
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft
File: BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json)
Hash identifier: /p3CGv4mGDtU25G9rSkGQG3JmbG6bwMkAa9p45N3Rmc=
Subject key identifier: 6E:93:2E:C8:CD:54:C7:B6:08:BB:AB:AD:61:AB:D2:C2:EE:C1:E0:0A
Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A
Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft
Manifest number: 0101
Signing time: Sat 13 Jun 2026 06:19:56 +0000
Manifest this update: Sat 13 Jun 2026 06:19:56 +0000
Manifest next update: Sat 20 Jun 2026 06:19:56 +0000
Files and hashes: 1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: nDYgNMHGMhtSm987lf8Q8No7MUYOH90wmWU98VldWTw=)
2: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: +2yUerADc2yEVbMSngexvekNdzNxgr2F5nZV/rqxi/E=)
3: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: 0Vpr4wHkrRxShWlsrRPFVmtyt2/mJk9Z/g3wYu3DTO4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl
rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A
Validity
Not Before: Jun 13 06:19:56 2026 GMT
Not After : Jun 20 06:19:56 2026 GMT
Subject: CN=6a2cf68c-05b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:1f:df:8b:4c:b4:3b:2e:78:3e:f3:62:08:
f0:ad:83:8e:03:d7:5b:b5:84:fe:fc:30:a9:3e:3b:
10:8b:72:e1:0f:c1:2a:d8:a9:68:3a:22:3b:f5:5d:
b4:07:e1:2c:9a:d7:07:49:99:fc:08:2b:62:ad:c7:
64:4c:c8:9b:25:fc:a1:fb:ff:ef:1c:66:ad:96:23:
a1:c8:2f:30:ec:7e:cd:45:14:33:98:f6:99:19:70:
c4:32:6e:61:35:2a:41:4f:5c:4d:61:c3:31:0f:2f:
e5:e4:a8:91:b8:ef:bb:06:04:36:56:f5:57:c3:cf:
0e:72:97:7c:7f:f0:d8:32:52:bd:09:b4:0a:0b:58:
3a:c9:d6:0d:3f:0f:3d:8e:ac:1b:03:51:60:a1:64:
29:90:5b:43:ad:38:5e:c8:9c:a2:80:5d:13:24:d4:
99:f3:d5:8a:18:b4:82:1b:f7:65:d2:0f:c2:0e:c4:
ae:40:21:6d:de:d9:49:d8:38:3e:8b:fb:2d:a4:3e:
34:9f:34:05:45:65:ef:59:6b:c0:b8:9a:09:b8:db:
f8:23:ee:90:62:7f:b2:fa:61:92:ef:31:62:b7:7d:
48:a6:47:3c:f7:65:22:2a:5b:0e:c1:5f:71:75:2d:
40:5b:72:f0:57:c4:a6:e8:b8:83:f5:50:40:de:93:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:93:2E:C8:CD:54:C7:B6:08:BB:AB:AD:61:AB:D2:C2:EE:C1:E0:0A
X509v3 Authority Key Identifier:
keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:58:7f:ef:86:00:31:68:9c:3c:87:2a:6e:87:9e:6f:20:24:
c6:ad:2c:9c:e4:98:d4:6f:65:b3:70:1d:44:2d:35:fe:26:51:
00:38:e5:c2:09:18:53:7e:04:9c:7f:38:f8:5b:63:7c:b3:fa:
8b:14:6e:96:74:f1:43:c6:c6:82:65:82:42:3e:2b:61:5c:2b:
a1:b7:f3:a0:4f:1c:d5:77:82:89:3d:8f:0a:a3:c8:91:8d:37:
d2:14:c8:4f:a6:e1:45:6d:ba:cc:5c:73:24:08:bd:92:6a:b6:
35:68:2c:33:88:e3:96:82:32:c4:9e:bb:6a:e1:5b:a0:45:7f:
68:53:1c:54:04:88:a3:c2:71:0a:a6:f2:45:b8:e2:07:4d:cd:
41:9f:d9:74:ab:1f:12:c5:55:ed:56:52:c5:4a:a8:bb:32:a9:
7b:ae:0f:21:08:bc:1d:b5:f5:0a:bd:80:8b:aa:32:1d:86:63:
3f:79:12:60:3b:28:8d:e3:18:ba:bd:ee:ee:88:d3:c1:f4:92:
3e:15:33:de:bc:9d:3f:84:4e:ac:c9:4f:56:ea:cb:9f:74:eb:
b7:be:24:44:c9:17:45:b9:6b:b4:c3:e8:fd:f2:c0:1e:9c:da:
3c:0b:8f:66:dd:9d:30:05:c2:e1:fd:67:e1:b4:5b:16:7e:ef:
33:db:dc:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U0QzExMTAvBgNVBAUTKDA0N0VGMUExQ0Y2NTk2NjM0OTg2Njc2NzY1NTY0OEVF
RjkxMTBDNUEwHhcNMjYwNjEzMDYxOTU2WhcNMjYwNjIwMDYxOTU2WjAYMRYwFAYD
VQQDEw02YTJjZjY4Yy0wNWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAucIf34tMtDsueD7zYgjwrYOOA9dbtYT+/DCpPjsQi3LhD8Eq2KloOiI79V20
B+EsmtcHSZn8CCtircdkTMibJfyh+//vHGatliOhyC8w7H7NRRQzmPaZGXDEMm5h
NSpBT1xNYcMxDy/l5KiRuO+7BgQ2VvVXw88Ocpd8f/DYMlK9CbQKC1g6ydYNPw89
jqwbA1FgoWQpkFtDrTheyJyigF0TJNSZ89WKGLSCG/dl0g/CDsSuQCFt3tlJ2Dg+
i/stpD40nzQFRWXvWWvAuJoJuNv4I+6QYn+y+mGS7zFit31Ipkc892UiKlsOwV9x
dS1AW3LwV8Sm6LiD9VBA3pNkZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG6TLsjN
VMe2CLurrWGr0sLuweAKMB8GA1UdIwQYMBaAFAR+8aHPZZZjSYZnZ2VWSO75EQxa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRDMS8zNjQ0ODg3QUU5
QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxtTkpobWRuWlZaSTd2a1JE
Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JIN3hvYzlsbG1OSmhtZG5aVlpJN3ZrUkRGby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTRDMS8zNjQ0ODg3QUU5QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxt
TkpobWRuWlZaSTd2a1JERm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk1h/74YAMWicPIcqboeebyAkxq0snOSY1G9ls3AdRC01/iZRADjlwgkYU34E
nH84+FtjfLP6ixRulnTxQ8bGgmWCQj4rYVwrobfzoE8c1XeCiT2PCqPIkY030hTI
T6bhRW26zFxzJAi9kmq2NWgsM4jjloIyxJ67auFboEV/aFMcVASIo8JxCqbyRbji
B03NQZ/ZdKsfEsVV7VZSxUqouzKpe64PIQi8HbX1Cr2Ai6oyHYZjP3kSYDsojeMY
ur3u7ojTwfSSPhUz3rydP4ROrMlPVurLn3Trt74kRMkXRblrtMPo/fLAHpzaPAuP
Zt2dMAXC4f1n4bRbFn7vM9vcWw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:11:41 2026 by rpki-client