
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
File: BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft (raw, json)
Hash identifier: ocDRxXHAKP7Kq14IJrXaPFWrtHK4vtNpagWKIdO6RAI=
Subject key identifier: 0E:22:B8:21:C8:12:11:1B:EF:3C:92:32:73:B8:F7:5D:B6:00:A6:ED
Authority key identifier: 05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC
Certificate issuer: /CN=A91AB8D7/serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC
Certificate serial: 02C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
Manifest number: 02BF
Signing time: Fri 09 Oct 2026 01:51:28 +0000
Manifest this update: Fri 09 Oct 2026 01:51:28 +0000
Manifest next update: Fri 16 Oct 2026 01:51:28 +0000
Files and hashes: 1: BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl (hash: hIBiZPI1KC/mBt2LKbyhq4J14WXFpDxV0KIhMAxA/HM=)
2: 1ED3BAF898A011ED9D31B05CC4F9AE02.roa (hash: 94M44dsN95Cfdn+68CbMlhuF5n5qBQCEV7YwA9S7Ln8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl
rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 01:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710 (0x2c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB8D7, serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC
Validity
Not Before: Oct 9 01:51:28 2026 GMT
Not After : Oct 16 01:51:28 2026 GMT
Subject: CN=6ac848a0-5145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:31:c3:98:b2:bc:01:fd:a2:7c:1b:dd:36:
b6:36:0d:2f:36:7e:6f:28:a2:ec:eb:31:91:9f:be:
d5:c0:7b:e2:d7:3c:62:f4:af:00:37:5b:7c:e1:a5:
a8:08:24:4b:98:5f:e8:62:e9:e0:f5:eb:8b:8c:18:
63:95:e8:3e:84:48:44:75:c9:f0:50:43:71:3c:13:
7c:97:0e:48:ae:57:cc:cf:e3:1c:c8:65:87:ba:f0:
99:42:48:c0:24:1b:d3:3f:9e:d3:05:22:14:c7:de:
f4:8b:39:e4:ea:8c:dc:62:eb:fe:7d:9d:65:f0:4f:
ba:85:bb:ae:64:b6:52:c1:cd:23:00:1c:2e:37:c6:
3c:ca:d9:cd:6a:63:93:03:44:b0:c9:73:20:6d:cc:
0b:30:21:3a:b7:0b:eb:19:c7:26:53:23:b2:f2:e1:
90:81:da:31:f9:c7:76:40:99:aa:0c:c7:85:12:3e:
95:ca:2e:7d:5f:24:cb:62:3d:1a:2b:f3:1f:de:cc:
87:a1:1f:cc:48:05:a0:2c:c7:7a:ef:a1:c4:ca:29:
64:13:ef:ca:a8:11:95:de:fc:ee:d7:7b:f5:8c:f8:
6a:93:51:ff:c3:4c:94:c4:41:c9:0c:b3:36:95:17:
bb:b5:72:26:fc:9b:a9:13:d4:e9:7e:e3:55:1a:49:
21:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:22:B8:21:C8:12:11:1B:EF:3C:92:32:73:B8:F7:5D:B6:00:A6:ED
X509v3 Authority Key Identifier:
keyid:05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3e:49:50:a6:86:e1:d4:54:8b:9a:4d:46:36:84:46:c1:4e:
8c:5f:17:02:bb:f6:e6:fc:c6:48:ff:f5:ad:34:d6:10:04:d9:
6d:57:93:08:16:2a:5e:b4:17:06:12:30:cf:f2:53:90:25:bd:
1d:ba:c6:31:dc:9e:d2:e8:5e:4c:0d:97:34:b1:19:72:53:87:
6b:ee:99:0e:af:ce:d5:81:a6:d8:6c:19:3a:59:6c:07:bc:c4:
8c:75:54:73:b0:14:46:5e:d3:1d:22:92:07:f3:08:e0:2f:64:
24:ce:12:ae:06:bd:f7:86:ad:fe:8b:a6:64:92:00:a9:09:49:
b4:d2:fc:84:48:50:d0:b0:c1:78:d0:87:c7:97:d7:57:44:b2:
80:d7:1c:ba:ca:38:b0:35:8d:b0:b0:d5:fe:d2:ec:c3:45:b5:
e3:b3:c2:47:1a:5f:6e:fc:41:70:9a:df:5e:5c:1f:43:bd:2c:
c2:ea:82:a6:59:36:fe:8f:2e:df:1f:d2:f5:cc:72:27:17:d7:
a1:8a:f8:91:32:b6:5f:cd:9a:01:61:a7:09:b0:41:61:fe:05:
42:13:42:e8:50:6f:df:dd:2b:03:c3:52:ac:c6:bc:54:f3:54:
c9:ed:c4:42:29:7f:bd:5b:2b:7d:d1:5e:98:f2:bd:1a:14:9b:
3d:65:c0:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUI4RDcxMTAvBgNVBAUTKDA1MERDMDNCNUQ1OTQ1QTMzRUFCOTUxODE3RjE2NzlC
RDkxMEM2QUMwHhcNMjYxMDA5MDE1MTI4WhcNMjYxMDE2MDE1MTI4WjAYMRYwFAYD
VQQDEw02YWM4NDhhMC01MTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtPsxw5iyvAH9onwb3Ta2Ng0vNn5vKKLs6zGRn77VwHvi1zxi9K8AN1t84aWo
CCRLmF/oYung9euLjBhjleg+hEhEdcnwUENxPBN8lw5IrlfMz+McyGWHuvCZQkjA
JBvTP57TBSIUx970iznk6ozcYuv+fZ1l8E+6hbuuZLZSwc0jABwuN8Y8ytnNamOT
A0SwyXMgbcwLMCE6twvrGccmUyOy8uGQgdox+cd2QJmqDMeFEj6Vyi59XyTLYj0a
K/Mf3syHoR/MSAWgLMd676HEyilkE+/KqBGV3vzu13v1jPhqk1H/w0yUxEHJDLM2
lRe7tXIm/JupE9TpfuNVGkkhmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA4iuCHI
EhEb7zySMnO49122AKbtMB8GA1UdIwQYMBaAFAUNwDtdWUWjPquVGBfxZ5vZEMas
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjhENy9CNjdGMzAxQTk4
OUQxMUVEQjRFMzBGNUNDNEY5QUUwMi9CUTNBTzExWlJhTS1xNVVZRl9Gbm05a1F4
cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JRM0FPMTFaUmFNLXE1VVlGX0ZubTlrUXhxdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjhENy9CNjdGMzAxQTk4OUQxMUVEQjRFMzBGNUNDNEY5QUUwMi9CUTNBTzExWlJh
TS1xNVVZRl9Gbm05a1F4cXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfT5JUKaG4dRUi5pNRjaERsFOjF8XArv25vzGSP/1rTTWEATZbVeTCBYqXrQX
BhIwz/JTkCW9HbrGMdye0uheTA2XNLEZclOHa+6ZDq/O1YGm2GwZOllsB7zEjHVU
c7AURl7THSKSB/MI4C9kJM4Srga994at/oumZJIAqQlJtNL8hEhQ0LDBeNCHx5fX
V0SygNccuso4sDWNsLDV/tLsw0W147PCRxpfbvxBcJrfXlwfQ70swuqCplk2/o8u
3x/S9cxyJxfXoYr4kTK2X82aAWGnCbBBYf4FQhNC6FBv390rA8NSrMa8VPNUye3E
Qil/vVsrfdFemPK9GhSbPWXAzA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:25:52 2026 by rpki-client