
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
File: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft (raw, json)
Hash identifier: iN0yTSWoIUc7F5amjB8EabzGTMn29QKlcPdMOtUGWAw=
Subject key identifier: FC:17:54:66:DB:76:8A:46:0D:44:E2:ED:FC:3F:4C:2B:0F:6F:5C:94
Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7
Certificate issuer: /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7
Certificate serial: 0BDA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
Manifest number: 0BCE
Signing time: Fri 22 May 2026 18:57:45 +0000
Manifest this update: Fri 22 May 2026 18:57:44 +0000
Manifest next update: Fri 29 May 2026 18:57:44 +0000
Files and hashes: 1: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl (hash: P8XLzomuIfUSvy4FYC6330Mh4fe2AJwGBQS5L+UvYEA=)
2: CF5422842CB111F19655F1BDC9833773.roa (hash: 8ZwBOZ7hrFX3NuDI+RJpwp5MuhVPjE9cVYyKjGDrr3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl
rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 May 2026 18:57:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3034 (0xbda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D425A, serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7
Validity
Not Before: May 22 18:57:44 2026 GMT
Not After : May 29 18:57:44 2026 GMT
Subject: CN=6a10a729-77a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:bb:a7:6f:7c:c9:b0:05:f7:b3:3a:56:70:
f8:9b:0a:db:93:c0:17:3c:ef:66:81:da:f8:a3:34:
2e:20:50:7c:94:1b:70:2e:0f:82:f8:6a:b0:6c:42:
95:02:b0:bc:0c:c6:e4:aa:8f:69:44:c6:1f:14:b8:
7c:98:2c:35:9c:eb:fc:22:4c:27:6e:13:c6:7a:b0:
34:0e:46:89:e6:bf:30:19:5d:23:0b:a6:29:b8:0f:
20:00:e7:02:5f:60:e4:8b:b0:60:43:1d:89:96:2f:
dd:04:08:49:5c:27:69:07:0c:7b:dc:74:37:aa:51:
47:63:c1:da:4c:fb:f8:c4:c1:74:50:4c:95:fc:dd:
86:8f:58:2d:7e:08:b4:75:86:25:07:af:e9:a0:56:
5f:20:75:17:04:d8:78:c5:91:5e:5e:5c:c1:59:cb:
f2:7a:ba:b0:d6:d4:ae:1d:43:d2:95:16:71:61:11:
2b:05:b8:ca:1b:a4:29:69:91:a7:cc:ce:af:e3:0d:
58:35:0f:96:14:2c:18:f8:d3:91:90:39:dc:1f:b4:
ca:b7:55:e3:73:d3:df:28:f2:6d:a2:d4:f7:43:2a:
9e:78:c1:aa:1c:75:df:5d:5c:f8:d8:27:6d:79:c9:
48:c8:13:7a:6b:7a:1c:ac:e9:55:db:9d:47:b6:de:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:17:54:66:DB:76:8A:46:0D:44:E2:ED:FC:3F:4C:2B:0F:6F:5C:94
X509v3 Authority Key Identifier:
keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:86:4e:1d:4c:9b:f3:9e:2f:78:39:f4:ed:9f:c6:9f:24:7a:
ba:cd:a1:66:50:a8:66:7a:24:7e:4c:5c:39:c1:4c:ca:0f:3c:
11:06:89:2d:68:40:ba:35:5d:d5:e4:07:04:70:d2:db:63:3e:
83:89:0d:e6:e8:0a:9b:4d:a0:b5:2b:f1:26:f3:73:ea:29:93:
9f:be:6f:5e:69:46:79:0b:b7:f0:02:a8:6c:a7:1e:59:f5:f2:
ab:15:55:2f:f5:8a:00:25:25:1d:5a:ca:f0:d8:39:40:dd:9a:
f3:ef:6d:20:ce:11:2a:0b:78:7c:2e:37:aa:fc:24:fc:58:a5:
91:7f:95:9c:07:0a:88:1e:4a:5e:af:7c:a2:73:74:51:01:2c:
7d:80:95:ec:34:48:5b:fe:83:c1:20:c6:70:27:dd:cb:7e:41:
04:a8:09:4e:0f:d0:0d:23:b0:37:30:6f:84:be:4b:aa:ae:69:
7d:3b:c6:0a:69:18:19:33:e7:7b:95:4d:fe:b7:14:20:20:fa:
ff:ec:8c:25:59:3f:55:b0:cc:57:9e:9d:02:f5:0f:f1:c4:77:
5f:13:11:62:b3:ad:a0:3e:12:68:f7:e6:1f:c6:74:50:88:de:
14:db:99:0e:bc:24:b9:48:0a:93:ac:12:c4:31:66:88:09:73:
fe:98:47:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 18:31:23 2026 by rpki-client