
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft
File: BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json)
Hash identifier: ETQTys//+u/EO8XFMUwlx3ISGMA2WurysFKl1AKuR3A=
Subject key identifier: 7E:F2:D5:06:27:22:E0:CC:BF:AB:AB:D7:FB:0C:32:85:43:1F:04:DE
Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A
Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft
Manifest number: 0115
Signing time: Thu 23 Jul 2026 07:42:10 +0000
Manifest this update: Thu 23 Jul 2026 07:42:09 +0000
Manifest next update: Thu 30 Jul 2026 07:42:09 +0000
Files and hashes: 1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: 62laQd+LIp9kFujRfJXTHVwimhRf1w7zAkMII/Ms47Y=)
2: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: 0Vpr4wHkrRxShWlsrRPFVmtyt2/mJk9Z/g3wYu3DTO4=)
3: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: +2yUerADc2yEVbMSngexvekNdzNxgr2F5nZV/rqxi/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl
rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A
Validity
Not Before: Jul 23 07:42:09 2026 GMT
Not After : Jul 30 07:42:09 2026 GMT
Subject: CN=6a61c5d2-ff9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:b9:18:1e:ea:c9:bb:c2:70:e9:d0:5f:07:
74:78:59:37:f6:d9:43:3d:d4:55:83:4d:a3:17:a4:
7a:f2:dc:fd:a0:0a:d2:db:f5:83:ae:cf:b9:25:38:
ca:c6:da:24:bd:06:4b:4e:f1:87:e1:11:57:af:d4:
9d:5e:42:2c:04:f3:de:d2:e2:37:3a:8b:63:a8:aa:
6f:ef:ce:b2:9c:ee:58:a9:d4:bf:6c:4e:37:cf:37:
3d:5a:5f:89:bd:4a:6f:66:d5:77:c2:20:e3:ec:d8:
51:56:4b:2b:21:0d:08:0f:ca:b4:9a:a5:ad:40:c6:
e9:a4:62:6a:3f:64:a2:a4:54:41:5b:a4:86:05:b0:
00:58:b8:28:fc:84:e5:7c:38:41:b8:60:e0:52:33:
e5:b4:cb:3e:a7:bd:f6:00:5c:61:c3:7e:fe:47:25:
eb:dd:58:9a:3d:11:be:bf:8b:cd:7a:4d:6b:cf:ef:
c2:f3:3a:37:e5:55:89:38:4e:4d:28:08:2f:fc:eb:
e2:34:d3:7d:84:e3:4a:94:00:5d:e8:a3:23:45:27:
ab:fa:5a:7a:75:5e:b0:57:2d:44:c5:b9:ba:a9:eb:
88:40:f3:81:9d:ce:85:ee:70:27:46:98:9a:46:8a:
43:20:89:6f:93:a3:b8:fb:a9:dd:5c:d1:58:2d:72:
86:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F2:D5:06:27:22:E0:CC:BF:AB:AB:D7:FB:0C:32:85:43:1F:04:DE
X509v3 Authority Key Identifier:
keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:b6:e9:f6:49:e4:1b:b8:db:22:64:d9:8a:38:e0:77:30:c9:
d0:7c:8a:31:7f:ba:1c:48:28:94:96:e5:87:57:5c:4a:80:d4:
86:cc:ea:98:39:56:52:aa:84:83:cb:c0:3e:3f:96:ff:c3:c6:
4d:2d:39:9e:08:b5:33:14:ac:3d:bd:1b:6f:ad:78:53:00:fa:
bf:70:a1:e8:1e:d3:3e:ae:f5:2e:ff:80:4d:e4:f7:f1:b0:b7:
05:d9:d9:c7:e4:70:9f:55:9d:a3:9b:55:d9:61:43:4a:3d:ff:
32:28:f2:15:fa:ff:fb:a5:cc:fb:c6:53:9a:6b:0c:e2:35:07:
9d:02:cd:2f:2a:01:9c:5a:cd:33:10:8f:66:f6:03:72:01:4b:
61:e2:ad:aa:bc:4b:1e:c9:4d:00:6c:d3:58:72:a2:f5:f7:eb:
3b:ab:fc:40:93:03:19:0e:d1:62:57:1f:e4:eb:5f:af:23:59:
3a:70:1b:cd:d6:10:51:26:be:12:07:40:6a:40:c1:6b:80:9d:
54:f8:1c:17:0c:d3:d2:08:fd:52:47:b7:48:8b:e3:5f:af:b0:
7d:ef:92:5e:91:87:69:96:0f:2a:0c:17:f4:0c:02:3a:9c:6a:
f1:34:a4:21:c6:a3:f6:4a:64:b8:2e:5a:04:af:00:f8:8f:40:
d5:e7:5c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:28 2026 by rpki-client