
$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft
File: BYQh3nB4BzBHPlzFRboK5dubTAo.mft (raw, json)
Hash identifier: IrZ4Pb9yxDuRaFM0cZGDeV8S1hI7lTp3UIyvYuJHWbs=
Subject key identifier: 86:80:1C:A1:AF:9E:00:02:C7:25:B4:57:A4:A9:02:53:C8:26:1C:C9
Authority key identifier: 05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A
Certificate issuer: /CN=A91862F7/serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A
Certificate serial: 0A5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft
Manifest number: 0A4E
Signing time: Fri 12 Jun 2026 17:11:02 +0000
Manifest this update: Fri 12 Jun 2026 17:11:01 +0000
Manifest next update: Fri 19 Jun 2026 17:11:01 +0000
Files and hashes: 1: BYQh3nB4BzBHPlzFRboK5dubTAo.crl (hash: XDYsYgRiy4DUclHz86lPT0Wwnxqs3U0rpLGVzhP3QVg=)
2: 7B01065ECB6611F0911E3B40C4F9AE02.roa (hash: 6Dvm4ulNHKTvy2zEThI5CFxM48R2WkZ0mp2MxrhNEVA=)
3: 7C4C4384CB6611F09E0E3B40C4F9AE02.roa (hash: jmLTUdjA6fVp52xmmEEVibY5+Y7NyInAVp9PHPY/5uE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl
rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2655 (0xa5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862F7, serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A
Validity
Not Before: Jun 12 17:11:01 2026 GMT
Not After : Jun 19 17:11:01 2026 GMT
Subject: CN=6a2c3da6-3af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:9c:8a:61:82:ba:df:5c:62:43:a7:ef:46:
e4:31:25:3b:2d:db:02:a2:26:48:65:7b:73:5a:7f:
a5:c7:58:ed:9b:d0:da:4e:f7:2d:40:d5:c8:d7:b5:
00:d7:92:d7:08:98:33:2d:d9:94:31:9b:78:a3:a4:
89:71:27:f2:c3:c8:85:8b:56:71:9d:4c:74:79:05:
e9:d8:3d:49:a4:0b:8d:40:21:b8:dd:5c:1b:ca:5d:
dd:c7:63:a8:cf:3d:f5:5c:99:cc:39:9c:4f:13:11:
2a:d9:7f:e7:c6:43:36:24:41:9f:d5:d8:6b:d2:3d:
66:93:df:46:25:f0:a1:f5:08:8b:70:6d:4f:a4:a4:
92:af:7e:7b:be:bb:a2:6c:98:79:1e:bd:e3:f3:03:
f9:f6:fe:1e:fb:05:ef:ea:9e:cd:68:6c:61:30:bb:
9e:2b:8e:5b:76:ff:76:59:6b:25:95:b8:d8:5e:84:
fe:e7:b9:61:c6:24:8b:4d:ca:c2:35:79:57:49:69:
18:aa:db:1b:ad:05:54:82:46:32:2b:ff:c5:ca:fd:
a1:e3:36:ee:db:04:49:0f:27:5b:04:2b:db:ac:18:
76:92:a5:3f:73:03:c6:ca:4e:14:a4:8b:e2:9f:e4:
70:f8:b5:53:ff:3f:7e:ec:ab:92:b3:06:88:89:83:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:80:1C:A1:AF:9E:00:02:C7:25:B4:57:A4:A9:02:53:C8:26:1C:C9
X509v3 Authority Key Identifier:
keyid:05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:90:35:f3:c5:bd:1d:98:b2:ed:29:1d:8b:f0:ab:8d:1d:6e:
98:70:01:40:cd:35:83:16:24:3d:9f:3b:7d:04:aa:20:a7:de:
7c:4d:46:2b:3a:77:53:9a:87:71:b8:04:7d:df:93:d0:00:51:
7f:3e:a3:61:a6:ba:b0:10:6d:5f:ab:42:1a:bc:e7:d0:b6:bd:
bb:91:19:a4:7c:5d:fa:9c:e7:98:9d:cf:c8:ff:7a:42:11:7c:
73:5e:ca:ab:69:ae:e4:05:42:39:2b:0f:79:a0:61:03:bb:ad:
f0:84:e0:1b:7d:8e:eb:11:eb:05:cb:78:88:e8:19:3b:2f:a1:
5d:bc:a3:07:61:2e:5c:3c:09:e5:d7:55:15:c3:c4:74:9f:82:
4f:1c:44:c4:e3:40:2a:42:8f:7b:31:b9:d8:8b:95:23:a9:e0:
b0:64:04:a1:fe:0b:5a:2e:b5:e0:35:f2:eb:1c:53:95:b8:99:
48:bb:af:70:2a:e0:f3:48:ce:9a:a9:c6:a4:f9:e8:01:e7:4a:
f4:a8:d1:87:26:81:a0:ab:06:96:96:8a:bf:e3:0e:85:a2:10:
cb:e8:a5:cd:76:9a:e6:be:ea:fc:89:40:e6:45:55:53:c4:53:
73:d2:e6:9e:ce:e2:36:a0:1e:64:7d:da:47:f1:a5:30:63:6d:
e6:10:f8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:40:04 2026 by rpki-client