
$ rpki-client -vvf rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
File: BQFHuU3J1svowLDxrQwBg6YHfDQ.mft (raw, json)
Hash identifier: ml2w+DVFxiOZL2IwvHvQnaUvSrOHpcI54FNMvaBMOLo=
Subject key identifier: 9B:78:96:6D:3A:CB:45:F1:12:B0:5F:3A:2A:09:C4:DA:61:5D:A4:BA
Authority key identifier: 05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34
Certificate issuer: /CN=A91629AA/serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
Manifest number: 016D
Signing time: Sun 01 Mar 2026 05:47:29 +0000
Manifest this update: Sun 01 Mar 2026 05:47:28 +0000
Manifest next update: Sun 08 Mar 2026 05:47:28 +0000
Files and hashes: 1: BQFHuU3J1svowLDxrQwBg6YHfDQ.crl (hash: eKczcnwRL3EacDra6i+7/dmeDKjmgUsbLBNq25Rhrss=)
2: 1E347CDCE74A11EE8602742BC4F9AE02.roa (hash: 1KFMJqeP1xSunnIgreiULJOt/F6oOyvmT80gXMxgyXA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.crl
rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:47:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91629AA, serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34
Validity
Not Before: Mar 1 05:47:28 2026 GMT
Not After : Mar 8 05:47:28 2026 GMT
Subject: CN=69a3d2f1-6e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6c:d4:54:ff:05:49:b3:6e:91:f2:dc:e8:8a:
03:f2:ca:2d:44:9e:be:d8:97:93:42:76:47:d3:e4:
1f:a7:13:4a:63:1d:27:c2:a2:0b:ce:b6:1b:5c:37:
fa:f0:58:6c:b0:a5:00:57:34:c9:6f:bf:24:d4:13:
fd:c0:34:42:93:e9:63:ea:45:c2:5f:2b:05:e8:06:
54:01:1f:cc:c0:69:32:6a:f3:3d:37:1b:03:ea:30:
30:d3:17:e2:a1:fe:a2:7e:a6:ab:af:5f:80:4c:0d:
1d:22:77:f4:6a:1b:ff:5b:69:87:3b:87:d4:45:ee:
b7:74:a1:75:a9:58:e1:cc:42:e3:02:fe:b5:c8:c9:
cf:43:04:e3:5c:ce:70:c6:33:9f:a4:97:60:92:09:
6f:b3:b3:cf:2f:d8:62:3f:3c:da:e6:67:cb:a7:58:
a0:7a:15:2b:a6:8a:41:2e:24:aa:3b:97:68:49:4a:
7a:9e:11:50:7e:1b:0c:2a:79:bf:39:5d:d1:99:f1:
68:d7:49:01:f3:5f:be:9a:c0:69:f0:1f:5e:ad:8d:
80:5f:32:70:c9:e8:d8:ec:62:c5:e7:39:c9:76:8d:
42:d5:ae:cc:11:ae:e7:cc:65:3c:f7:d2:ee:97:62:
e5:9f:53:fe:fd:ae:cd:12:a5:28:b4:21:33:70:70:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:78:96:6D:3A:CB:45:F1:12:B0:5F:3A:2A:09:C4:DA:61:5D:A4:BA
X509v3 Authority Key Identifier:
keyid:05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:76:0c:2f:b6:37:70:d7:cd:1d:25:a2:f4:80:2e:30:0f:12:
2e:90:dc:0e:03:1a:9f:f3:25:d1:71:d9:60:01:5d:fb:2f:eb:
fd:98:98:65:6f:6c:f6:1a:de:e6:d1:22:d7:fc:b9:6d:37:76:
26:3b:c5:04:60:11:ad:d5:ae:04:c5:43:7f:e3:58:57:c9:0a:
f7:53:bc:43:75:00:15:33:b1:eb:49:de:0e:de:62:24:0e:7c:
b4:82:99:e2:f7:ad:5d:6f:7d:9a:dc:63:8d:f1:d8:4e:da:60:
92:61:44:36:bf:e6:27:22:21:51:1c:00:de:a7:5c:ab:b4:79:
59:5a:73:04:7b:03:5d:94:81:1b:e9:71:8e:28:f9:89:50:cd:
41:be:3a:d2:c5:7b:f2:a6:67:0f:b7:77:3c:b3:81:7b:be:ff:
fc:0a:53:b4:ec:5f:df:d7:a9:6d:0a:68:8a:df:11:11:08:a0:
ab:80:3a:30:70:85:b2:42:e7:72:56:e3:d8:5e:8c:ec:55:8b:
d7:34:a8:27:da:41:fc:6c:81:b7:ef:6a:81:19:14:74:7f:cf:
6c:ac:39:66:f7:fd:3c:c3:33:72:80:58:93:8a:7d:29:f0:25:
6d:b6:56:6a:98:6d:d1:ea:ec:1a:9c:e7:46:d8:23:7f:64:ab:
22:09:ee:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:11:39 2026 by rpki-client