
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
File: BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft (raw, json)
Hash identifier: GVN2JvPFxl3yEOoTBoKeVfns7n6gigWaCmTUbDVoFBY=
Subject key identifier: A9:A0:87:E6:AC:20:E6:42:AE:55:00:32:C1:A0:86:38:A6:C1:C1:31
Authority key identifier: 05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC
Certificate issuer: /CN=A91AB8D7/serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC
Certificate serial: 029E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
Manifest number: 0297
Signing time: Thu 23 Jul 2026 02:51:47 +0000
Manifest this update: Thu 23 Jul 2026 02:51:46 +0000
Manifest next update: Thu 30 Jul 2026 02:51:46 +0000
Files and hashes: 1: BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl (hash: SZurpA63/FshCFUTkOjxoENByVhEhFPBjcXv6ZUw7/w=)
2: 1ED3BAF898A011ED9D31B05CC4F9AE02.roa (hash: 94M44dsN95Cfdn+68CbMlhuF5n5qBQCEV7YwA9S7Ln8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl
rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670 (0x29e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB8D7, serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC
Validity
Not Before: Jul 23 02:51:46 2026 GMT
Not After : Jul 30 02:51:46 2026 GMT
Subject: CN=6a6181c3-86f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:e6:f5:52:9f:01:a6:b1:ec:17:5b:b5:58:
d6:fc:25:88:99:6f:72:f6:71:7c:ad:21:55:9d:f0:
60:44:da:92:bb:85:96:34:24:da:14:cd:64:64:39:
a3:31:71:cb:dd:83:0b:96:65:59:fb:15:b2:8a:54:
6e:4e:cd:64:de:7f:53:cf:bd:2c:4b:ad:ed:ef:ff:
15:e3:6b:37:39:d2:13:5d:57:96:9d:46:57:36:a2:
81:18:a8:88:0b:9e:2f:db:78:59:3d:a9:7a:a8:a0:
cf:ab:ed:23:f6:b0:e0:93:01:0b:30:d4:a8:88:5c:
7a:00:db:c7:c1:8a:b2:37:13:17:3e:8c:71:57:56:
a6:ef:ff:8d:7d:5c:a5:70:9b:db:d2:fb:7a:c2:27:
d8:38:e6:ac:79:eb:49:c4:be:1b:76:77:7a:37:61:
7f:02:57:52:f0:ea:0d:91:76:77:0d:bd:50:af:15:
dc:63:07:e2:c3:13:b6:1f:3c:b3:91:c6:d1:33:9e:
47:41:cf:e6:2b:b3:9a:ec:58:e3:a6:e1:da:62:5c:
f8:73:78:47:44:04:c0:05:de:fa:6e:55:ea:21:2e:
76:ad:1f:39:e9:9c:c2:8f:b7:77:93:2c:d3:66:aa:
16:d9:f1:34:1a:95:67:11:8c:54:74:d8:1c:c5:73:
27:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A0:87:E6:AC:20:E6:42:AE:55:00:32:C1:A0:86:38:A6:C1:C1:31
X509v3 Authority Key Identifier:
keyid:05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:dd:8f:0d:69:e6:8c:4a:f4:67:32:4f:23:e6:7b:f8:7f:f9:
c6:98:ae:b1:f1:b4:84:f7:f1:02:a4:83:66:e4:69:bf:29:99:
af:48:76:bf:07:3e:31:2e:17:6a:13:54:b5:d6:65:04:32:ce:
fc:e9:8e:c4:7f:58:9c:76:57:78:cd:9b:30:26:9f:c5:cf:86:
32:5c:c2:a7:29:40:32:13:de:95:dc:a4:20:37:24:dd:4f:81:
24:46:ae:e4:6a:38:20:03:77:8a:c5:00:a3:f7:c9:8d:d0:1a:
82:ec:20:24:a5:1d:ad:18:69:d8:d6:8e:53:32:b0:77:32:aa:
b7:a6:22:e6:b3:01:56:b7:25:ba:87:d9:99:b9:3c:83:69:27:
c1:b0:ad:fc:0f:62:aa:63:86:ac:16:c0:87:86:16:93:e4:29:
97:2a:3b:8f:8c:be:28:7a:4b:27:74:2a:bf:c8:d1:87:86:88:
b7:bb:90:9d:85:75:f0:cb:09:75:17:b3:c1:6f:b0:46:3b:3d:
32:ba:d7:da:a7:15:1d:44:08:87:99:29:91:39:7c:6f:be:a0:
d1:05:0c:56:7d:7a:05:82:48:df:7e:ba:ed:68:7e:36:ff:c4:
cd:21:2c:79:59:71:ac:50:1b:71:22:5e:ec:cf:fb:7d:ed:2b:
b6:1f:62:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:53:35 2026 by rpki-client