
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
File: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft (raw, json)
Hash identifier: TWEomQWKCdnBEStOCveO8c731UxODP8XCc2usa3KqyE=
Subject key identifier: 91:86:50:8B:60:FA:04:BB:AC:68:B8:1B:61:EE:E0:24:63:98:FB:79
Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7
Certificate issuer: /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7
Certificate serial: 0C08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
Manifest number: 0BFC
Signing time: Thu 20 Aug 2026 18:50:41 +0000
Manifest this update: Thu 20 Aug 2026 18:50:41 +0000
Manifest next update: Thu 27 Aug 2026 18:50:41 +0000
Files and hashes: 1: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl (hash: +UU+nbGvokyiFBMq0YrakHB9i1NAcD4Yd8H3gM6yAKA=)
2: CF5422842CB111F19655F1BDC9833773.roa (hash: 8ZwBOZ7hrFX3NuDI+RJpwp5MuhVPjE9cVYyKjGDrr3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl
rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3080 (0xc08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D425A, serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7
Validity
Not Before: Aug 20 18:50:41 2026 GMT
Not After : Aug 27 18:50:41 2026 GMT
Subject: CN=6a874c81-9603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:01:5b:64:e4:c2:2c:c2:e2:4d:1e:af:5c:3d:
39:7d:da:97:9c:e1:9e:5e:9e:65:a9:81:09:d3:26:
7a:3c:3d:b2:2e:b7:71:e3:54:6f:58:18:46:c3:01:
71:9e:13:a2:71:02:79:65:ee:f9:97:72:f9:6c:83:
51:91:eb:10:4f:c4:5c:f5:84:72:71:e3:b5:65:6d:
08:1e:b5:4a:50:3c:b8:49:3e:34:87:42:e3:b3:8a:
00:01:14:c3:47:7f:38:9f:97:6d:df:ff:a9:61:b1:
71:ac:6d:7d:7a:32:7a:55:b9:87:1f:b9:fb:f4:28:
9b:fd:75:d4:04:b3:c6:a9:af:27:0f:c6:df:ab:e3:
c4:8b:af:0b:c2:a2:ee:02:da:23:bc:7b:ce:17:9b:
9b:db:ac:c2:1d:4d:a0:76:52:b4:78:73:e7:5a:9a:
ad:d7:85:8b:22:2c:9f:21:7a:98:30:97:44:43:a2:
b2:36:8d:a2:f3:21:37:21:be:69:2d:f7:a6:24:78:
20:d1:40:74:7e:95:ad:ff:ae:b4:ee:b1:ae:6a:cd:
6a:25:f1:d5:d1:e5:98:85:8e:8e:d0:81:02:78:d3:
fe:8d:7c:d7:1e:64:a2:60:f2:4a:6a:a9:86:89:ac:
7e:f0:a8:7d:bb:e8:ee:c4:66:fb:e8:5b:95:01:af:
6c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:86:50:8B:60:FA:04:BB:AC:68:B8:1B:61:EE:E0:24:63:98:FB:79
X509v3 Authority Key Identifier:
keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:76:25:c0:01:57:31:a7:e0:c3:81:0c:e2:d6:87:8e:d9:09:
ef:1a:2a:4f:ee:af:87:a6:15:1e:c3:c0:c0:a6:b5:37:aa:c6:
17:23:6f:59:2c:c3:cc:2d:e5:15:c5:c7:7e:cc:8c:3b:09:cd:
84:b2:56:a3:d2:98:4c:00:b8:db:84:dd:e7:14:9c:34:fe:f2:
61:cd:ff:2a:45:e4:f9:cb:ee:9e:32:18:56:49:b7:48:9a:84:
ef:f7:44:68:db:40:48:b9:1d:83:1c:f1:1c:d6:ae:34:cb:6d:
f9:6f:8d:9d:ab:af:20:fd:49:fe:eb:72:f9:e9:9c:13:3f:10:
05:48:96:23:ab:6b:66:82:51:37:bd:c1:f2:2b:76:7c:b2:80:
bf:c8:99:0c:a9:3d:fe:46:7a:4e:be:2e:6e:6d:7a:97:bf:77:
90:2f:53:f9:bb:1a:b4:bc:b7:1a:f8:a1:40:b5:85:66:72:1b:
f4:a8:f6:92:0a:f4:a2:7f:26:99:e7:80:16:9f:93:04:97:81:
32:d7:bb:76:52:b0:a9:63:da:98:a0:1d:19:02:95:8f:de:32:
3e:50:eb:24:d2:43:b2:0b:9a:25:33:d6:90:aa:b2:22:5d:09:
f7:3b:53:61:5e:d4:24:98:08:57:a9:f0:59:59:9d:23:13:e7:
9e:cd:d4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:04:56 2026 by rpki-client