
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
File: BQ5HmwmNZLazhlsr5GiFdeotTVE.mft (raw, json)
Hash identifier: 2VP5FXl6AZNdMR6FmDYx7sdt8UTiYKxgHedbtlEU2ao=
Subject key identifier: 03:EC:98:91:58:44:2E:A9:B4:07:3F:31:A7:A8:C1:CD:16:92:5D:90
Authority key identifier: 05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51
Certificate issuer: /CN=A91AB457/serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51
Certificate serial: 0C6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
Manifest number: 0C6F
Signing time: Sat 18 Apr 2026 18:31:46 +0000
Manifest this update: Sat 18 Apr 2026 18:31:46 +0000
Manifest next update: Sat 25 Apr 2026 18:31:46 +0000
Files and hashes: 1: BQ5HmwmNZLazhlsr5GiFdeotTVE.crl (hash: tkyYlwZk51rA602vq8gedgyimA7i8fgSm0XyL5G8kdc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl
rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 18:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3183 (0xc6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB457, serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51
Validity
Not Before: Apr 18 18:31:46 2026 GMT
Not After : Apr 25 18:31:46 2026 GMT
Subject: CN=69e3ce12-f6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:05:04:88:46:90:8b:58:71:86:a3:2e:9a:
e4:d8:f3:4b:ef:67:8c:b9:b1:37:f2:44:93:6c:09:
64:f4:30:69:26:d4:ff:19:8f:8a:32:a5:9f:27:31:
2f:a7:3c:7a:ee:00:d8:f6:ec:4e:1f:28:55:1f:31:
40:59:ee:e8:d3:16:99:9f:6c:5f:df:99:41:10:73:
75:9b:eb:33:8c:69:14:9e:54:14:b9:2a:13:3d:26:
f7:4f:25:56:93:4d:7f:a3:0a:5f:b9:19:d8:39:37:
ed:bf:81:e6:23:b1:dc:32:74:92:09:2a:da:44:38:
68:41:31:f0:c8:1e:36:60:56:74:01:1c:b1:19:4d:
6c:ee:60:d3:b3:6b:18:03:6c:98:76:7b:03:00:50:
fe:89:b1:93:f8:a8:17:ee:cb:71:01:23:2f:c9:a7:
b0:1b:ed:37:9d:76:97:8d:c0:cb:10:09:4d:98:41:
9a:7b:b7:58:f5:3a:2a:00:3e:3a:82:f8:60:b6:b4:
b2:be:c0:bf:05:fd:c9:3c:0f:23:23:52:69:56:af:
3a:73:23:62:fc:73:13:37:b4:60:4e:17:34:e6:77:
40:6f:7f:d8:67:35:83:23:00:c0:d5:2c:46:b9:6c:
ac:c7:ed:15:aa:a7:1b:6f:b2:55:58:09:c4:9d:cb:
f1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EC:98:91:58:44:2E:A9:B4:07:3F:31:A7:A8:C1:CD:16:92:5D:90
X509v3 Authority Key Identifier:
keyid:05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:ad:2c:55:10:5d:f7:8d:e6:f6:10:da:14:72:7f:17:51:ad:
59:25:cc:5c:90:e1:1b:f5:c4:d4:12:e9:f9:2d:04:0b:2f:c4:
79:ca:ae:f0:41:c5:d9:db:7f:8d:74:f7:33:6d:92:0c:02:cb:
96:72:9f:c8:a7:b4:b2:61:a5:ab:5e:27:0c:66:02:ac:78:a7:
31:a7:89:49:21:b7:3d:f9:b5:ec:0a:54:09:2f:6e:b2:a0:79:
ea:69:e2:3f:40:e8:bf:b5:de:4f:db:96:9c:2b:c5:81:7d:a9:
a7:36:a1:95:ba:19:61:c1:02:17:e1:3e:c6:8b:87:6e:b4:1d:
2b:aa:7f:23:71:d4:58:7c:b5:bc:6e:38:2b:7a:5f:85:13:6f:
36:80:4f:71:08:10:17:73:e7:80:8a:09:2c:fe:da:d1:c6:ab:
e2:e8:f9:66:9d:cb:07:90:be:1f:91:d9:7e:3f:33:8c:dc:76:
0a:ce:b6:bc:1d:73:47:6d:86:bf:cd:b0:ea:82:24:34:75:4a:
46:c5:7b:b8:0d:7e:bc:74:9c:ab:3a:ac:01:b4:e7:9e:7d:08:
8b:c9:30:00:be:5a:08:63:e8:79:02:c6:99:e9:50:ab:bd:99:
73:5f:57:9f:5e:f7:78:d7:c8:0d:82:04:6e:b0:33:01:37:11:
12:73:ff:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:27 2026 by rpki-client