
$ rpki-client -vvf rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
File: BQFHuU3J1svowLDxrQwBg6YHfDQ.mft (raw, json)
Hash identifier: ahFon6GduAYlxxFMPVa5BF5/Dy7Acl1swL1C9YRRQpY=
Subject key identifier: F0:5D:3E:4E:2E:DC:16:72:9E:C8:A1:2C:96:3E:15:14:5F:9D:91:98
Authority key identifier: 05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34
Certificate issuer: /CN=A91629AA/serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34
Certificate serial: 019E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
Manifest number: 0194
Signing time: Wed 13 May 2026 04:25:53 +0000
Manifest this update: Wed 13 May 2026 04:25:52 +0000
Manifest next update: Wed 20 May 2026 04:25:52 +0000
Files and hashes: 1: BQFHuU3J1svowLDxrQwBg6YHfDQ.crl (hash: cvl1c26T9e13fhJHT4IZCX3I2OkNZdoV9SO+EwOq7jI=)
2: 1E347CDCE74A11EE8602742BC4F9AE02.roa (hash: X9BXQVXdacHKtE65WWjF1sZIjnf6Hwqrn91/87XDVa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.crl
rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:25:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91629AA, serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34
Validity
Not Before: May 13 04:25:52 2026 GMT
Not After : May 20 04:25:52 2026 GMT
Subject: CN=6a03fd51-9564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:c0:47:94:ac:e0:6e:e6:15:a1:09:13:5e:
94:0b:b8:54:e6:a2:50:14:e3:e4:24:6d:ff:dc:54:
5d:78:29:23:09:0d:5e:db:67:7d:df:6e:0d:f8:98:
dc:fb:cb:77:22:45:be:89:a6:d9:02:9c:b8:9c:56:
12:d5:39:35:80:9b:db:dc:da:a2:55:0a:08:34:e0:
00:3d:ab:dd:77:9c:78:1d:0a:f8:1b:fd:73:1e:a6:
1d:de:cc:27:90:d2:78:92:cc:19:53:db:90:75:da:
58:0e:b9:5e:26:c8:7d:a2:b1:d9:c3:29:a0:b9:e8:
34:54:e4:f4:49:74:7b:b3:95:7c:7a:bd:35:75:ec:
4b:35:16:49:dc:e1:cc:89:11:4e:c2:e0:60:69:b8:
fa:3c:b6:e9:9b:e7:0c:fe:d5:e9:da:37:db:be:eb:
ad:5d:ed:1a:d8:35:ae:3b:31:06:42:0c:99:f0:8a:
bd:69:15:4d:17:e7:c5:9c:4a:95:19:c1:fe:f8:43:
9a:97:5a:8a:df:ca:8f:ba:9a:82:4f:b4:98:3d:6c:
97:23:13:3f:91:ad:a8:cc:d3:2d:60:fc:ed:64:b2:
11:db:e5:86:da:50:da:03:cf:fc:1c:5f:be:6c:99:
c0:71:6e:a4:92:86:d6:13:2d:ba:a1:0a:31:80:e9:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5D:3E:4E:2E:DC:16:72:9E:C8:A1:2C:96:3E:15:14:5F:9D:91:98
X509v3 Authority Key Identifier:
keyid:05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2a:de:db:0a:11:4a:a5:4a:81:6b:23:23:d5:07:4d:4c:20:
dc:0b:82:01:38:8a:d7:5d:93:39:dd:b4:57:b4:42:81:aa:d6:
f4:7f:a2:6c:13:bd:ee:a8:f2:a0:36:31:77:93:aa:9f:1d:63:
13:94:4d:06:a8:3f:bf:bb:7d:cf:bf:3e:88:97:0a:96:4d:b2:
cc:51:c3:f0:3e:07:fe:27:00:18:08:37:55:5d:cc:08:61:29:
cd:e6:b3:69:26:78:1d:bd:21:89:34:cd:cc:fd:fe:63:9f:5a:
b2:45:a6:55:26:f7:ff:f0:cc:0f:09:63:d1:77:41:c9:08:7e:
de:c8:9d:34:3f:de:61:be:a2:63:2d:01:af:28:90:77:5a:69:
be:64:71:cc:de:11:10:8b:56:b1:3f:21:9f:6a:68:f8:ae:7c:
c2:ca:d0:76:ea:c9:fc:5a:f2:81:db:e7:67:fa:e2:a1:41:b2:
70:87:b3:1b:52:51:a7:92:7e:77:5f:75:19:cf:87:74:39:c8:
5d:82:54:59:64:56:56:8d:7e:d8:5f:d4:58:d8:14:20:54:ad:
19:f2:52:a2:0a:c5:9f:d7:02:b7:a9:1a:a4:1d:c4:93:a1:d7:
0d:d3:e9:8f:b6:e0:f1:7b:31:96:4e:05:21:33:2e:02:f5:17:
e6:7e:7a:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI5QUExMTAvBgNVBAUTKDA1MDE0N0I5NERDOUQ2Q0JFOEMwQjBGMUFEMEMwMTgz
QTYwNzdDMzQwHhcNMjYwNTEzMDQyNTUyWhcNMjYwNTIwMDQyNTUyWjAYMRYwFAYD
VQQDEw02YTAzZmQ1MS05NTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzKvAR5Ss4G7mFaEJE16UC7hU5qJQFOPkJG3/3FRdeCkjCQ1e22d9324N+Jjc
+8t3IkW+iabZApy4nFYS1Tk1gJvb3NqiVQoINOAAPavdd5x4HQr4G/1zHqYd3swn
kNJ4kswZU9uQddpYDrleJsh9orHZwymgueg0VOT0SXR7s5V8er01dexLNRZJ3OHM
iRFOwuBgabj6PLbpm+cM/tXp2jfbvuutXe0a2DWuOzEGQgyZ8Iq9aRVNF+fFnEqV
GcH++EOal1qK38qPupqCT7SYPWyXIxM/ka2ozNMtYPztZLIR2+WG2lDaA8/8HF++
bJnAcW6kkobWEy26oQoxgOnKJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPBdPk4u
3BZynsihLJY+FRRfnZGYMB8GA1UdIwQYMBaAFAUBR7lNydbL6MCw8a0MAYOmB3w0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjlBQS81RjA2OTNGNEU3
NDkxMUVFQkM1MjZGMjlDNEY5QUUwMi9CUUZIdVUzSjFzdm93TER4clF3Qmc2WUhm
RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JRRkh1VTNKMXN2b3dMRHhyUXdCZzZZSGZEUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MjlBQS81RjA2OTNGNEU3NDkxMUVFQkM1MjZGMjlDNEY5QUUwMi9CUUZIdVUzSjFz
dm93TER4clF3Qmc2WUhmRFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbCre2woRSqVKgWsjI9UHTUwg3AuCATiK112TOd20V7RCgarW9H+ibBO97qjy
oDYxd5Oqnx1jE5RNBqg/v7t9z78+iJcKlk2yzFHD8D4H/icAGAg3VV3MCGEpzeaz
aSZ4Hb0hiTTNzP3+Y59askWmVSb3//DMDwlj0XdByQh+3sidND/eYb6iYy0BryiQ
d1ppvmRxzN4REItWsT8hn2po+K58wsrQdurJ/FrygdvnZ/rioUGycIezG1JRp5J+
d191Gc+HdDnIXYJUWWRWVo1+2F/UWNgUIFStGfJSogrFn9cCt6kapB3Ek6HXDdPp
j7bg8Xsxlk4FITMuAvUX5n56Ng==
-----END CERTIFICATE-----
Generated at Wed May 13 11:36:58 2026 by rpki-client