
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
File: bAgKK6farJXU2TSIqQAVGuOlnfg.mft (raw, json)
Hash identifier: 9X5HsTvELv/khiBQYWwOGiL3WSP5JfGCP1B0/wFdEI0=
Subject key identifier: F7:81:21:8B:AD:00:46:8D:47:40:22:14:C4:76:09:09:EE:F8:BD:12
Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
Certificate issuer: /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
Certificate serial: 0594
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
Manifest number: 0565
Signing time: Thu 02 Jul 2026 23:49:53 +0000
Manifest this update: Thu 02 Jul 2026 23:49:52 +0000
Manifest next update: Thu 09 Jul 2026 23:49:52 +0000
Files and hashes: 1: bAgKK6farJXU2TSIqQAVGuOlnfg.crl (hash: qLWY2gq9LqU+IgmEUmWapf0cTjzY+MU4SllBWOY5lyA=)
2: AD5EE696C0A711EE97A2E984C4F9AE02.roa (hash: xO4jf+JyUgEQsGfWP95No44tQyp4HSFyCOjq3yFfjlg=)
3: 51FD604CE08711EFA06D6434C4F9AE02.roa (hash: IugZW+axMJZbl0U78vE/N2ZOXI++iRAw3j3YxhxPsIc=)
4: CCF1692CC85111EFAEC7B83FC4F9AE02.roa (hash: NfEl2M9viHr9ZnsnHIDf5csYAgyWaV6Q5tcxu5W3uDs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl
rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 Jul 2026 23:49:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1428 (0x594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
Validity
Not Before: Jul 2 23:49:52 2026 GMT
Not After : Jul 9 23:49:52 2026 GMT
Subject: CN=6a46f921-69cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9b:64:9e:45:32:1c:86:f5:47:ee:e0:ae:e8:
9e:94:94:0d:08:03:98:5b:0e:46:8d:d1:75:b4:40:
18:3a:0d:86:c5:56:cc:b8:52:9d:01:c5:3f:14:18:
12:6f:ee:84:1d:fb:6e:61:f3:6f:4c:26:4c:92:c9:
c0:0c:ff:31:bf:60:3d:88:fc:eb:eb:76:73:26:47:
21:56:34:95:18:80:18:89:f1:5e:32:36:90:76:ab:
fa:cf:a0:7b:db:9d:d5:bb:82:a7:b1:8b:9f:6c:c5:
52:ee:1b:06:7f:14:33:02:0d:36:91:64:63:12:9c:
29:79:7e:2c:40:42:3c:38:42:2e:2d:94:22:5a:7e:
d8:87:f3:ba:e1:f2:c7:68:b8:57:d7:f8:87:b8:78:
c7:04:4c:0b:22:7c:2f:b3:8e:2a:0c:43:a5:df:c3:
3e:27:8c:86:35:1e:cb:89:c1:d3:f1:a3:80:eb:17:
80:52:19:74:3d:73:c8:75:ec:d6:be:ac:cc:37:20:
b0:64:e3:ad:06:6d:5f:5e:69:d7:dc:06:ac:70:8c:
8c:d3:fd:7f:55:fa:60:78:ec:8e:23:16:ed:8d:56:
67:d5:61:8d:ad:5f:2c:40:39:24:95:6a:0b:10:b0:
23:b6:95:d7:6c:c5:56:51:85:af:cf:16:df:77:3f:
fe:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:81:21:8B:AD:00:46:8D:47:40:22:14:C4:76:09:09:EE:F8:BD:12
X509v3 Authority Key Identifier:
keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:cf:48:f1:92:92:50:f5:a1:b8:46:59:02:ee:71:b6:88:d2:
b7:0f:a5:34:d7:2e:1d:d1:fa:03:49:d3:b6:8e:cc:bc:f3:ff:
d6:8f:1f:e1:96:9d:de:b5:a1:7f:d8:29:18:2d:76:70:5a:c9:
19:50:84:01:1c:47:b4:66:23:08:04:68:2d:be:e1:a9:01:0b:
82:04:c4:c6:5e:18:76:ca:9b:7b:bd:ee:1e:db:70:08:f9:dd:
46:a1:c4:d8:ac:bd:76:2a:ff:04:f4:37:98:2a:0f:90:8d:e6:
7c:fb:ae:de:e9:a7:3b:5a:15:6d:3e:d9:c2:b0:7a:31:34:e1:
85:9d:1b:95:e8:dc:36:f3:21:2b:e8:78:ef:47:4f:30:48:d2:
4d:10:59:4a:e0:98:da:24:6e:88:b8:2d:87:c3:ab:80:28:75:
82:d5:2f:43:38:5a:52:cf:ed:8c:d5:63:10:52:62:9a:bd:98:
ef:9f:cb:38:30:4a:9d:1b:1a:71:20:da:74:ac:16:8d:ec:3e:
27:2e:f4:16:a6:75:2d:56:00:83:a0:18:28:76:62:1b:28:d8:
88:d4:23:db:7b:71:ee:fe:8c:3b:97:a3:d1:ee:78:ff:94:4f:
42:ee:fb:3a:32:19:21:55:5b:eb:88:6d:c3:d6:ea:4d:0c:68:
9a:09:81:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 01:22:49 2026 by rpki-client