
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.mft
File: bCaeUzC71Mculn7D40rmph7kR_Y.mft (raw, json)
Hash identifier: 7tfxQYe9ux1roT6uTmr0KVNM0l6wwx6/vHZ89VNC0nQ=
Subject key identifier: 6F:A1:1B:66:F6:AB:8D:4A:93:B5:CE:BB:B1:EA:35:7B:0B:C2:61:59
Authority key identifier: 6C:26:9E:53:30:BB:D4:C7:2E:96:7E:C3:E3:4A:E6:A6:1E:E4:47:F6
Certificate issuer: /CN=A91FAB2C/serialNumber=6C269E5330BBD4C72E967EC3E34AE6A61EE447F6
Certificate serial: 17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCaeUzC71Mculn7D40rmph7kR_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.mft
Manifest number: 15
Signing time: Mon 21 Sep 2026 09:01:56 +0000
Manifest this update: Mon 21 Sep 2026 09:01:55 +0000
Manifest next update: Mon 28 Sep 2026 09:01:55 +0000
Files and hashes: 1: bCaeUzC71Mculn7D40rmph7kR_Y.crl (hash: eLP29W2jPO5itTVCkEWYDjIstbIBDd8cwG2vhK4XDJg=)
2: j3bbIV2LwQIIAV2cBaTJoUMwJQ0.asa (hash: UDvm2B9kpdtbUUsMkxX9LmulUfS/+9q42P8eoBdZzoY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.crl
rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCaeUzC71Mculn7D40rmph7kR_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 09:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAB2C, serialNumber=6C269E5330BBD4C72E967EC3E34AE6A61EE447F6
Validity
Not Before: Sep 21 09:01:55 2026 GMT
Not After : Sep 28 09:01:55 2026 GMT
Subject: CN=6ab0f284-056b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:3a:87:29:8b:05:cf:30:67:a8:33:ac:fc:
e9:cb:eb:6f:10:1d:b7:a2:7e:0f:ab:ff:b5:26:85:
b2:c7:c5:72:fa:98:cb:ab:d1:79:92:42:11:28:97:
8d:c0:cb:4e:68:38:2d:bc:61:f7:05:c3:74:0c:27:
72:b0:ef:f3:8a:9c:19:fb:76:43:a3:13:e3:cb:60:
a0:4f:9e:6e:c5:bb:bf:20:77:6a:9a:c1:7e:74:ae:
76:01:8c:33:25:be:0f:ec:f7:71:f9:98:61:98:33:
9e:d1:5e:39:4c:ae:b3:8e:5c:cf:aa:24:48:9f:7b:
c6:0a:62:f1:0f:fd:5f:ed:07:34:e4:1d:6f:cf:bd:
94:36:03:3a:07:cb:fb:68:db:23:72:f2:88:21:56:
68:c7:56:4b:b9:2b:6a:0f:30:78:16:cc:94:de:fb:
a0:39:e2:0e:7f:66:e4:b9:73:84:21:25:6e:fb:68:
e1:f2:74:f4:de:c4:43:2a:b5:72:87:75:f0:0b:40:
9f:db:c4:3d:9d:51:fe:a4:bd:52:f2:9a:45:48:d5:
20:14:94:80:15:14:ed:e2:d3:6c:49:00:2b:f4:1b:
8a:e4:e7:9e:5a:0a:63:fe:92:96:ea:2a:4a:89:6c:
72:c1:79:61:c1:ca:8e:19:a7:e6:df:92:d4:d1:1b:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A1:1B:66:F6:AB:8D:4A:93:B5:CE:BB:B1:EA:35:7B:0B:C2:61:59
X509v3 Authority Key Identifier:
keyid:6C:26:9E:53:30:BB:D4:C7:2E:96:7E:C3:E3:4A:E6:A6:1E:E4:47:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCaeUzC71Mculn7D40rmph7kR_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:21:4c:19:27:ab:04:7e:dc:1e:b4:92:b2:4d:b2:d9:c6:16:
ef:4a:32:ef:3f:45:e1:d7:7f:f0:05:8c:08:a8:f9:5c:cd:e8:
64:0f:8d:a5:7b:c9:62:46:e4:8e:ab:dc:62:fc:7e:ba:36:b0:
0f:ed:da:9d:47:19:fe:77:b4:0f:c7:31:a3:4c:85:53:10:43:
2c:34:2c:1a:09:2e:f8:c1:8e:63:b9:40:b7:10:94:d1:61:b6:
79:7f:87:1f:81:fc:64:c3:92:dc:b8:d6:e2:bc:85:b7:74:a6:
ce:82:41:86:09:1b:3d:95:c0:89:64:9a:99:32:20:03:25:d0:
3c:23:20:e4:88:b1:31:a4:a4:fd:34:7c:55:82:d6:6f:49:d1:
ad:ff:e4:25:fc:a9:dd:a8:f5:03:a1:c1:3a:36:1a:92:18:88:
ac:47:f6:33:04:5c:9e:c0:6b:13:8a:87:0f:8a:53:68:47:d4:
df:7c:8d:35:ed:a6:dd:39:fa:ba:99:9b:f2:a0:75:49:9d:fa:
d6:b5:b2:25:fa:cd:d2:17:11:3a:66:96:14:a3:46:be:2c:d3:
f7:c2:1e:9a:d4:18:87:52:96:4c:c6:06:d5:8f:58:4b:21:d2:
cc:b6:a3:39:6a:ba:bc:3f:94:4d:dc:68:b3:eb:f2:a3:22:71:
42:55:b2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:09:50 2026 by rpki-client