
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
File: BQ5HmwmNZLazhlsr5GiFdeotTVE.mft (raw, json)
Hash identifier: Ur5r3zYqTfLi8skgn0iYpoW5rFTtB+m/zTm85wXFmx0=
Subject key identifier: 7E:92:E1:89:1E:75:69:26:11:36:E6:CB:BD:38:E7:A1:0C:EA:1B:46
Authority key identifier: 05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51
Certificate issuer: /CN=A91AB457/serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51
Certificate serial: 0C9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
Manifest number: 0C9F
Signing time: Wed 22 Jul 2026 18:51:06 +0000
Manifest this update: Wed 22 Jul 2026 18:51:06 +0000
Manifest next update: Wed 29 Jul 2026 18:51:06 +0000
Files and hashes: 1: BQ5HmwmNZLazhlsr5GiFdeotTVE.crl (hash: Ofo+50vEJncnJA2ixm4jRi8cLxic1bXFRsYpK1c6xUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl
rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3231 (0xc9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB457, serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51
Validity
Not Before: Jul 22 18:51:06 2026 GMT
Not After : Jul 29 18:51:06 2026 GMT
Subject: CN=6a61111a-2d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cb:95:e4:dd:c0:ae:e3:cc:4e:53:50:2e:47:
bb:f6:6e:9a:03:b3:4b:dc:76:14:85:a2:de:99:a1:
18:cb:97:89:37:fd:13:b7:db:04:19:05:55:44:11:
1a:ae:e3:b4:49:ef:84:39:88:59:4e:7b:ed:a1:ec:
e2:d8:e6:01:52:73:6c:e5:5e:0e:b0:e1:01:cb:6b:
ee:da:b6:ae:87:d6:5e:33:84:ab:fb:7b:a1:a7:e6:
e2:5c:18:dd:a6:7b:89:4c:d5:68:f8:e8:9d:d8:46:
63:c6:05:9f:39:75:a8:db:cd:36:f8:f3:81:3a:ec:
51:62:e0:66:24:ed:3e:1b:16:0f:4a:47:be:85:25:
30:2c:7d:aa:5e:3a:e6:4c:c3:b9:a4:40:61:0f:f2:
42:8e:6c:45:97:f8:cf:b4:ab:77:a9:9a:3a:05:4b:
3c:69:c5:e6:1f:03:78:ef:dd:6b:74:0d:9d:57:1a:
ec:f0:49:86:08:0f:6c:76:0d:22:6c:a6:0c:7c:6f:
39:66:09:71:6d:b5:df:56:90:89:32:dc:5c:d9:75:
36:fd:87:9b:f0:78:3b:62:34:ab:7b:55:36:6f:c1:
4c:ce:d1:c4:5b:02:99:88:03:ef:b0:57:dd:d5:f1:
61:68:1f:56:37:ad:11:1e:20:6a:46:a0:ab:11:bf:
72:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:92:E1:89:1E:75:69:26:11:36:E6:CB:BD:38:E7:A1:0C:EA:1B:46
X509v3 Authority Key Identifier:
keyid:05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:7e:25:c6:99:cd:74:ac:ef:e2:77:6c:b5:59:98:23:ab:2b:
56:3b:34:17:f8:90:cf:b9:45:bf:c3:d3:cf:84:a3:19:d9:4c:
74:c9:ab:67:ae:46:06:13:f0:90:bd:47:8d:98:e8:60:89:b9:
40:ae:94:69:97:a7:a9:7b:1d:3f:ac:cf:31:bd:1f:ca:32:58:
42:d6:d3:ee:69:58:d4:f8:66:aa:05:e5:0a:b1:e8:5e:1f:80:
c6:f8:23:50:e1:fd:b9:3f:79:ce:49:7e:bd:23:7f:ae:4c:2d:
a7:e8:14:77:88:9a:7d:a7:30:1e:e6:a8:46:04:d3:24:f5:17:
bf:4e:4d:bd:b2:56:26:2e:49:4d:6c:ce:48:da:79:8e:92:41:
22:c2:47:bc:d6:6f:bf:45:66:62:cd:3e:5a:31:70:e0:a4:c8:
5e:b6:bc:02:e1:74:e6:04:ed:96:8e:72:66:6d:d5:10:15:7e:
e5:77:6c:c3:a5:94:b3:7a:bf:aa:c6:c7:31:1a:ab:09:14:1b:
6b:2e:c4:5d:78:f4:3b:4e:cf:cc:f6:c4:3e:f7:3e:e7:0c:d2:
11:5b:62:fe:5e:b3:9b:da:7f:94:b2:13:e2:d0:c0:a6:b5:c5:
5d:46:88:f2:52:d5:c5:dd:ce:47:62:be:62:1f:4a:2d:84:f7:
f2:95:f7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:28 2026 by rpki-client