
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
File: bAgKK6farJXU2TSIqQAVGuOlnfg.mft (raw, json)
Hash identifier: p4atStoNukYj9MzLQAoFKwZd/ZjZfa7M0nwSHDgO80I=
Subject key identifier: 60:34:DB:48:8D:26:E7:DE:E2:2E:3F:05:1A:DC:BC:5E:83:A1:57:93
Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
Certificate issuer: /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
Certificate serial: 057A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
Manifest number: 054B
Signing time: Tue 12 May 2026 23:38:28 +0000
Manifest this update: Tue 12 May 2026 23:38:27 +0000
Manifest next update: Tue 19 May 2026 23:38:27 +0000
Files and hashes: 1: bAgKK6farJXU2TSIqQAVGuOlnfg.crl (hash: c7fwlel0Yp4ZX5CL4gpRF1XZxO0Al+w6fTWKndSNwCc=)
2: 51FD604CE08711EFA06D6434C4F9AE02.roa (hash: IugZW+axMJZbl0U78vE/N2ZOXI++iRAw3j3YxhxPsIc=)
3: AD5EE696C0A711EE97A2E984C4F9AE02.roa (hash: xO4jf+JyUgEQsGfWP95No44tQyp4HSFyCOjq3yFfjlg=)
4: CCF1692CC85111EFAEC7B83FC4F9AE02.roa (hash: NfEl2M9viHr9ZnsnHIDf5csYAgyWaV6Q5tcxu5W3uDs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl
rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1402 (0x57a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
Validity
Not Before: May 12 23:38:27 2026 GMT
Not After : May 19 23:38:27 2026 GMT
Subject: CN=6a03b9f4-acc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:8d:74:d3:54:1b:51:94:e7:8e:71:9c:c6:
7a:d0:92:21:ab:f8:8b:23:a0:fa:12:3b:36:d1:1d:
05:c0:3b:4c:3a:66:6f:4c:44:4d:85:56:66:20:bc:
37:e2:cb:0d:b3:93:d4:80:96:b7:d9:22:c5:81:a3:
cc:9d:e4:9f:9b:b5:f0:a4:d9:9a:51:08:1e:1d:6f:
03:0b:2e:51:43:60:22:8c:d5:90:9a:4e:d3:c7:ec:
ae:e2:81:f7:32:b2:96:ba:9b:15:e9:42:da:20:8b:
1e:11:1d:5e:e3:af:5c:d3:87:c8:2e:fa:63:02:6f:
84:86:35:b4:5a:b5:20:a5:54:ed:fe:93:4b:e8:4c:
2f:5a:e5:cc:e1:5e:7a:ca:6b:fb:29:a4:1a:20:30:
92:e1:59:59:5e:08:31:bc:19:95:20:9b:24:c9:0b:
a8:28:91:95:c8:4d:e4:c5:a6:74:ba:14:03:d0:8e:
f3:90:06:5f:b9:a5:c8:26:36:8d:6c:29:be:b0:f9:
d6:b7:9c:90:2b:05:19:b0:c8:a8:bd:d2:be:b9:de:
9d:aa:bb:23:5a:e6:d2:9f:f8:7b:f8:be:72:ef:a3:
8f:10:e8:27:58:fe:ce:c0:6f:ef:69:41:44:60:d7:
5f:d6:32:54:d5:15:58:fa:31:9f:16:fe:2a:ff:cc:
5b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:34:DB:48:8D:26:E7:DE:E2:2E:3F:05:1A:DC:BC:5E:83:A1:57:93
X509v3 Authority Key Identifier:
keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:fe:71:bd:90:63:99:ee:48:9c:02:eb:7b:76:ee:a2:cd:13:
cf:bc:70:c3:8f:4a:18:f3:69:a6:a1:19:9d:89:cd:cf:8d:27:
28:a9:96:b6:1f:2f:85:45:69:26:67:e3:46:1b:59:57:d6:2f:
f3:b2:46:87:fc:e8:5b:14:13:35:b1:79:68:7e:08:ac:f8:4e:
d1:9b:6f:f7:40:6c:7d:b4:ec:13:14:2f:4a:2a:01:cc:e1:24:
10:9c:db:19:3f:56:94:01:b0:3d:3b:8f:2a:86:6e:67:db:c9:
c8:4e:8d:b9:76:e4:ff:89:21:0b:61:fc:20:98:0b:b9:36:c6:
5f:28:fd:17:63:7e:3d:e4:3e:6e:4d:73:f6:51:34:0a:17:5a:
75:60:87:df:25:67:ad:86:ec:7a:d6:cd:f9:7b:aa:33:13:d6:
b4:ce:e1:a6:22:44:5f:a8:ee:36:0d:a2:98:3e:e1:19:89:69:
ed:34:8b:54:e5:d1:05:e2:9a:17:29:5a:45:2e:e5:2e:b3:ba:
a9:61:cb:a9:0c:c4:5f:73:30:06:ce:ce:5a:d7:6d:25:79:91:
33:7d:db:f2:85:65:23:83:b2:b6:af:bc:d1:b8:a1:56:6b:a0:
81:9a:5c:b5:e2:25:f8:80:0a:a4:c2:ee:12:cb:a2:89:98:c5:
d7:e9:45:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:37:07 2026 by rpki-client