
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
File: bAgKK6farJXU2TSIqQAVGuOlnfg.mft (raw, json)
Hash identifier: RaKAN5h3VSRT7sF4W22mBZkyRTrsdBdD3Qwr5pj0ni4=
Subject key identifier: 04:9E:28:6A:45:F3:78:29:68:65:A0:28:B1:9D:A1:F7:04:DA:5C:35
Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
Certificate issuer: /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
Certificate serial: 057B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
Manifest number: 054C
Signing time: Thu 14 May 2026 23:38:20 +0000
Manifest this update: Thu 14 May 2026 23:38:20 +0000
Manifest next update: Thu 21 May 2026 23:38:20 +0000
Files and hashes: 1: bAgKK6farJXU2TSIqQAVGuOlnfg.crl (hash: xUHvkjwZklRPRMqVE98NbNb5tg5TiOeLQV6iElG23rI=)
2: CCF1692CC85111EFAEC7B83FC4F9AE02.roa (hash: NfEl2M9viHr9ZnsnHIDf5csYAgyWaV6Q5tcxu5W3uDs=)
3: AD5EE696C0A711EE97A2E984C4F9AE02.roa (hash: xO4jf+JyUgEQsGfWP95No44tQyp4HSFyCOjq3yFfjlg=)
4: 51FD604CE08711EFA06D6434C4F9AE02.roa (hash: IugZW+axMJZbl0U78vE/N2ZOXI++iRAw3j3YxhxPsIc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl
rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 21 May 2026 23:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1403 (0x57b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
Validity
Not Before: May 14 23:38:20 2026 GMT
Not After : May 21 23:38:20 2026 GMT
Subject: CN=6a065cec-ec2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:13:54:70:81:04:c1:5a:55:04:fa:5f:72:6f:
18:a8:98:19:f1:4a:88:02:6c:19:fb:5e:2f:a3:da:
a8:42:76:74:1b:80:83:30:e9:e6:06:ff:bb:f5:0b:
01:2d:62:b0:35:29:b9:09:78:82:a5:aa:43:cd:79:
1c:11:69:97:b9:af:9d:58:7e:5d:ea:53:9e:40:6c:
c7:11:07:03:95:7a:21:40:25:66:be:64:2f:f7:4c:
73:48:44:dd:c4:b6:22:84:37:13:6c:5d:b0:73:6a:
71:eb:77:17:9e:b1:ba:f3:78:2b:9c:ed:00:d5:bd:
e8:96:eb:a5:c6:46:9a:57:1d:1f:3b:4c:89:a8:d6:
60:a9:c4:37:13:7e:6d:ae:2f:ff:23:2e:c4:8b:c2:
60:35:39:13:f8:f4:e2:50:f5:eb:05:e4:db:b3:e1:
a8:6c:ce:16:d4:d8:26:91:88:02:6d:f2:8f:13:7d:
9b:bd:02:a0:48:42:6d:ec:cf:89:30:9e:d2:a6:d5:
0b:ab:7d:da:65:94:73:54:2e:e4:fc:dd:0d:18:06:
81:63:e0:ff:68:e2:4c:10:22:f1:8d:78:5e:af:cc:
c8:fa:fa:eb:11:38:8e:24:f0:08:bb:19:41:04:29:
23:02:ff:37:30:16:3d:d0:d0:fc:c4:6d:1e:ec:a3:
61:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9E:28:6A:45:F3:78:29:68:65:A0:28:B1:9D:A1:F7:04:DA:5C:35
X509v3 Authority Key Identifier:
keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:17:83:b0:1c:ca:aa:17:ff:e6:a7:b5:74:2d:5a:b6:84:5d:
6a:12:48:fb:11:93:7e:34:50:fc:48:2e:58:41:5f:d8:d1:ba:
22:64:eb:84:d2:ec:ab:5c:76:f2:10:cc:ce:47:66:49:00:c5:
8e:8b:2e:bb:66:83:47:24:d3:5f:ac:0c:33:53:71:c9:ba:e6:
c7:d1:07:1a:cd:e5:aa:e2:6a:b7:e7:30:0d:da:a8:20:22:80:
e5:96:9d:6b:b3:1a:f7:e9:a3:3d:8c:65:97:69:63:35:7b:85:
7d:50:81:1f:54:8a:c5:cd:d6:4e:b9:01:88:a6:34:10:1d:8c:
ef:a3:10:90:42:6f:74:fc:21:e5:ac:de:c2:97:06:f9:d4:c4:
89:25:ba:b0:d7:b0:d1:4e:7a:71:a6:cb:c5:f5:94:23:cf:3e:
91:d7:8c:a9:52:b9:41:73:07:50:b9:54:42:03:99:b0:7c:b9:
e4:50:ed:50:81:e6:17:b8:61:d2:d5:9b:8d:76:b1:30:eb:3d:
ed:76:2b:c4:e6:b0:b2:39:e4:29:dc:c1:0b:81:37:85:58:7f:
6b:81:fe:19:fb:8c:21:38:e7:a6:36:4c:24:57:af:f1:a7:22:
d8:fd:d5:c7:54:db:8e:35:27:da:b4:9d:d5:ae:88:bf:86:87:
4e:a0:52:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc0RTgxMTAvBgNVBAUTKDZDMDgwQTJCQTdEQUFDOTVENEQ5MzQ4OEE5MDAxNTFB
RTNBNTlERjgwHhcNMjYwNTE0MjMzODIwWhcNMjYwNTIxMjMzODIwWjAYMRYwFAYD
VQQDEw02YTA2NWNlYy1lYzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5hNUcIEEwVpVBPpfcm8YqJgZ8UqIAmwZ+14vo9qoQnZ0G4CDMOnmBv+79QsB
LWKwNSm5CXiCpapDzXkcEWmXua+dWH5d6lOeQGzHEQcDlXohQCVmvmQv90xzSETd
xLYihDcTbF2wc2px63cXnrG683grnO0A1b3oluulxkaaVx0fO0yJqNZgqcQ3E35t
ri//Iy7Ei8JgNTkT+PTiUPXrBeTbs+GobM4W1NgmkYgCbfKPE32bvQKgSEJt7M+J
MJ7SptULq33aZZRzVC7k/N0NGAaBY+D/aOJMECLxjXher8zI+vrrETiOJPAIuxlB
BCkjAv83MBY90ND8xG0e7KNhUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFASeKGpF
83gpaGWgKLGdofcE2lw1MB8GA1UdIwQYMBaAFGwICiun2qyV1Nk0iKkAFRrjpZ34
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzRFOC80N0Y2MjAxMjQz
RUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJKWFUyVFNJcVFBVkd1T2xu
ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JBZ0tLNmZhckpYVTJUU0lxUUFWR3VPbG5mZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NzRFOC80N0Y2MjAxMjQzRUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJK
WFUyVFNJcVFBVkd1T2xuZmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEReDsBzKqhf/5qe1dC1atoRdahJI+xGTfjRQ/EguWEFf2NG6ImTrhNLsq1x2
8hDMzkdmSQDFjosuu2aDRyTTX6wMM1Nxybrmx9EHGs3lquJqt+cwDdqoICKA5Zad
a7Ma9+mjPYxll2ljNXuFfVCBH1SKxc3WTrkBiKY0EB2M76MQkEJvdPwh5azewpcG
+dTEiSW6sNew0U56cabLxfWUI88+kdeMqVK5QXMHULlUQgOZsHy55FDtUIHmF7hh
0tWbjXaxMOs97XYrxOawsjnkKdzBC4E3hVh/a4H+GfuMITjnpjZMJFev8aci2P3V
x1TbjjUn2rSd1a6Iv4aHTqBSoQ==
-----END CERTIFICATE-----
Generated at Fri May 15 20:44:34 2026 by rpki-client