
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
File: BZ5vA652dqnQ8J1fbL25CGGFWlc.mft (raw, json)
Hash identifier: xAp1Lo7AnBe1PuRXNaH2b5TKzKSdEtD9DZKIg715nQM=
Subject key identifier: 8B:2C:B2:B7:1E:47:93:B9:FF:5B:53:0F:AC:BF:6E:F0:E2:2A:71:A0
Authority key identifier: 05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57
Certificate issuer: /CN=A91FF74B/serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57
Certificate serial: 079C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
Manifest number: 0774
Signing time: Tue 12 May 2026 21:23:14 +0000
Manifest this update: Tue 12 May 2026 21:23:13 +0000
Manifest next update: Tue 19 May 2026 21:23:13 +0000
Files and hashes: 1: BZ5vA652dqnQ8J1fbL25CGGFWlc.crl (hash: 8C33FGu36erpeio1tyoHLwlcsS6uIuDZIocXzT7w9FY=)
2: 7E0AB01C782C11EBB0B71971C4F9AE02.roa (hash: QZpGdBeLR/9QiZlZAdnU1Y45E5G+uOVVhczPqvB6SAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl
rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948 (0x79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF74B, serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57
Validity
Not Before: May 12 21:23:13 2026 GMT
Not After : May 19 21:23:13 2026 GMT
Subject: CN=6a039a41-b89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:fc:5d:22:a4:41:50:05:2c:62:d5:7c:63:
a4:db:f3:08:40:61:5c:80:6d:74:80:50:dc:73:59:
55:29:16:74:0d:e4:27:b1:c2:37:db:2a:89:0d:6c:
02:ec:8d:68:a6:6a:48:31:ae:69:a3:35:42:6a:70:
bf:e7:6d:97:89:da:6d:e1:f5:48:3b:10:1e:f0:48:
bb:a3:96:bc:e1:ac:0d:fd:be:ca:8c:56:12:5a:ae:
11:53:b6:27:21:83:08:52:c0:0e:27:7c:e7:c7:c6:
09:c9:c8:c3:7e:90:6d:04:d8:83:47:fa:07:b4:75:
86:74:a8:6d:b4:7f:14:db:a9:45:a7:46:71:01:c3:
9c:1e:44:7a:46:5a:6f:2a:87:51:fc:b4:16:b1:e6:
3b:7f:50:89:00:b2:fb:72:00:41:18:ec:4d:bc:ec:
e7:be:6c:57:9a:7d:6c:8f:ff:df:4a:22:9f:2e:28:
48:2d:a0:a4:ad:55:f1:fb:3a:58:48:2c:de:b8:de:
07:81:83:c4:9d:cf:ff:f8:6a:38:12:79:55:69:10:
b1:cf:41:fe:e1:4a:ba:59:a2:05:d5:83:bd:8a:7b:
e7:66:80:6a:3a:08:05:f1:d6:ca:1a:ce:bd:e0:b7:
f3:a6:05:3a:e1:ea:38:88:7a:b5:a8:ab:2a:2c:9a:
76:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2C:B2:B7:1E:47:93:B9:FF:5B:53:0F:AC:BF:6E:F0:E2:2A:71:A0
X509v3 Authority Key Identifier:
keyid:05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e6:83:8d:bb:02:c8:1c:4a:4c:f6:10:05:19:1c:23:4f:7d:
26:c7:ce:13:62:77:6c:cf:b9:92:02:88:10:7f:56:c7:3e:a4:
46:97:75:0f:d0:72:e8:30:be:de:c1:e4:77:a6:9f:41:02:51:
25:d7:68:7c:8c:b5:88:b0:cf:fe:58:68:44:bc:0d:2b:90:e3:
6e:bf:48:79:37:32:25:c5:fb:d9:87:d8:94:ab:6a:ea:9c:d9:
8e:e5:fa:c1:c6:39:28:5b:46:d0:65:ac:67:c2:eb:b5:b4:3f:
6c:fa:29:64:19:77:3c:a5:49:9d:e9:f6:59:99:8f:33:ae:8f:
1e:87:32:6f:0c:53:62:fb:83:e8:40:a8:df:83:45:4e:5c:ce:
a0:41:f0:0c:bf:4a:92:fb:ca:3e:dc:42:29:48:67:17:20:db:
df:00:ed:2d:f5:f7:18:30:76:de:93:2a:ce:69:97:7a:91:db:
6b:24:4c:3d:4d:76:90:1b:bc:dd:7a:0d:db:5a:22:77:35:e6:
74:6a:59:0d:ad:47:dd:60:96:65:96:78:c3:dd:2b:00:0d:e6:
a5:3d:53:17:9e:0b:b1:9a:b7:71:81:aa:a3:a9:a6:7a:a6:43:
d3:4c:d4:e0:20:93:cc:95:d9:2b:6d:00:bd:73:0b:e2:52:6a:
8c:61:b7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:11:35 2026 by rpki-client