
$ rpki-client -vvf rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
File: BXtTd0A4JnigePW_KExyZ5S50TQ.mft (raw, json)
Hash identifier: jLcXgk7QSvnG7bV/6yxGLg4GCDXMOVmv42y5sVFMdIk=
Subject key identifier: 69:3F:A2:0D:06:F8:15:38:AD:2C:D6:A5:0A:4A:2E:75:67:A9:25:94
Authority key identifier: 05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34
Certificate issuer: /CN=A91992FA/serialNumber=057B537740382678A078F5BF284C726794B9D134
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
Manifest number: 011C
Signing time: Wed 19 Aug 2026 06:33:09 +0000
Manifest this update: Wed 19 Aug 2026 06:33:09 +0000
Manifest next update: Wed 26 Aug 2026 06:33:09 +0000
Files and hashes: 1: BXtTd0A4JnigePW_KExyZ5S50TQ.crl (hash: oXyIvkxCrdrA9Uo0pHVsYkJDX/k4kUZcY7MqsnQcz4c=)
2: CF5EEDA6894411F0BE628977C4F9AE02.roa (hash: AS33QEsrO+w5pzGcSkE9nvQ2nEiXdY1kLZjsdA1rM78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl
rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:33:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91992FA, serialNumber=057B537740382678A078F5BF284C726794B9D134
Validity
Not Before: Aug 19 06:33:09 2026 GMT
Not After : Aug 26 06:33:09 2026 GMT
Subject: CN=6a854e25-1f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:37:77:57:f1:a1:80:a8:e6:00:6d:da:01:
a7:f7:9f:ab:6d:f8:cf:dc:a4:99:11:b9:9d:4e:7f:
cb:0e:7b:a2:cf:ac:58:a3:e6:6d:f0:57:3d:ca:ad:
83:a2:e3:94:8f:d3:13:b6:77:de:23:5f:5a:73:55:
c0:35:6f:f7:b5:e2:d5:d7:5f:07:71:d7:0d:7c:17:
ca:1e:dd:5a:08:8e:69:e5:a7:f5:31:1b:a8:50:3e:
03:39:4a:5a:b2:40:80:8d:96:a7:3b:9c:a2:e2:53:
00:52:7a:d3:7f:45:44:77:ca:0d:64:25:a0:b5:41:
f1:5e:fa:49:e6:e9:2b:b8:60:48:f6:b0:79:89:34:
3b:28:31:01:bb:f7:71:a4:3f:7d:f2:fc:ec:9b:ba:
3f:56:e6:a3:c4:a0:c5:bd:5e:ac:6b:69:9e:4d:9f:
aa:3d:7d:4d:78:68:40:9b:08:d7:14:75:e4:d1:7c:
aa:69:c9:7f:47:55:93:ec:f1:85:06:c3:fa:ac:39:
67:45:c9:e8:e8:19:96:70:83:6d:e9:77:eb:27:3a:
3f:bf:b7:bf:3d:38:b8:75:03:62:58:e2:17:20:6c:
fd:55:b8:f1:1d:21:e3:fd:6e:5f:45:5e:41:d4:3b:
32:b3:22:9d:72:b9:c1:10:e0:0e:58:33:40:a3:86:
52:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3F:A2:0D:06:F8:15:38:AD:2C:D6:A5:0A:4A:2E:75:67:A9:25:94
X509v3 Authority Key Identifier:
keyid:05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:a1:fc:de:6f:9f:ee:96:5c:f2:26:b0:d0:7a:1a:cf:8d:12:
