
$ rpki-client -vvf rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
File: BQFHuU3J1svowLDxrQwBg6YHfDQ.mft (raw, json)
Hash identifier: bGeKsyOPMrrwIs7gsVrsboQF4KZs7xeRXwB6Gb7UM9U=
Subject key identifier: BB:9D:E8:EC:2F:BD:34:D4:3F:8D:45:3B:43:85:AF:28:CB:67:42:8E
Authority key identifier: 05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34
Certificate issuer: /CN=A91629AA/serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34
Certificate serial: 018B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
Manifest number: 0181
Signing time: Sun 05 Apr 2026 04:02:23 +0000
Manifest this update: Sun 05 Apr 2026 04:02:22 +0000
Manifest next update: Sun 12 Apr 2026 04:02:22 +0000
Files and hashes: 1: BQFHuU3J1svowLDxrQwBg6YHfDQ.crl (hash: fQettrA9cpkO4Br0hoxPC/z5JKPyR2CzVnwF3MI38yM=)
2: 1E347CDCE74A11EE8602742BC4F9AE02.roa (hash: X9BXQVXdacHKtE65WWjF1sZIjnf6Hwqrn91/87XDVa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.crl
rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91629AA, serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34
Validity
Not Before: Apr 5 04:02:22 2026 GMT
Not After : Apr 12 04:02:22 2026 GMT
Subject: CN=69d1dece-a9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:d7:9e:b1:27:aa:3a:9a:50:bc:fa:ca:6d:
80:78:e0:06:86:2e:55:74:c0:64:50:aa:e6:9b:0e:
df:ae:a1:fc:11:61:d4:de:d1:a8:d9:80:c3:a8:56:
bb:48:95:5a:77:42:11:35:0b:a2:e4:32:1a:34:16:
bd:03:30:44:71:22:16:6e:51:f0:78:c1:63:b8:72:
8d:d4:68:be:11:48:27:f8:48:0f:98:cf:36:12:e6:
1f:e3:e5:ad:87:f8:c9:56:ec:b3:f5:ca:22:58:7e:
43:11:66:c4:6d:57:fc:44:5d:cf:04:47:0a:25:d9:
f6:fe:ec:46:d1:67:c7:31:77:aa:26:35:a1:06:08:
57:12:0d:8c:e2:63:92:b9:71:f4:7b:d1:41:9d:db:
33:74:80:62:20:ad:21:8f:3b:f2:83:b3:5c:08:97:
cf:b2:11:62:52:bf:76:f4:14:7c:1d:c0:6f:d3:8c:
9d:b2:7d:42:82:38:8b:9e:ef:9f:c8:68:8b:3a:f6:
1a:16:b2:7f:d9:0a:07:35:03:39:21:04:3b:c8:9a:
b8:8c:8c:c4:ce:f6:60:c0:3d:b9:e5:7d:e1:59:e0:
8b:6f:28:84:6c:0c:cb:a2:24:57:83:8e:b3:dc:d9:
b8:40:e6:f0:1f:1e:9d:1a:1e:19:0e:91:b1:e6:61:
f9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9D:E8:EC:2F:BD:34:D4:3F:8D:45:3B:43:85:AF:28:CB:67:42:8E
X509v3 Authority Key Identifier:
keyid:05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e0:e6:1c:ae:bb:d2:a0:47:43:28:ab:76:91:90:4b:59:43:
52:c7:4d:b8:ac:2f:1b:2f:e4:85:a5:b2:cf:f3:48:98:74:ed:
db:11:7f:b5:a2:41:93:7f:cf:b1:10:e5:c6:e8:bd:65:b5:1e:
f0:48:79:12:cc:f6:01:4f:fb:5d:ab:ce:4e:ed:c3:77:6c:9d:
cc:82:5f:a4:42:3b:41:27:e1:59:5b:ad:a3:60:b8:72:24:03:
82:ba:ff:5a:58:3a:8b:2f:a0:95:28:e4:f6:34:c2:57:32:4b:
ea:db:2b:a1:69:f6:f5:9d:ad:79:d9:25:1f:54:53:19:46:6f:
94:0c:07:3f:1c:82:b1:72:e3:3c:f7:5c:50:ac:16:73:c4:25:
39:fe:a7:c6:d5:29:07:32:b1:d2:59:bd:53:61:65:bd:cb:f5:
d7:78:30:0d:7f:71:0d:27:d6:dc:70:9d:51:3b:86:c4:24:04:
80:69:eb:35:94:a0:68:d0:2c:08:c6:44:6e:a9:8f:b8:bd:14:
ad:20:7b:8d:b9:07:f4:b6:8a:02:ae:95:1c:99:81:6a:76:22:
5e:9c:4a:e3:f0:b4:d2:cf:9a:bb:f5:b2:1c:ec:8b:c5:35:ce:
3a:c9:a8:86:7d:17:31:e9:b5:46:3c:99:d5:e1:d8:10:b2:30:
6b:d1:45:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:39:57 2026 by rpki-client