
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
File: BQFHuU3J1svowLDxrQwBg6YHfDQ.mft (raw, json)
Hash identifier: YBbA+GBmKs3h8qdU5S1UoJI6cNBy3SDM/RSiVxcJtSU=
Subject key identifier: C4:D7:2E:DB:CE:FD:F4:75:75:B6:34:4A:E2:86:74:50:2A:C3:F7:10
Authority key identifier: 05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34
Certificate issuer: /CN=A91629AA/serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34
Certificate serial: 01E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
Manifest number: 01DC
Signing time: Sun 27 Sep 2026 04:00:44 +0000
Manifest this update: Sun 27 Sep 2026 04:00:43 +0000
Manifest next update: Sun 04 Oct 2026 04:00:43 +0000
Files and hashes: 1: BQFHuU3J1svowLDxrQwBg6YHfDQ.crl (hash: pw9G2WO/rPyQyFMH9flL20hzcj6zZBiJhL6ynJ38i9I=)
2: 1E347CDCE74A11EE8602742BC4F9AE02.roa (hash: zA/NBC6jQ8J63f3FCq7PReWhIkxsn1JwE0rqgo7emJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.crl
rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91629AA, serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34
Validity
Not Before: Sep 27 04:00:43 2026 GMT
Not After : Oct 4 04:00:43 2026 GMT
Subject: CN=6ab894ec-1693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:d1:02:85:00:dc:fe:14:6c:d5:ba:a6:e8:
00:69:87:41:4d:4f:6b:ae:81:50:5c:36:7f:e9:28:
c2:eb:a1:13:39:e1:76:fd:45:2f:45:ba:30:05:9d:
66:56:bc:ac:4f:e2:9d:9e:19:fd:d5:07:86:8e:a0:
02:00:3c:d2:ff:47:23:53:ff:62:3a:7c:5b:20:58:
97:a6:fd:00:b3:52:8f:23:2b:4a:d8:c0:1d:d8:6a:
01:4d:d4:21:f1:aa:0f:90:bf:04:38:ff:61:6a:97:
9c:f5:75:6c:ed:bf:7e:57:04:de:e7:bb:23:a8:24:
6b:7b:28:f9:f9:2c:75:1d:63:e8:a6:14:77:9e:bc:
be:8c:b8:43:4b:79:2d:68:83:4b:5c:cc:15:0c:bc:
83:57:54:65:08:37:d4:10:04:09:31:45:e8:57:c6:
3e:0e:bc:c2:10:5b:b0:ca:94:9c:4a:9f:39:4b:80:
16:d3:fc:04:9f:ce:54:c3:85:6a:e9:6e:ff:83:4d:
69:28:6b:4a:1c:f1:d3:c4:a7:5d:38:82:be:94:ff:
df:58:8e:86:ca:21:78:63:96:f1:7d:2f:3c:7c:c1:
3e:4a:0e:b5:82:66:6f:86:58:23:5c:3b:b7:1c:7e:
95:a9:4a:89:c6:b5:b7:53:4e:4a:43:cc:5d:bf:41:
e1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D7:2E:DB:CE:FD:F4:75:75:B6:34:4A:E2:86:74:50:2A:C3:F7:10
X509v3 Authority Key Identifier:
keyid:05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:c6:bf:c7:bf:66:83:31:c7:d3:e5:27:fd:39:69:bb:eb:bf:
fe:52:e6:29:60:14:dd:a5:9f:7e:05:bb:66:87:cf:b1:e3:25:
91:33:81:00:ad:f8:d1:b9:98:fd:21:f1:52:9f:83:48:b7:5b:
5c:69:cd:0e:7e:b6:1a:70:8d:d2:2c:bc:50:4b:fa:a2:fa:6a:
d2:31:01:96:09:66:5c:27:f4:ef:e3:54:80:75:da:d1:5a:6f:
f1:86:d7:4b:32:9a:26:59:5b:a5:cd:4a:3d:46:51:2e:09:5f:
2c:d0:f9:a5:4f:11:87:98:50:bc:dd:fe:d4:2c:00:01:45:1b:
00:f1:67:2b:af:d4:f9:38:78:65:cd:16:36:8c:b9:f1:02:d7:
58:a9:fc:9f:80:19:03:33:74:c8:e9:0e:34:5f:c3:c0:d6:88:
a6:87:f5:12:79:57:9e:4c:1d:ca:4f:c2:f7:92:5c:2e:1e:84:
4a:da:46:4f:b4:c3:f5:25:98:96:4e:c1:f9:e5:ca:08:b1:87:
50:ad:42:54:a7:a6:54:8a:e7:37:aa:01:ed:e9:d7:98:df:a7:
e7:58:f7:92:d5:c9:36:c5:46:88:a3:99:06:92:06:d0:1d:aa:
cc:49:a5:ec:20:5d:e7:7e:1b:fe:e2:6a:42:b7:c5:75:a8:cc:
7c:16:d1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:55:07 2026 by rpki-client