09:f0:38:80:16:be:53:3a:ba:cd:50:a4:df:30:f4:a1:53:b4:
c1:2d:cb:c5:15:68:82:c3:ac:1b:fe:72:87:fc:15:65:ab:02:
1f:af:98:13:e3:e3:54:56:82:e3:f4:3e:24:e0:9e:1c:73:b9:
0c:ee:77:65:fe:b8:c6:c9:c0:ab:71:00:ed:21:ad:c7:c5:f1:
76:58:5c:99:e4:b9:83:c7:a4:9e:bf:e3:5b:69:bb:4c:07:77:
4e:cb:e0:7d:fa:07:9f:e3:b4:d3:11:eb:1e:9c:3c:a9:93:0c:
3e:ed:f2:60:b8:37:59:b0:4a:dd:94:f2:d4:df:f9:30:55:71:
c8:39:d8:04:09:56:05:88:07:67:15:2e:80:39:ef:0e:26:90:
7a:24:0e:ee:4e:56:3d:99:b6:15:b9:55:91:2e:57:3b:ca:e5:
22:ed:67:fd:de:98:e5:94:4f:b1:94:1f:88:c8:c3:13:bf:95:
b5:be:ec:d9:d8:a8:8c:ff:66:1f:86:40:01:c5:fa:2d:0f:d8:
56:7d:7f:b7:d4:0e:2c:2f:dd:0c:97:7e:6d:27:c2:2c:97:6c:
89:92:cf:09:a3:79:85:6e:a1:ad:5f:bc:24:88:f7:18:70:ea:
f2:ad:cf:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkyRkExMTAvBgNVBAUTKDA1N0I1Mzc3NDAzODI2NzhBMDc4RjVCRjI4NEM3MjY3
OTRCOUQxMzQwHhcNMjYwODE5MDYzMzA5WhcNMjYwODI2MDYzMzA5WjAYMRYwFAYD
VQQDEw02YTg1NGUyNS0xZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw0w3d1fxoYCo5gBt2gGn95+rbfjP3KSZEbmdTn/LDnuiz6xYo+Zt8Fc9yq2D
ouOUj9MTtnfeI19ac1XANW/3teLV118HcdcNfBfKHt1aCI5p5af1MRuoUD4DOUpa
skCAjZanO5yi4lMAUnrTf0VEd8oNZCWgtUHxXvpJ5ukruGBI9rB5iTQ7KDEBu/dx
pD998vzsm7o/VuajxKDFvV6sa2meTZ+qPX1NeGhAmwjXFHXk0Xyqacl/R1WT7PGF
BsP6rDlnRcno6BmWcINt6XfrJzo/v7e/PTi4dQNiWOIXIGz9VbjxHSHj/W5fRV5B
1DsysyKdcrnBEOAOWDNAo4ZSXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGk/og0G
+BU4rSzWpQpKLnVnqSWUMB8GA1UdIwQYMBaAFAV7U3dAOCZ4oHj1vyhMcmeUudE0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTJGQS9GQTQ2RTBEMkVF
MDMxMUVGOUMyQjhBNDlDNEY5QUUwMi9CWHRUZDBBNEpuaWdlUFdfS0V4eVo1UzUw
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JYdFRkMEE0Sm5pZ2VQV19LRXh5WjVTNTBUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTJGQS9GQTQ2RTBEMkVFMDMxMUVGOUMyQjhBNDlDNEY5QUUwMi9CWHRUZDBBNEpu
aWdlUFdfS0V4eVo1UzUwVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZqH83m+f7pZc8iaw0Hoaz40SCfA4gBa+Uzq6zVCk3zD0oVO0wS3LxRVogsOs
G/5yh/wVZasCH6+YE+PjVFaC4/Q+JOCeHHO5DO53Zf64xsnAq3EA7SGtx8Xxdlhc
meS5g8eknr/jW2m7TAd3TsvgffoHn+O00xHrHpw8qZMMPu3yYLg3WbBK3ZTy1N/5
MFVxyDnYBAlWBYgHZxUugDnvDiaQeiQO7k5WPZm2FblVkS5XO8rlIu1n/d6Y5ZRP
sZQfiMjDE7+Vtb7s2diojP9mH4ZAAcX6LQ/YVn1/t9QOLC/dDJd+bSfCLJdsiZLP
CaN5hW6hrV+8JIj3GHDq8q3PnQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:39 2026 by rpki-client