
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
File: bhQyTH_rm8iZLUocPkWehqPxjuE.mft (raw, json)
Hash identifier: OI4v4bu4NPSDe0PersUwG9SppQbr4FfuVZgaCvwNKjM=
Subject key identifier: CC:76:92:62:47:D6:8B:45:81:96:88:91:0C:A3:11:DC:4E:59:D2:29
Authority key identifier: 6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1
Certificate issuer: /CN=A91CDC08/serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
Manifest number: 36
Signing time: Mon 11 May 2026 08:48:24 +0000
Manifest this update: Mon 11 May 2026 08:48:24 +0000
Manifest next update: Mon 18 May 2026 08:48:24 +0000
Files and hashes: 1: bhQyTH_rm8iZLUocPkWehqPxjuE.crl (hash: uciDshKg1g2hD4K0wteVoGZ8MSPb1jrwYghjcuNp5TM=)
2: 2508F7B8001611F18F2C9137416F56BC.roa (hash: kk4e8+otr3vEuo88eNfz1XFH7SDaG9Z2aCSEpZsnIgI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.crl
rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDC08, serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1
Validity
Not Before: May 11 08:48:24 2026 GMT
Not After : May 18 08:48:24 2026 GMT
Subject: CN=6a0197d8-38d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:77:c0:9e:15:11:aa:f4:81:a0:e4:6b:8a:af:
f1:56:da:3d:30:4f:f1:59:96:4a:36:e5:50:40:81:
e3:ab:9e:29:d0:91:78:58:09:b0:2b:27:bd:b0:c2:
d4:33:53:24:1e:6e:18:c4:20:02:77:4f:f9:a0:65:
66:e1:b5:eb:80:06:af:66:1c:15:bf:da:35:21:c6:
1d:8a:a2:57:30:34:8a:df:0d:9d:e0:37:94:e1:bc:
38:ae:e4:19:d7:2f:f0:1c:26:3f:ab:c2:0a:dd:6e:
39:f9:24:3f:57:9a:89:9a:6b:95:80:2d:6b:f1:b4:
75:85:8d:bd:97:a7:95:84:f0:be:f9:3f:23:79:c0:
73:ea:b1:1e:50:e5:5b:b8:e7:86:cb:35:d3:47:8c:
09:e2:18:e9:fc:b0:49:ac:6a:3a:0a:77:db:22:d4:
e5:3a:ec:60:fa:32:bd:5e:85:1d:42:ae:e5:13:07:
3f:3a:d8:91:4c:54:7d:a7:09:ce:94:3c:f5:35:2e:
9d:10:9e:50:0a:3d:ff:46:1e:a9:e6:c9:8d:77:68:
f6:b4:63:db:ef:71:57:a5:43:82:46:f6:c3:54:6a:
80:72:30:a0:6f:72:95:06:ca:5b:69:af:cf:ae:03:
33:b1:1b:54:c6:d6:45:d2:3f:8f:e4:db:6b:ec:3d:
e9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:76:92:62:47:D6:8B:45:81:96:88:91:0C:A3:11:DC:4E:59:D2:29
X509v3 Authority Key Identifier:
keyid:6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3e:42:31:95:5a:3c:f1:85:c8:5d:5d:98:d3:48:77:ca:5e:
a6:6d:47:f0:c4:d0:2b:09:bc:bb:a7:bf:15:c5:33:5a:18:92:
de:a0:92:3a:54:c9:5a:09:69:e5:b4:78:99:f4:c0:b7:11:b0:
89:a7:d6:ce:46:52:9a:3b:8a:7a:77:1b:78:c3:76:2b:58:be:
a3:81:1c:1d:76:cd:e6:5c:68:9d:0b:38:31:20:41:66:e5:02:
62:6f:cf:fd:01:b1:55:8d:29:88:cf:13:da:95:6e:92:5d:c7:
1c:8c:d0:bc:a0:bd:59:a4:de:4b:f1:68:2f:79:3c:6d:e3:49:
18:c1:7c:fb:75:ce:cf:a9:a4:b4:45:3a:55:f9:33:9b:db:c6:
54:09:d1:eb:56:5f:db:96:a4:ca:59:3a:3e:49:b1:73:5d:d9:
9d:a4:a3:1e:ba:5e:02:7d:d9:0b:b0:95:87:51:c4:ed:8c:8d:
67:93:2c:06:66:eb:db:22:46:47:d8:a6:21:b1:03:84:48:11:
92:e9:77:06:9c:b2:c2:f3:65:c1:be:45:d5:74:de:87:c4:33:
27:b6:ec:b2:42:e5:2a:04:82:19:bb:1c:9b:52:27:c1:ac:18:
51:8a:3b:d3:a5:db:56:fc:12:fe:09:4d:d0:95:a1:46:6e:14:
14:06:f1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:09 2026 by rpki-client