a2:00:
e3:dd:bb:43:49:df:18:31:ab:79:20:1d:88:e9:10:eb:32:aa:
a7:16:99:3e:43:03:ee:10:c8:e1:de:be:c0:93:77:15:b5:5b:
b0:26:e7:69:d4:2b:27:3c:51:c2:8d:85:9e:8e:4d:ee:54:c5:
69:ed:56:94:6f:59:91:b4:cc:ef:6f:bd:93:b8:1d:8f:0f:ef:
c1:51:b5:8d:4e:db:95:8a:20:89:b1:8b:11:56:e0:b8:07:3d:
7d:c3:e2:d9:0a:aa:5f:0c:69:87:15:7a:58:04:47:58:1a:e5:
fd:c4:60:d1:c1:08:2a:77:11:68:84:d8:5f:ce:10:06:66:4f:
e5:0e:a8:5d:cd:0e:1e:99:4f:23:75:ee:13:bc:ea:f4:a4:99:
f8:eb:02:eb:39:32:20:6a:5d:40:1e:67:6f:b2:79:f0:b7:e0:
51:f1:da:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:23:47 2026 by rpki-client