
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
File: bIAwUr-WwqtKuqntJqOptGOWBaM.mft (raw, json)
Hash identifier: l8noD3u8oqohd2DDGnW5BceoXKFpGcnmUSK4fCQgwdY=
Subject key identifier: FC:CE:7D:AC:9D:F3:65:56:C2:D7:27:54:A7:29:12:C3:46:AA:D2:D0
Authority key identifier: 6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3
Certificate issuer: /CN=A91F89A2/serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3
Certificate serial: 01BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
Manifest number: 01BA
Signing time: Sat 13 Jun 2026 03:56:16 +0000
Manifest this update: Sat 13 Jun 2026 03:56:15 +0000
Manifest next update: Sat 20 Jun 2026 03:56:15 +0000
Files and hashes: 1: bIAwUr-WwqtKuqntJqOptGOWBaM.crl (hash: ec6F7vRzD5JJS5RalBgP9HAmr+maa/CXRKFSbouJCx4=)
2: 0FBF57D2F16611EEB75BE640C4F9AE02.roa (hash: b/pfyAz5rp6mzw6WWGb7CmVVosPd7X9N4rdBir+XR2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl
rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89A2, serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3
Validity
Not Before: Jun 13 03:56:15 2026 GMT
Not After : Jun 20 03:56:15 2026 GMT
Subject: CN=6a2cd4df-e67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:99:7a:5f:fa:e8:f1:d7:38:0c:75:a9:0b:3a:
e6:15:d2:a0:73:f6:d1:f7:df:52:f7:fa:14:c6:5e:
ad:15:12:93:da:f3:65:a1:eb:07:9b:10:1a:f5:34:
eb:a3:72:84:b1:f7:bd:3e:5a:2a:40:9b:cc:82:ac:
e8:fd:7d:5d:e5:30:a4:c6:fd:57:21:8d:4e:a1:00:
61:3f:ef:81:54:36:7d:4c:dc:d9:a9:ce:63:ed:c7:
ef:e1:dc:6f:b9:80:b2:6d:db:bc:9a:db:34:08:51:
23:6f:09:7f:eb:20:b6:ce:0a:61:e8:8f:c8:ac:81:
1a:cd:c2:cc:ad:93:32:47:85:0f:f1:c5:1f:91:fd:
23:08:b8:86:10:0c:4a:34:4d:c4:b5:6b:fb:9a:fc:
6e:b1:44:27:1e:a5:e8:13:0e:ed:d8:f4:b9:5c:72:
9e:1d:d6:3f:1a:f2:3e:86:f4:f8:bb:0d:e3:84:f9:
cc:7b:50:81:04:c0:e9:28:d5:e6:6f:a8:41:5f:4a:
72:1e:b4:8c:03:81:4c:46:f2:55:e7:51:9e:b6:3f:
3e:f5:be:6b:37:74:50:db:86:ea:37:56:10:f6:49:
4d:47:94:5c:7e:cb:50:5d:a8:ba:55:ed:11:4e:bb:
1d:eb:5b:3c:81:c9:ee:1d:c7:85:57:1b:72:06:06:
56:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CE:7D:AC:9D:F3:65:56:C2:D7:27:54:A7:29:12:C3:46:AA:D2:D0
X509v3 Authority Key Identifier:
keyid:6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:58:aa:97:e0:b8:3a:88:52:4a:f7:4b:6d:7a:d9:1e:35:9b:
e2:8e:4c:96:f1:b1:07:16:fa:6f:7e:b9:31:69:f5:13:e4:c9:
91:7e:d3:e1:ae:d6:79:90:c4:9c:7b:dc:ea:56:f2:b9:2a:9c:
13:93:cd:74:68:0d:6a:71:f7:cd:8c:ff:61:76:65:f2:7b:f1:
a1:3a:f1:ac:98:81:12:2e:cd:42:cf:12:e7:f9:8c:b5:c5:c4:
7e:52:79:ff:75:8b:11:da:18:e4:17:fb:d6:28:97:9f:e6:88:
e9:0f:46:63:55:d5:f0:90:13:2b:37:49:58:47:f1:16:36:4d:
f9:63:a7:06:e1:1e:c7:69:51:54:64:15:19:2f:73:6a:65:c5:
e0:fe:7c:e4:bd:a2:41:bd:ca:8c:4b:6b:58:be:12:41:77:b9:
a1:5e:73:39:4e:a0:a0:2b:2e:eb:4e:97:8e:5f:37:9b:99:f8:
0e:c1:55:1d:54:dc:21:dc:3b:2d:f1:d9:91:07:f0:2b:44:80:
65:1f:4f:24:9d:09:1f:da:5a:ac:81:72:8b:7d:65:f7:93:e4:
cd:07:8d:bc:dd:3b:ee:ff:b3:82:5a:10:57:ce:ef:87:c8:36:
cb:69:23:91:c1:1d:79:4f:76:fd:e5:cd:07:bc:96:b8:70:4b:
46:f9:18:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:48:14 2026 by rpki-client