
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
File: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft (raw, json)
Hash identifier: LlYYjp/nO6UJIP1AzgtF9bf8VOjBje5D6K84QBZrlZM=
Subject key identifier: 65:D3:64:BA:86:BC:1B:2B:7A:12:09:F9:F0:64:45:9E:93:41:AA:16
Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7
Certificate issuer: /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7
Certificate serial: 0C20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
Manifest number: 0C14
Signing time: Tue 06 Oct 2026 18:57:42 +0000
Manifest this update: Tue 06 Oct 2026 18:57:42 +0000
Manifest next update: Tue 13 Oct 2026 18:57:42 +0000
Files and hashes: 1: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl (hash: V+1K29B+/k30U4FTqxTKSCTcuW1mbwVG9RsXBVbEgXM=)
2: CF5422842CB111F19655F1BDC9833773.roa (hash: 8ZwBOZ7hrFX3NuDI+RJpwp5MuhVPjE9cVYyKjGDrr3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl
rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:57:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3104 (0xc20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D425A, serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7
Validity
Not Before: Oct 6 18:57:42 2026 GMT
Not After : Oct 13 18:57:42 2026 GMT
Subject: CN=6ac544a6-1f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:1b:e1:e9:3e:f9:68:61:96:5c:d7:8a:e8:
fe:61:ae:34:53:e0:50:cf:8c:b2:be:20:59:29:1c:
8b:39:38:34:74:f3:23:46:4d:34:31:76:95:54:8e:
82:57:4a:3c:5b:fa:e8:dd:51:b0:bd:3a:ee:15:c4:
43:b8:86:87:4d:3c:b3:d2:13:e7:e1:6b:a9:b0:de:
96:93:a1:9f:df:b2:7b:cb:11:dc:f6:6d:f7:4a:90:
be:cf:74:a1:22:c8:d2:55:ea:09:ce:65:e7:4c:3d:
5a:98:35:40:44:02:6a:2c:c0:4e:60:60:dc:27:62:
e5:30:00:7b:11:d4:42:a0:da:9b:18:3d:08:8f:f1:
f4:55:40:75:cc:65:86:f2:dc:9a:ae:74:b2:01:0a:
3e:5f:2e:45:ee:70:82:ca:7f:f1:cf:b6:e8:cf:a9:
e6:ff:74:c5:60:c4:bd:a4:21:f4:f2:9b:70:f7:65:
a8:db:48:3d:a8:71:55:da:88:46:8a:ff:c6:28:1e:
6d:f1:81:57:07:f8:69:b0:02:bf:4c:25:7c:c7:59:
3c:a5:82:5b:56:08:78:0f:26:47:e2:47:2e:a1:56:
64:3b:c3:c9:ff:57:62:4e:d2:cf:6d:af:f7:20:74:
96:1b:09:99:23:e9:fb:a3:ae:9c:fc:c1:9b:5e:67:
13:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D3:64:BA:86:BC:1B:2B:7A:12:09:F9:F0:64:45:9E:93:41:AA:16
X509v3 Authority Key Identifier:
keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9b:0d:6e:d5:54:5f:1a:85:70:b3:64:f0:3b:25:1b:c5:e4:
38:9f:67:cf:a7:91:ae:76:08:07:1d:75:d7:d8:87:d5:8a:60:
cd:70:f6:78:bf:74:d4:72:08:67:9c:58:5d:42:39:c4:d5:91:
f9:4d:8b:03:81:d1:da:1f:7e:23:e8:33:03:ac:f0:3b:97:bf:
48:b4:a3:49:6f:31:5d:0b:f3:19:84:ca:4b:b2:26:fe:14:c3:
b9:72:66:66:a4:f9:53:f6:fb:da:9a:c9:9f:51:a5:87:f9:01:
8c:0e:47:b0:cb:a3:76:f0:e0:e1:a0:c0:3b:0b:79:57:07:c9:
c9:18:b1:a9:12:12:b0:6e:32:df:89:e3:cd:b4:4e:4c:d8:09:
3d:d4:e3:68:a7:60:42:54:d1:9a:12:a9:b1:78:e6:63:c8:d6:
68:e0:68:1b:7a:40:0f:70:e6:06:20:4d:73:b4:5d:68:4a:f1:
c1:38:ee:d2:92:52:52:29:0b:88:4a:57:cc:24:76:7b:c9:8b:
aa:b0:32:ac:09:84:3a:8c:0c:9a:d7:cf:50:b7:b9:bc:9c:f9:
0e:a7:c8:6a:9a:c0:b0:1c:e6:fa:55:12:80:df:c1:a8:29:35:
48:14:ca:38:4e:66:c3:20:95:e5:34:58:71:e2:34:a3:5a:31:
d4:ae:8e:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQyNUExMTAvBgNVBAUTKDA0OEFBOThGM0VDNTRBOTA2MEU1QkMzMDA1OUQ1QzQy
MjBEN0MyRjcwHhcNMjYxMDA2MTg1NzQyWhcNMjYxMDEzMTg1NzQyWjAYMRYwFAYD
VQQDEw02YWM1NDRhNi0xZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn3Eb4ek++WhhllzXiuj+Ya40U+BQz4yyviBZKRyLOTg0dPMjRk00MXaVVI6C
V0o8W/ro3VGwvTruFcRDuIaHTTyz0hPn4WupsN6Wk6Gf37J7yxHc9m33SpC+z3Sh
IsjSVeoJzmXnTD1amDVARAJqLMBOYGDcJ2LlMAB7EdRCoNqbGD0Ij/H0VUB1zGWG
8tyarnSyAQo+Xy5F7nCCyn/xz7boz6nm/3TFYMS9pCH08ptw92Wo20g9qHFV2ohG
iv/GKB5t8YFXB/hpsAK/TCV8x1k8pYJbVgh4DyZH4kcuoVZkO8PJ/1diTtLPba/3
IHSWGwmZI+n7o66c/MGbXmcTTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGXTZLqG
vBsrehIJ+fBkRZ6TQaoWMB8GA1UdIwQYMBaAFASKqY8+xUqQYOW8MAWdXEIg18L3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDI1QS8wMjRDMjRGODQx
NkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNwQmc1Ynd3QloxY1FpRFh3
dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JJcXBqejdGU3BCZzVid3dCWjFjUWlEWHd2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDI1QS8wMjRDMjRGODQxNkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNw
Qmc1Ynd3QloxY1FpRFh3dmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj5sNbtVUXxqFcLNk8DslG8XkOJ9nz6eRrnYIBx1119iH1YpgzXD2eL901HII
Z5xYXUI5xNWR+U2LA4HR2h9+I+gzA6zwO5e/SLSjSW8xXQvzGYTKS7Im/hTDuXJm
ZqT5U/b72prJn1Glh/kBjA5HsMujdvDg4aDAOwt5VwfJyRixqRISsG4y34njzbRO
TNgJPdTjaKdgQlTRmhKpsXjmY8jWaOBoG3pAD3DmBiBNc7RdaErxwTju0pJSUikL
iEpXzCR2e8mLqrAyrAmEOowMmtfPULe5vJz5DqfIaprAsBzm+lUSgN/BqCk1SBTK
OE5mwyCV5TRYceI0o1ox1K6Oug==
-----END CERTIFICATE-----
Generated at Thu Oct 8 09:16:32 2026 by rpki-client