
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
File: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft (raw, json)
Hash identifier: EaxuRe+UGDM5Ux4yAQh5R/BSdihfgGyvwwtBB87n0Uk=
Subject key identifier: 1A:ED:9E:E5:B3:A0:1D:8D:F4:FB:C3:E7:B1:28:9B:5F:F0:28:6E:47
Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7
Certificate issuer: /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7
Certificate serial: 0BD5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
Manifest number: 0BC9
Signing time: Tue 12 May 2026 19:00:48 +0000
Manifest this update: Tue 12 May 2026 19:00:48 +0000
Manifest next update: Tue 19 May 2026 19:00:48 +0000
Files and hashes: 1: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl (hash: G8XGDcXOa6aA2fKZjpEEWGrRakBbpjRccg5Bpv7h1Ck=)
2: CF5422842CB111F19655F1BDC9833773.roa (hash: 8ZwBOZ7hrFX3NuDI+RJpwp5MuhVPjE9cVYyKjGDrr3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl
rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3029 (0xbd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D425A, serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7
Validity
Not Before: May 12 19:00:48 2026 GMT
Not After : May 19 19:00:48 2026 GMT
Subject: CN=6a0378e0-9f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4e:d0:7a:58:e1:26:14:42:8f:e2:9c:97:d9:
e3:f5:04:d3:50:74:b0:da:14:17:62:de:1b:95:72:
e2:7b:40:e0:f7:56:5e:b7:4b:27:c5:4d:73:69:b3:
92:25:d3:58:de:86:61:dd:a8:ac:b8:ec:cd:ed:0c:
72:b4:90:17:68:3d:1a:08:a5:9d:bf:4e:47:80:b8:
ff:f4:4d:95:22:08:5e:19:42:8b:b9:07:29:b1:c3:
ea:88:3a:c0:4c:10:96:08:1b:cf:db:46:4e:e9:0c:
a9:1b:b7:72:3d:30:f4:22:a5:74:17:bf:25:c2:ab:
f7:a5:99:7e:56:23:ff:d2:51:97:5c:1a:af:a3:c9:
8b:f5:f7:2b:37:43:f5:c0:d6:44:76:06:c3:ea:7f:
34:66:9b:53:34:25:a7:4a:82:2d:94:52:8c:17:a6:
c5:7a:2b:65:36:2e:c6:5f:7a:2b:83:ca:7f:9c:40:
2e:ac:2f:49:58:e5:a4:37:42:68:af:a6:d2:d8:a0:
d5:dc:fa:41:ea:53:f7:0f:dd:1b:46:c3:64:37:4d:
c9:e6:93:d6:d0:cc:3c:65:63:c0:96:0d:76:68:b2:
b7:23:8b:3b:8e:bc:0c:63:94:3e:cd:64:99:e8:6a:
12:44:72:da:90:6b:17:6d:8d:85:ff:cc:7d:1a:a3:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:ED:9E:E5:B3:A0:1D:8D:F4:FB:C3:E7:B1:28:9B:5F:F0:28:6E:47
X509v3 Authority Key Identifier:
keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:74:ce:ac:ac:93:88:04:a5:40:3f:05:c3:d4:a3:72:5a:f9:
28:88:85:e3:fe:33:c6:93:88:e7:4d:d2:0b:b5:25:8c:c3:b2:
85:d9:63:50:b6:a5:ce:8d:b3:ba:77:90:c3:c6:16:30:cb:d1:
1e:64:be:d3:71:5d:3e:ba:7d:32:13:d6:88:cb:6c:42:b4:fe:
83:59:43:bc:4f:b6:a0:a5:59:a8:65:f2:b6:ed:d5:ac:b3:58:
dc:13:54:53:ad:64:d3:20:f9:8d:24:e5:92:55:01:08:bb:92:
0e:bc:3e:0a:7e:89:b2:57:8b:97:69:4c:53:51:83:da:96:b1:
2d:f4:ca:4e:72:39:0b:85:14:e7:fd:f6:82:f0:ff:76:65:7b:
3f:aa:c2:02:69:6f:5b:38:6f:34:5f:54:42:16:11:77:8f:37:
58:8c:5e:cb:93:b9:a2:3d:ac:b2:4e:49:0b:0b:bf:53:a9:5b:
94:5a:06:0e:db:f9:78:23:a6:e3:b0:12:ee:6e:54:71:18:27:
06:f9:2b:f5:61:e5:6f:e6:07:a2:a0:84:5c:0b:09:92:96:f3:
8c:a0:ef:e9:1a:d6:b9:5f:8d:8d:91:49:db:42:d6:fb:37:99:
b1:cf:fa:ac:39:01:3a:50:bb:6f:cc:29:b7:16:90:e6:3d:a3:
cf:b9:90:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:30:53 2026 by rpki-client