
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
File: bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft (raw, json)
Hash identifier: mDPtI56R3HqQqbFICoFk+zWRLwrGOSXvm7mVVnorEok=
Subject key identifier: 5C:09:5B:CE:D3:58:D8:FB:F2:95:60:45:2B:BE:17:5C:69:7E:EE:9D
Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4
Certificate issuer: /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4
Certificate serial: 02FB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
Manifest number: 02F4
Signing time: Wed 13 May 2026 01:24:05 +0000
Manifest this update: Wed 13 May 2026 01:24:04 +0000
Manifest next update: Wed 20 May 2026 01:24:04 +0000
Files and hashes: 1: bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl (hash: s7Gu7C1PD0WvMs8F70zqz8BqonY6Zp+g5wVz/jMFZN8=)
2: FB1F8158242A11ED9547B486C4F9AE02.roa (hash: qOTgX26Zanjyv6Lj/0iXY/YLtNoeVOf7TQ8Rw4nq2og=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl
rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 763 (0x2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C95AA, serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4
Validity
Not Before: May 13 01:24:04 2026 GMT
Not After : May 20 01:24:04 2026 GMT
Subject: CN=6a03d2b5-1791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ad:47:76:42:f4:06:e7:d6:7c:b3:55:9f:bc:
e8:64:aa:6d:e1:aa:27:94:f2:e4:99:44:0b:4b:16:
11:8a:b0:c4:2b:c4:e5:56:78:0f:a9:75:0e:45:ae:
d0:02:f7:94:c5:30:44:f1:03:c4:29:c6:aa:96:12:
fd:1a:28:9f:9a:49:ca:37:c2:0e:2c:df:4f:c4:65:
ee:09:d3:fe:bc:75:fd:cd:1c:6a:2f:0b:f5:90:3a:
53:b0:f1:08:55:d2:a2:52:ad:71:c6:e5:42:94:b7:
b3:db:09:8e:7f:6c:3c:1d:8c:eb:a2:ad:05:a1:bd:
5d:7a:af:73:09:92:f4:65:b6:ba:25:d2:83:3c:8b:
60:d7:59:38:53:b3:a8:ad:21:4c:60:40:92:b0:57:
46:17:1b:2b:94:4d:18:c8:18:d4:14:93:79:52:90:
ad:04:f3:e8:7d:19:cc:69:3d:f6:83:b8:48:3e:0c:
bd:b3:a1:9e:93:7d:54:f6:a7:1f:aa:ff:1b:bc:dd:
69:8a:c5:88:bc:b9:a3:7d:73:3b:a0:2b:ce:6e:30:
7f:9e:14:91:0a:db:b8:6c:ae:fa:45:4c:f3:c1:d8:
40:20:23:aa:2f:db:77:c1:81:85:4f:cf:d3:a0:dc:
bd:30:b4:d9:7f:c6:65:68:4a:0f:a3:72:91:bc:9e:
6f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:09:5B:CE:D3:58:D8:FB:F2:95:60:45:2B:BE:17:5C:69:7E:EE:9D
X509v3 Authority Key Identifier:
keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:af:44:1d:69:c9:79:5f:1d:f0:bb:64:f0:d2:a6:d7:6e:20:
35:d7:e9:e9:1f:17:dc:ed:4f:49:f8:df:6f:61:72:9a:f4:82:
f0:25:0e:59:03:d1:f3:75:39:a8:f0:5e:84:f3:c6:8b:6c:5f:
4a:90:be:19:ad:c8:20:55:04:27:18:49:a6:dc:ed:0d:04:64:
eb:de:97:19:96:01:f2:b7:68:93:23:4c:fd:e6:20:89:5e:4e:
ce:e8:c9:ff:9c:d2:01:3c:92:bb:55:85:06:86:ee:02:a7:f4:
fa:31:c9:17:87:b3:38:f8:d2:28:80:25:11:88:3c:f9:c7:51:
8f:bf:e9:2b:1b:c1:02:f3:cc:14:59:5f:e2:b4:2b:4a:fc:ca:
18:da:c9:5c:5f:d8:60:78:70:9b:a1:b0:d2:96:a3:ec:88:60:
d2:09:4e:67:b7:b3:6f:48:1f:b1:d2:39:a1:38:b5:ae:cc:16:
3d:fe:08:3d:3b:65:71:d0:05:41:93:6f:2b:ca:2d:c1:a5:c8:
8d:d7:11:22:af:47:28:cf:bd:e3:46:5e:45:50:63:fa:53:4a:
72:2c:fd:74:2c:50:a1:bd:a1:82:87:17:e1:a8:91:30:4c:88:
ee:16:83:f5:15:fd:41:d6:0c:25:0c:a9:a4:bf:e9:3c:dd:84:
2b:7e:21:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:39:41 2026 by rpki-client