
$ rpki-client -vvf rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
File: BXtTd0A4JnigePW_KExyZ5S50TQ.mft (raw, json)
Hash identifier: awTww94nK0seaw6DwV6s3T7mhrm7cWqKjXAT6Zb9IbU=
Subject key identifier: B3:1F:A6:D1:DE:F5:B7:C6:07:1B:A9:4D:B5:F3:48:0D:AF:6C:3E:72
Authority key identifier: 05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34
Certificate issuer: /CN=A91992FA/serialNumber=057B537740382678A078F5BF284C726794B9D134
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
Manifest number: EF
Signing time: Thu 21 May 2026 06:30:46 +0000
Manifest this update: Thu 21 May 2026 06:30:45 +0000
Manifest next update: Thu 28 May 2026 06:30:45 +0000
Files and hashes: 1: BXtTd0A4JnigePW_KExyZ5S50TQ.crl (hash: LQKInLX3DpUMnLBKZdky536ikxoQ5TDPhW+eRTDsRFw=)
2: CF5EEDA6894411F0BE628977C4F9AE02.roa (hash: AS33QEsrO+w5pzGcSkE9nvQ2nEiXdY1kLZjsdA1rM78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl
rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91992FA, serialNumber=057B537740382678A078F5BF284C726794B9D134
Validity
Not Before: May 21 06:30:45 2026 GMT
Not After : May 28 06:30:45 2026 GMT
Subject: CN=6a0ea696-fe1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:80:5b:69:9d:8d:17:29:71:a8:80:95:19:
7b:7f:46:41:9e:42:04:a5:b6:d4:3b:cf:b4:d6:3b:
c6:c7:b2:9e:8d:bb:01:a6:a0:10:7f:11:04:69:ba:
44:6d:e4:f0:eb:1e:ba:31:7e:62:69:31:0a:6f:3b:
b6:7d:98:bc:98:cd:ff:e8:46:f4:54:5e:08:40:82:
8a:4f:c2:95:8d:44:99:67:02:27:45:aa:d5:7c:0f:
6d:90:b1:76:08:8a:a1:90:04:4a:5e:dd:b9:88:7d:
97:a1:be:48:e7:81:8c:02:db:82:b3:a3:e3:74:fb:
cc:9f:21:43:19:20:9a:b8:b7:71:45:ae:73:42:d1:
20:10:51:0b:de:28:c4:df:02:15:cb:70:78:0a:f9:
a8:b2:fe:a2:34:f5:9d:40:a4:db:fa:fd:4c:89:70:
54:0a:22:d6:e7:ea:9d:fc:f2:6a:09:51:13:a6:96:
2f:c5:ab:db:36:38:4b:21:10:4d:64:b3:91:bd:3a:
3d:76:a9:28:3a:d4:19:5b:95:e5:da:dd:94:af:77:
f3:52:61:a8:82:56:21:f9:4f:f7:c8:4e:0b:a7:16:
d7:a9:31:a7:f4:a6:71:63:47:6c:5b:28:08:b5:35:
84:2b:17:d0:e4:5c:bd:83:b5:f2:8a:fb:1c:97:12:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1F:A6:D1:DE:F5:B7:C6:07:1B:A9:4D:B5:F3:48:0D:AF:6C:3E:72
X509v3 Authority Key Identifier:
keyid:05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:dc:19:68:bb:0c:fd:8f:2c:bb:b4:26:7d:0e:f5:0b:ef:fe:
ff:3d:6e:9b:30:31:0a:88:92:7e:b2:77:fb:7b:2d:fd:53:80:
45:b8:49:70:20:73:89:05:d5:8b:7d:aa:13:30:d5:6b:c2:a5:
f1:c0:e7:4e:97:1e:a5:9d:36:2e:46:8d:5e:1a:d6:fb:70:85:
59:e5:87:55:a3:b5:f3:a6:88:32:6b:6c:fa:35:13:57:9f:22:
be:ca:06:bd:98:2a:63:ea:03:a7:26:65:bb:a7:aa:99:15:54:
9a:c1:69:22:37:9f:38:12:1c:de:76:32:02:55:f5:ba:3d:5c:
37:4a:a5:5b:71:38:7a:ec:cf:e1:02:9e:ff:35:05:59:bd:a3:
ea:69:88:77:63:73:7f:f3:6b:6a:a4:cf:03:7e:7b:74:70:9f:
cf:d6:fa:fe:a1:7f:6d:4f:13:2b:53:9e:d4:ba:21:a9:f9:d5:
b5:81:3a:80:3c:ae:b0:cc:85:b9:5d:aa:03:4a:45:dd:8e:66:
24:76:46:94:07:15:87:d2:3c:d3:17:19:0b:5c:73:64:f8:0e:
5c:25:78:3e:ce:c6:09:d4:3d:05:c3:cb:e6:cc:d3:20:74:e6:
6f:67:66:3c:9a:72:11:c2:74:f7:8d:f4:f7:08:e8:04:10:f7:
ab:69:d0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:57 2026 by rpki-client