
$ rpki-client -vvf rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
File: bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft (raw, json)
Hash identifier: a31z2MzxiEySc4GDtZRbjRQ95EK3X8bD5l5NMRmMDUg=
Subject key identifier: 20:03:4F:55:3C:8D:EF:66:B0:BA:FC:2D:2B:C6:33:E2:D6:2C:F8:C0
Authority key identifier: 6E:1F:12:40:9C:F3:9B:F9:13:C4:32:B5:87:6F:FA:FD:9F:D0:61:95
Certificate issuer: /CN=A919243F/serialNumber=6E1F12409CF39BF913C432B5876FFAFD9FD06195
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
Manifest number: 59
Signing time: Fri 17 Apr 2026 07:48:28 +0000
Manifest this update: Fri 17 Apr 2026 07:48:28 +0000
Manifest next update: Fri 24 Apr 2026 07:48:28 +0000
Files and hashes: 1: bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl (hash: iJ40CFuadwF8WNWx4YoHdFZwLuKdMBKF3WJYQ87Dsrs=)
2: 384B24AAB65511F0AE39E37FC4F9AE02.roa (hash: 4gEMioogyqtQCIBsWxjQrNaqNtpOHByAYfSBJ8goR+A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl
rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919243F, serialNumber=6E1F12409CF39BF913C432B5876FFAFD9FD06195
Validity
Not Before: Apr 17 07:48:28 2026 GMT
Not After : Apr 24 07:48:28 2026 GMT
Subject: CN=69e1e5cc-abe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:df:d7:95:72:4a:dd:15:1b:c0:3d:ca:99:
92:a5:d8:70:79:7e:0d:b7:c4:d2:ea:1e:49:54:4e:
a0:34:b8:c2:52:37:fb:a4:61:15:b1:98:6e:e5:30:
d7:03:93:32:9f:64:9d:9e:39:c6:df:8e:ef:a8:03:
80:e5:d8:f0:e5:d3:f2:25:41:c6:69:4f:ba:2d:06:
60:42:9c:95:cd:38:1c:a9:49:84:54:c2:2a:62:0f:
46:ac:a5:f1:8e:28:f2:27:c9:f9:b0:c7:ae:08:a9:
0e:6c:21:44:86:4e:e6:14:8d:b7:df:87:09:dd:3e:
85:77:49:58:86:80:11:8a:ba:93:e2:9b:14:e5:78:
a5:20:8e:a6:57:f6:43:62:5e:3b:b9:05:78:8b:e9:
ae:51:3c:bb:4a:7b:a9:f0:61:4b:c0:f4:76:40:7f:
71:cd:9d:d1:ad:d2:52:c3:02:69:0c:40:a5:8e:29:
98:c1:c5:c6:50:6c:01:af:b9:d7:c8:91:49:bf:1b:
45:07:e0:bb:08:94:96:4d:5f:36:09:3b:78:b5:88:
25:a1:c9:98:60:22:08:ac:b3:5d:ba:82:15:b2:cf:
59:ad:95:05:14:fa:a3:fe:43:66:ed:67:1b:09:3a:
32:59:17:f4:85:82:15:d0:33:92:4d:36:dd:a9:3c:
ed:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:03:4F:55:3C:8D:EF:66:B0:BA:FC:2D:2B:C6:33:E2:D6:2C:F8:C0
X509v3 Authority Key Identifier:
keyid:6E:1F:12:40:9C:F3:9B:F9:13:C4:32:B5:87:6F:FA:FD:9F:D0:61:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:f6:60:33:d7:d3:ed:67:50:87:66:4d:de:03:ec:e6:42:ee:
1d:e1:5d:5c:e4:dd:73:99:87:2d:b5:d4:06:71:b4:5c:98:af:
3f:be:53:b7:c5:84:38:15:f0:40:65:1b:4c:5e:1f:e1:17:ef:
9f:fd:37:5c:b9:30:6b:2a:32:6c:00:51:d8:1a:9c:f5:e6:82:
82:d3:5b:7c:b2:18:c4:c8:b4:bd:53:00:c5:f7:68:ad:c4:fe:
b3:41:98:f1:a0:9f:31:74:6a:31:98:5b:ef:d9:c3:96:f2:48:
3d:78:5f:63:3f:6c:17:49:2b:9d:51:da:0f:67:dd:1e:f8:8f:
12:48:69:6e:c0:bc:8d:25:44:5c:0f:ba:d3:f6:0a:99:05:9c:
8a:31:2a:60:14:c3:ca:dc:ae:d9:af:98:8e:44:80:e6:35:d2:
df:60:78:cf:5e:a8:e8:3e:f2:f7:91:59:38:84:a2:a2:24:18:
1e:29:d7:a7:be:94:41:60:69:7d:d6:f9:18:0b:34:6a:3d:38:
fb:e6:df:69:c5:5c:ac:bd:83:10:c1:fa:51:d6:03:74:3a:3d:
3d:f7:76:54:f8:f5:d6:48:fb:6e:7d:07:70:f7:81:cc:40:00:
08:47:43:a6:df:ba:fd:b0:5c:b1:82:a5:e5:d8:c1:f0:43:b7:
6f:ac:69:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:54:53 2026 by rpki-client