
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
File: BQ5HmwmNZLazhlsr5GiFdeotTVE.mft (raw, json)
Hash identifier: +hQZx2aad9knOPaBlensOYTLLiDB82LY7Fd02WIKV7Q=
Subject key identifier: AB:2A:2E:F6:C5:67:0B:2E:19:72:D1:CB:DA:15:49:61:69:0F:4F:8C
Authority key identifier: 05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51
Certificate issuer: /CN=A91AB457/serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51
Certificate serial: 0C7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
Manifest number: 0C7B
Signing time: Tue 12 May 2026 18:39:57 +0000
Manifest this update: Tue 12 May 2026 18:39:57 +0000
Manifest next update: Tue 19 May 2026 18:39:57 +0000
Files and hashes: 1: BQ5HmwmNZLazhlsr5GiFdeotTVE.crl (hash: G8lgBRU2P3JrV+JUZazw/C2aMugGNt94hINZW/koiqI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl
rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3195 (0xc7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB457, serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51
Validity
Not Before: May 12 18:39:57 2026 GMT
Not After : May 19 18:39:57 2026 GMT
Subject: CN=6a0373fd-22a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:5c:c6:da:81:99:5b:20:ad:36:dd:89:26:
9f:4d:01:33:f4:07:ad:e1:82:24:0d:f0:2f:18:fb:
39:2e:03:56:37:98:75:13:ec:2a:29:91:27:ab:76:
ba:70:6e:d0:12:27:0d:20:42:c2:5b:2a:89:b5:e1:
4e:68:55:e8:74:01:db:e1:31:8b:fd:6e:4d:12:d2:
13:78:ba:42:67:d1:43:04:f8:15:50:4c:f7:64:8a:
cf:5d:1e:24:cb:80:02:8a:c5:d6:32:5a:72:79:cc:
54:6d:ff:d5:4a:eb:7f:06:5f:59:7d:6a:35:2c:94:
f4:52:b0:53:76:bc:29:26:8b:da:50:7f:84:5c:a1:
66:3c:ff:cc:b8:7b:91:7e:4c:c3:3c:83:1d:e3:7f:
1a:62:8c:39:54:58:f8:8c:dd:ec:0a:17:d4:bc:5c:
80:db:39:de:80:36:96:7b:73:0d:4b:2b:c9:cd:1b:
3a:f9:7b:90:5c:7a:82:fa:f9:e5:26:7a:b0:d2:42:
ea:3f:b8:b8:95:3f:78:17:4e:dd:fd:9b:ab:5c:b0:
ed:35:56:51:69:ff:da:92:85:31:e2:0f:53:34:ab:
be:08:fc:1f:c2:b1:fb:96:69:35:28:67:25:dd:c6:
ef:ef:a5:d1:89:34:0b:66:1b:96:8f:9d:08:a7:f5:
43:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2A:2E:F6:C5:67:0B:2E:19:72:D1:CB:DA:15:49:61:69:0F:4F:8C
X509v3 Authority Key Identifier:
keyid:05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:88:43:79:ad:19:0f:2b:e5:bc:31:48:4f:c4:4e:8a:4e:24:
b2:3d:2a:3a:60:7c:ae:d4:3b:6e:a4:4d:8f:e8:e4:50:f3:2d:
9c:7e:ef:e5:1b:cf:49:cb:55:5b:be:bd:04:88:2a:07:dc:d6:
b6:0c:16:64:e4:3d:40:d9:21:d3:01:6a:4e:3d:51:7b:0e:3f:
49:5c:5b:cb:3b:01:0f:cd:84:fb:b6:22:9c:e5:44:d4:45:28:
02:30:f4:07:13:63:df:75:b5:13:6e:0a:1e:79:94:c5:10:f1:
fb:f3:0e:5d:01:c6:f4:af:ee:be:3b:9d:27:ec:fd:2f:c7:85:
11:ae:d3:25:ce:46:76:1a:bb:11:69:2d:a4:7a:21:1f:30:f6:
e2:68:fc:c1:d9:08:bf:5e:c8:9b:19:61:36:88:bb:ee:b0:c0:
02:3e:04:20:f2:a9:90:76:19:52:c2:09:fc:ba:90:c3:9b:04:
88:be:fa:41:e5:88:fa:3e:a3:61:2e:bc:5c:12:13:9b:38:c8:
6f:c1:d7:10:c1:4f:a0:26:f9:2d:fb:08:20:61:d0:60:80:ec:
87:58:31:97:2f:d3:a0:3c:02:e6:a8:f7:5f:02:8d:c2:24:bc:
42:64:6f:12:1d:7e:a7:82:95:62:3e:da:48:8b:d1:58:cf:a2:
2a:b2:98:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUI0NTcxMTAvBgNVBAUTKDA1MEU0NzlCMDk4RDY0QjZCMzg2NUIyQkU0Njg4NTc1
RUEyRDRENTEwHhcNMjYwNTEyMTgzOTU3WhcNMjYwNTE5MTgzOTU3WjAYMRYwFAYD
VQQDEw02YTAzNzNmZC0yMmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0HJcxtqBmVsgrTbdiSafTQEz9Aet4YIkDfAvGPs5LgNWN5h1E+wqKZEnq3a6
cG7QEicNIELCWyqJteFOaFXodAHb4TGL/W5NEtITeLpCZ9FDBPgVUEz3ZIrPXR4k
y4ACisXWMlpyecxUbf/VSut/Bl9ZfWo1LJT0UrBTdrwpJovaUH+EXKFmPP/MuHuR
fkzDPIMd438aYow5VFj4jN3sChfUvFyA2znegDaWe3MNSyvJzRs6+XuQXHqC+vnl
Jnqw0kLqP7i4lT94F07d/ZurXLDtNVZRaf/akoUx4g9TNKu+CPwfwrH7lmk1KGcl
3cbv76XRiTQLZhuWj50Ip/VDHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKsqLvbF
ZwsuGXLRy9oVSWFpD0+MMB8GA1UdIwQYMBaAFAUOR5sJjWS2s4ZbK+RohXXqLU1R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjQ1Ny81QUY2NjEwMjFD
OTgxMUVBQjQ3NDNGMEZDNEY5QUUwMi9CUTVIbXdtTlpMYXpobHNyNUdpRmRlb3RU
VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JRNUhtd21OWkxhemhsc3I1R2lGZGVvdFRWRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjQ1Ny81QUY2NjEwMjFDOTgxMUVBQjQ3NDNGMEZDNEY5QUUwMi9CUTVIbXdtTlpM
YXpobHNyNUdpRmRlb3RUVkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArYhDea0ZDyvlvDFIT8ROik4ksj0qOmB8rtQ7bqRNj+jkUPMtnH7v5RvPSctV
W769BIgqB9zWtgwWZOQ9QNkh0wFqTj1Rew4/SVxbyzsBD82E+7YinOVE1EUoAjD0
BxNj33W1E24KHnmUxRDx+/MOXQHG9K/uvjudJ+z9L8eFEa7TJc5Gdhq7EWktpHoh
HzD24mj8wdkIv17ImxlhNoi77rDAAj4EIPKpkHYZUsIJ/LqQw5sEiL76QeWI+j6j
YS68XBITmzjIb8HXEMFPoCb5LfsIIGHQYIDsh1gxly/ToDwC5qj3XwKNwiS8QmRv
Eh1+p4KVYj7aSIvRWM+iKrKYmg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:33:45 2026 by rpki-client