
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft
File: BHT0BqF40ixU1e9yTGssLJo7a5g.mft (raw, json)
Hash identifier: /OiBpQMKzeYAjwodnPvktpouBTrQu/tGTxr2AuqgjW0=
Subject key identifier: 1B:DC:61:79:85:6A:4D:E7:F5:50:6D:AD:6A:89:A6:B9:60:65:F8:7C
Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98
Certificate issuer: /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft
Manifest number: 0190
Signing time: Thu 23 Jul 2026 05:51:12 +0000
Manifest this update: Thu 23 Jul 2026 05:51:11 +0000
Manifest next update: Thu 30 Jul 2026 05:51:11 +0000
Files and hashes: 1: BHT0BqF40ixU1e9yTGssLJo7a5g.crl (hash: 49hJDl4yskd7fATs224eNozGIiS5XwrTCcNOTzYKOs8=)
2: B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa (hash: 9L09hQIBaOVE5f616sgiqulORBkTSjHL+znxkwZEmL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl
rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D60CF, serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98
Validity
Not Before: Jul 23 05:51:11 2026 GMT
Not After : Jul 30 05:51:11 2026 GMT
Subject: CN=6a61abcf-85fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f6:a5:08:a8:39:e3:d3:80:66:55:48:02:9c:
c4:04:51:1f:cc:5e:cf:ef:24:15:b3:ea:69:d5:4f:
36:67:92:e9:e4:df:4b:74:2b:b8:9e:45:bb:af:8d:
7d:a7:07:83:31:11:26:79:d1:47:5c:fd:db:ff:cc:
95:e6:2c:ef:f2:4d:20:dd:5c:08:34:c5:7b:3a:a4:
5f:6d:b4:be:f5:18:26:c0:63:fb:7b:8f:3b:f2:29:
79:51:f5:b0:9b:ed:4a:53:bf:1e:b8:ca:e6:a3:49:
68:22:1b:93:7a:8d:51:13:79:78:bc:fb:a1:d1:c0:
43:5a:10:c5:02:77:12:df:c6:61:1b:16:03:42:19:
99:37:e8:60:87:bc:df:19:72:d4:f4:36:f2:0a:f6:
2d:70:ce:58:00:d9:ac:a1:4a:eb:04:cc:c8:b1:e8:
e7:d9:e6:04:2c:ba:7e:de:e9:98:2c:52:29:03:e4:
f4:05:66:d3:b6:3f:84:14:56:be:f2:0e:ef:b0:f7:
fd:c1:fe:68:0a:fd:30:82:b2:4c:e1:c8:52:6b:2d:
91:00:73:34:11:58:17:be:d2:9d:bb:a4:0a:f5:03:
c4:5b:44:c3:fb:39:53:b8:51:06:3a:05:bd:93:3d:
99:a1:b3:2f:2c:de:f5:f4:63:f5:da:cf:95:fb:50:
30:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DC:61:79:85:6A:4D:E7:F5:50:6D:AD:6A:89:A6:B9:60:65:F8:7C
X509v3 Authority Key Identifier:
keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:6d:52:fb:9c:e2:d5:21:3f:cc:da:60:04:e5:45:1f:9b:ec:
44:76:ef:58:17:f8:38:6b:77:16:02:0a:99:08:00:6d:60:d1:
f3:9a:15:aa:98:41:65:d7:0f:4d:88:64:4e:5f:1a:5b:91:43:
c6:1e:49:87:a5:74:ee:4c:6e:62:9c:b8:93:2c:da:41:fc:d0:
18:b9:4a:f5:d6:32:0b:40:ea:3b:cd:09:16:90:35:71:0c:3e:
1c:b8:b3:9b:b4:35:29:f8:b7:64:c3:de:1b:b8:fe:0a:90:f3:
02:65:67:45:ef:ce:1a:cc:e2:2e:9d:fd:b5:5f:36:cb:3c:e6:
3f:9a:82:23:a9:43:ed:1c:08:65:ae:55:b7:03:b2:07:eb:ea:
7d:fc:93:e5:0b:6c:60:99:a9:b8:40:4e:35:e0:34:48:d4:83:
5c:35:00:07:d7:c9:4f:f0:35:a6:40:71:a5:d0:2b:cc:12:bc:
45:2f:b0:4c:19:38:69:88:25:d5:b7:df:af:e3:b8:6a:96:7a:
ad:0e:ab:bd:f1:ae:c6:84:7f:f2:f6:d1:3e:1b:d1:6b:68:f5:
4d:bf:4e:93:7a:da:d6:a3:9d:f8:ae:be:26:9a:f5:48:2e:70:
22:df:56:c9:6e:a6:38:dc:f9:60:fd:85:7c:ed:9b:c7:91:dc:
57:b2:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:07 2026 by rpki-client