
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
File: bhQyTH_rm8iZLUocPkWehqPxjuE.mft (raw, json)
Hash identifier: Juol9CPSfD8ebFr6Z3N9H+ik/WV7Df3vn86PI2PpugU=
Subject key identifier: C9:7B:D4:19:DF:2A:E9:3A:76:66:A4:F7:51:E4:7C:4A:2F:20:3E:A5
Authority key identifier: 6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1
Certificate issuer: /CN=A91CDC08/serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1
Certificate serial: 48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
Manifest number: 46
Signing time: Sat 13 Jun 2026 08:29:46 +0000
Manifest this update: Sat 13 Jun 2026 08:29:46 +0000
Manifest next update: Sat 20 Jun 2026 08:29:46 +0000
Files and hashes: 1: bhQyTH_rm8iZLUocPkWehqPxjuE.crl (hash: hGpK6bOXv6WI7wZbyMP5FBCTjb6oyAKwZVl5bseSMuE=)
2: 2508F7B8001611F18F2C9137416F56BC.roa (hash: kk4e8+otr3vEuo88eNfz1XFH7SDaG9Z2aCSEpZsnIgI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.crl
rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDC08, serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1
Validity
Not Before: Jun 13 08:29:46 2026 GMT
Not After : Jun 20 08:29:46 2026 GMT
Subject: CN=6a2d14fa-dd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:1d:03:1c:94:88:45:a9:d4:43:42:f8:51:
6e:6d:34:7c:3c:e3:b5:cf:50:50:e4:ee:1d:4e:c5:
5c:5c:61:d9:f0:af:4b:34:4b:09:90:ed:83:b8:17:
d7:36:9b:cf:4a:0e:af:7c:86:f2:5d:c1:1b:4b:b5:
e8:d4:3a:84:f9:59:90:97:dc:31:8a:8b:b1:67:1c:
1d:16:b0:fd:10:b1:1e:21:7f:0c:b3:cb:d0:f9:81:
86:a3:78:67:da:73:ed:cb:d1:d8:31:fd:e1:b9:a2:
cc:d1:29:24:c4:42:3a:fd:09:b0:20:5b:ba:3b:a8:
53:63:f5:f0:3f:a8:89:0a:4b:ed:c0:a7:42:dc:c5:
28:9e:f1:75:65:ed:10:cd:10:18:f6:77:21:80:d5:
5b:81:68:17:83:4b:66:77:f3:2e:8c:b2:23:db:02:
9a:c1:a4:f7:59:6c:50:c0:f6:f9:fc:e8:b8:7f:a2:
b0:41:8d:50:8e:26:e7:33:07:4a:99:53:90:b3:2c:
88:cf:94:56:20:75:c5:1e:92:d6:20:e4:3d:5b:40:
54:27:7c:e2:fe:96:b7:40:45:3d:de:73:4a:a7:de:
59:a3:a0:19:67:33:93:b6:84:1f:eb:9c:2c:e0:27:
5d:7e:c7:44:de:86:06:4b:f6:d1:81:d0:66:31:aa:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7B:D4:19:DF:2A:E9:3A:76:66:A4:F7:51:E4:7C:4A:2F:20:3E:A5
X509v3 Authority Key Identifier:
keyid:6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:78:ea:c0:85:5c:af:bf:7d:36:d0:35:29:90:68:0b:5d:39:
37:69:f7:9e:e3:10:80:39:2a:1a:47:a7:1a:de:2d:62:ed:f5:
dc:7d:9d:1e:7a:e1:9e:89:fd:80:d5:85:33:52:56:25:f8:da:
d5:e9:0a:a5:e5:de:ce:0a:76:3f:84:4b:2e:8e:97:85:f8:91:
fb:c6:60:a9:0d:1f:00:18:79:ea:a9:f4:bf:b6:7c:64:b9:e7:
67:b3:dc:b1:ea:4d:9a:24:89:aa:01:97:64:87:8a:80:fe:d5:
37:39:b2:67:be:6b:da:81:28:1c:e5:70:36:18:84:ea:f2:74:
4c:c1:a8:1d:a2:95:41:53:1d:a5:6e:8e:d1:bf:a3:84:cc:89:
96:fe:d1:bb:f5:57:55:8a:03:79:1a:8a:63:64:25:f0:0e:4f:
0f:8c:cf:ec:5b:85:91:72:51:16:e6:c2:29:a2:4a:51:bf:cf:
cb:48:98:38:d1:1c:7d:dd:3f:96:44:51:89:9f:df:7a:80:fa:
19:25:ff:c7:e3:29:ed:6c:bc:27:3d:56:2b:cb:00:e9:7e:b7:
2a:bf:57:3b:8c:3c:56:22:22:1d:3e:49:c2:d0:27:dd:5e:ad:
b7:00:cb:ee:93:86:03:da:13:33:5a:17:e8:8e:51:23:5e:84:
85:da:c5:2d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
REMwODExMC8GA1UEBRMoNkUxNDMyNEM3RkVCOUJDODk5MkQ0QTFDM0U0NTlFODZB
M0YxOEVFMTAeFw0yNjA2MTMwODI5NDZaFw0yNjA2MjAwODI5NDZaMBgxFjAUBgNV
BAMTDTZhMmQxNGZhLWRkNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzUx0DHJSIRanUQ0L4UW5tNHw847XPUFDk7h1OxVxcYdnwr0s0SwmQ7YO4F9c2
m89KDq98hvJdwRtLtejUOoT5WZCX3DGKi7FnHB0WsP0QsR4hfwyzy9D5gYajeGfa
c+3L0dgx/eG5oszRKSTEQjr9CbAgW7o7qFNj9fA/qIkKS+3Ap0LcxSie8XVl7RDN
EBj2dyGA1VuBaBeDS2Z38y6MsiPbAprBpPdZbFDA9vn86Lh/orBBjVCOJuczB0qZ
U5CzLIjPlFYgdcUektYg5D1bQFQnfOL+lrdART3ec0qn3lmjoBlnM5O2hB/rnCzg
J11+x0TehgZL9tGB0GYxqltVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyXvUGd8q
6Tp2ZqT3UeR8Si8gPqUwHwYDVR0jBBgwFoAUbhQyTH/rm8iZLUocPkWehqPxjuEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQzA4L0YzRTY1N0ZDMDAx
NTExRjE5NUQ1OEFENDQwNkY1NkJDL2JoUXlUSF9ybThpWkxVb2NQa1dlaHFQeGp1
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYmhReVRIX3JtOGlaTFVvY1BrV2VocVB4anVFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE
QzA4L0YzRTY1N0ZDMDAxNTExRjE5NUQ1OEFENDQwNkY1NkJDL2JoUXlUSF9ybThp
WkxVb2NQa1dlaHFQeGp1RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBYeOrAhVyvv3020DUpkGgLXTk3afee4xCAOSoaR6ca3i1i7fXcfZ0eeuGeif2A
1YUzUlYl+NrV6Qql5d7OCnY/hEsujpeF+JH7xmCpDR8AGHnqqfS/tnxkuedns9yx
6k2aJImqAZdkh4qA/tU3ObJnvmvagSgc5XA2GITq8nRMwagdopVBUx2lbo7Rv6OE
zImW/tG79VdVigN5GopjZCXwDk8PjM/sW4WRclEW5sIpokpRv8/LSJg40Rx93T+W
RFGJn996gPoZJf/H4yntbLwnPVYrywDpfrcqv1c7jDxWIiIdPknC0CfdXq23AMvu
k4YD2hMzWhfojlEjXoSF2sUt
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:08:04 2026 by rpki-client