
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
File: bAgKK6farJXU2TSIqQAVGuOlnfg.mft (raw, json)
Hash identifier: vctLJ9DWxG8ZTG+m7xumn3X/BvyGsnOG760Jd4Zl5iE=
Subject key identifier: B5:A7:7B:F5:7E:6F:BA:DA:4A:C6:F9:E8:77:BA:60:D8:CB:E3:49:8B
Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
Certificate issuer: /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
Certificate serial: 056D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
Manifest number: 053E
Signing time: Thu 16 Apr 2026 23:29:09 +0000
Manifest this update: Thu 16 Apr 2026 23:29:08 +0000
Manifest next update: Thu 23 Apr 2026 23:29:08 +0000
Files and hashes: 1: bAgKK6farJXU2TSIqQAVGuOlnfg.crl (hash: 7OE3pjd1xoA4TZSp+x37Yu+808LxKpyChsnro/KvCag=)
2: AD5EE696C0A711EE97A2E984C4F9AE02.roa (hash: xO4jf+JyUgEQsGfWP95No44tQyp4HSFyCOjq3yFfjlg=)
3: CCF1692CC85111EFAEC7B83FC4F9AE02.roa (hash: NfEl2M9viHr9ZnsnHIDf5csYAgyWaV6Q5tcxu5W3uDs=)
4: 51FD604CE08711EFA06D6434C4F9AE02.roa (hash: IugZW+axMJZbl0U78vE/N2ZOXI++iRAw3j3YxhxPsIc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl
rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1389 (0x56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
Validity
Not Before: Apr 16 23:29:08 2026 GMT
Not After : Apr 23 23:29:08 2026 GMT
Subject: CN=69e170c5-c830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:53:f5:79:e0:ca:76:9c:94:e6:e2:c3:a6:
ea:7a:4b:c2:b4:96:5a:b0:ef:2d:8c:f2:b3:bb:55:
8d:0e:99:38:10:c8:56:ba:db:89:77:10:da:5d:e9:
e2:5f:04:e9:3b:28:42:e2:72:54:9b:bb:8f:e1:b2:
17:00:38:27:e3:b9:1f:df:04:1b:f5:17:f0:58:a9:
c0:59:e2:55:f0:d6:e5:64:d2:8c:d3:50:7f:41:07:
87:26:c0:3f:98:89:65:39:08:ac:a3:c5:e6:49:7e:
a6:57:37:59:0a:92:5a:1e:ef:1c:3f:31:25:92:57:
f2:80:20:5a:82:63:25:4a:08:18:eb:68:77:3b:02:
ba:14:36:ac:ed:7e:c5:c1:65:ad:c2:be:7c:3a:bd:
02:a7:5a:8f:a7:04:f3:44:d2:0b:03:65:32:48:af:
76:17:59:5b:2d:17:2c:7f:40:29:46:68:42:8c:0f:
c4:97:65:b0:8d:4f:04:2b:8b:f4:98:c4:93:68:30:
59:8d:43:80:24:b0:59:ab:09:16:8e:04:e1:4b:08:
58:33:88:33:be:7c:b7:05:8c:a3:7e:f9:79:80:83:
81:d5:15:15:51:9b:a2:98:3d:b8:b5:b6:ce:18:8e:
2e:12:be:9d:79:ba:06:86:4c:bb:14:06:fe:39:f2:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A7:7B:F5:7E:6F:BA:DA:4A:C6:F9:E8:77:BA:60:D8:CB:E3:49:8B
X509v3 Authority Key Identifier:
keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bb:f0:e9:c3:36:ed:9d:8b:24:da:91:09:76:89:c5:2f:7a:
31:f2:ab:51:34:d6:b7:1c:b9:2c:b5:29:4b:89:cd:97:ef:a2:
94:58:64:79:c1:74:ac:fc:2b:50:c8:fe:84:14:f1:e8:57:26:
7b:db:e7:a4:52:58:46:1c:65:80:bc:81:c6:26:36:6d:1d:2c:
0f:71:f4:38:e6:00:fc:0f:e4:33:7e:a5:71:a8:bf:80:b4:72:
fa:88:42:e7:02:31:b4:32:7d:e8:98:5e:b3:85:ec:41:e2:5d:
f5:6e:c3:ff:89:d7:78:a4:43:a2:5e:06:8b:68:40:fd:f4:cf:
85:fa:a8:7d:fe:fb:b5:a8:2a:db:35:c2:6d:f5:77:f4:6c:e0:
b6:4c:57:cf:14:3e:78:3f:2b:e0:ac:ca:fc:38:fd:3c:c6:f8:
90:7f:a8:e1:b8:aa:50:ea:0c:fa:97:9d:c8:4c:63:f3:be:13:
ba:66:05:e8:53:77:0c:8d:25:4e:14:0a:f8:9c:e6:71:5f:54:
90:c6:b0:30:73:c0:51:1b:22:7c:47:85:33:a3:1d:1a:d3:6c:
7a:46:c9:e8:33:4a:f6:e4:28:53:2a:e5:45:1f:2b:69:85:b1:
2d:94:69:10:3f:c2:28:c5:90:99:f3:14:36:80:31:d4:bb:f6:
f5:d1:c1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:11 2026 by rpki-client