
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
File: BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft (raw, json)
Hash identifier: 0Y/XIPci0UrJtVBNi9xu7EM8UW43PReWZJlM7MrXJEw=
Subject key identifier: 9C:8C:BE:AC:A8:B8:D9:43:2C:34:8F:E0:C4:DE:88:0F:A8:11:93:0B
Authority key identifier: 06:66:6A:EC:D7:8C:0A:5E:D1:37:90:A5:E9:AA:40:C3:49:0F:BC:F1
Certificate issuer: /CN=A91F63DC/serialNumber=06666AECD78C0A5ED13790A5E9AA40C3490FBCF1
Certificate serial: 01DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
Manifest number: 01DB
Signing time: Fri 17 Apr 2026 03:14:47 +0000
Manifest this update: Fri 17 Apr 2026 03:14:46 +0000
Manifest next update: Fri 24 Apr 2026 03:14:46 +0000
Files and hashes: 1: BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl (hash: 56m8+Itc8ZyS4tmBeF3N4Kei40p1IMp5anNB2wIcmZw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl
rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F63DC, serialNumber=06666AECD78C0A5ED13790A5E9AA40C3490FBCF1
Validity
Not Before: Apr 17 03:14:46 2026 GMT
Not After : Apr 24 03:14:46 2026 GMT
Subject: CN=69e1a5a7-f4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:69:7e:35:fc:00:45:75:e3:56:8e:77:52:98:
eb:c2:5e:ee:d4:33:4d:0a:66:26:3d:e1:8f:ea:89:
f8:41:36:c2:85:c6:8a:f8:3e:5c:ff:e1:82:8e:8a:
00:dc:87:01:67:c7:cf:92:57:37:da:cd:de:d4:6b:
25:a1:5d:e2:7a:36:49:71:f9:26:b8:49:5a:e6:6f:
2b:85:4d:2c:83:45:8c:79:17:97:b9:c9:dd:dd:18:
8f:ce:7e:71:1b:19:1e:b0:5c:3d:9e:9f:59:17:bd:
43:53:41:29:61:95:99:16:50:e4:d5:96:7c:54:cf:
41:09:2e:8a:cc:60:f1:d4:eb:3b:2d:51:bd:04:d7:
99:ac:90:cd:e9:23:88:e6:79:55:f6:fa:0d:2b:57:
16:00:18:89:07:46:5a:91:01:6b:ea:e9:43:85:95:
84:e5:16:4b:1d:de:31:b1:5e:e6:26:31:59:60:6b:
85:76:3f:59:7a:16:78:8a:1b:44:48:42:e5:cc:de:
5c:93:c4:d1:e8:ed:ac:7e:97:04:61:3a:de:27:28:
6e:79:7d:f6:1b:ec:04:89:db:ed:8c:8c:fe:f4:58:
1d:68:1b:11:18:20:b5:ca:7a:64:5a:ed:e5:ff:a1:
5d:36:bd:ae:3d:a4:34:22:4a:0b:03:e4:0a:62:4e:
73:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8C:BE:AC:A8:B8:D9:43:2C:34:8F:E0:C4:DE:88:0F:A8:11:93:0B
X509v3 Authority Key Identifier:
keyid:06:66:6A:EC:D7:8C:0A:5E:D1:37:90:A5:E9:AA:40:C3:49:0F:BC:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:97:80:7b:dd:68:8c:b5:f5:7e:b8:82:18:c8:56:d0:73:14:
9a:8e:f0:68:bc:b3:be:17:76:de:33:ce:5a:79:7a:08:22:d9:
b7:ff:4e:10:60:ae:a1:46:ed:b5:93:87:06:38:89:ed:14:9d:
3e:be:dc:99:24:6c:48:f6:2b:61:df:54:e2:85:56:d5:20:99:
6e:0e:4e:e1:e6:a8:d4:9e:fa:60:8f:8d:f0:67:8a:a0:2c:c8:
dc:12:98:1a:81:b5:fd:4b:3a:aa:2f:c9:e3:cd:fb:5e:23:74:
2e:f7:e6:41:93:c2:ae:56:f9:94:a4:92:0e:97:f6:17:f2:51:
63:b9:e5:83:2f:f1:02:d1:5c:9b:12:09:7a:17:86:68:81:a3:
81:1d:37:ae:4e:d2:82:02:0f:15:f1:69:a2:8c:56:fa:15:f0:
7e:a8:6e:8d:da:4a:60:63:78:5e:b5:f9:23:ca:5c:f2:eb:b5:
29:be:58:58:97:6a:9e:bb:4c:02:4f:db:1c:23:9e:1d:de:3c:
30:05:a7:6d:a3:7c:61:87:98:b6:65:d8:47:8b:65:8a:4d:54:
02:6a:e8:0b:5b:c8:fa:49:76:ac:89:4e:e4:76:45:a9:1d:cb:
58:13:ce:9e:7e:22:c2:45:54:b7:cd:b2:e4:33:eb:ca:12:0e:
e3:41:d2:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjYzREMxMTAvBgNVBAUTKDA2NjY2QUVDRDc4QzBBNUVEMTM3OTBBNUU5QUE0MEMz
NDkwRkJDRjEwHhcNMjYwNDE3MDMxNDQ2WhcNMjYwNDI0MDMxNDQ2WjAYMRYwFAYD
VQQDEw02OWUxYTVhNy1mNGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ml+NfwARXXjVo53Upjrwl7u1DNNCmYmPeGP6on4QTbChcaK+D5c/+GCjooA
3IcBZ8fPklc32s3e1GsloV3iejZJcfkmuEla5m8rhU0sg0WMeReXucnd3RiPzn5x
GxkesFw9np9ZF71DU0EpYZWZFlDk1ZZ8VM9BCS6KzGDx1Os7LVG9BNeZrJDN6SOI
5nlV9voNK1cWABiJB0ZakQFr6ulDhZWE5RZLHd4xsV7mJjFZYGuFdj9ZehZ4ihtE
SELlzN5ck8TR6O2sfpcEYTreJyhueX32G+wEidvtjIz+9FgdaBsRGCC1ynpkWu3l
/6FdNr2uPaQ0IkoLA+QKYk5zQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJyMvqyo
uNlDLDSP4MTeiA+oEZMLMB8GA1UdIwQYMBaAFAZmauzXjApe0TeQpemqQMNJD7zx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjNEQy8wNDMxNTJFMjY2
NTMxMUVFOUM2OEVFMkJDNEY5QUUwMi9CbVpxN05lTUNsN1JONUNsNmFwQXcwa1B2
UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JtWnE3TmVNQ2w3Uk41Q2w2YXBBdzBrUHZQRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NjNEQy8wNDMxNTJFMjY2NTMxMUVFOUM2OEVFMkJDNEY5QUUwMi9CbVpxN05lTUNs
N1JONUNsNmFwQXcwa1B2UEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKpeAe91ojLX1friCGMhW0HMUmo7waLyzvhd23jPOWnl6CCLZt/9OEGCuoUbt
tZOHBjiJ7RSdPr7cmSRsSPYrYd9U4oVW1SCZbg5O4eao1J76YI+N8GeKoCzI3BKY
GoG1/Us6qi/J4837XiN0LvfmQZPCrlb5lKSSDpf2F/JRY7nlgy/xAtFcmxIJeheG
aIGjgR03rk7SggIPFfFpooxW+hXwfqhujdpKYGN4XrX5I8pc8uu1Kb5YWJdqnrtM
Ak/bHCOeHd48MAWnbaN8YYeYtmXYR4tlik1UAmroC1vI+kl2rIlO5HZFqR3LWBPO
nn4iwkVUt82y5DPryhIO40HSUg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:09 2026 by rpki-client