
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft
File: BHT0BqF40ixU1e9yTGssLJo7a5g.mft (raw, json)
Hash identifier: nPO2CiNJFtUdagls8qbnMotxyo1/bhCl2TmssXulmVw=
Subject key identifier: EE:A5:0E:2A:C9:F3:A2:17:8B:A1:91:59:A7:A3:1A:5F:B4:E7:97:31
Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98
Certificate issuer: /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft
Manifest number: 017A
Signing time: Sat 13 Jun 2026 04:37:55 +0000
Manifest this update: Sat 13 Jun 2026 04:37:55 +0000
Manifest next update: Sat 20 Jun 2026 04:37:55 +0000
Files and hashes: 1: BHT0BqF40ixU1e9yTGssLJo7a5g.crl (hash: lycLSPoJtHIr1IsSKR7hhJKm4PCTRxLdUNMGgH6Qbtg=)
2: B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa (hash: 2GXcGnF9Hnk+FPg8WEW+/EUmPpkB7ugokbrO1JSFDnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl
rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D60CF, serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98
Validity
Not Before: Jun 13 04:37:55 2026 GMT
Not After : Jun 20 04:37:55 2026 GMT
Subject: CN=6a2cdea3-a936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:5f:44:33:7d:c1:07:9f:0c:49:ca:20:15:
45:ab:f7:c2:75:94:ca:6c:99:54:0b:52:7a:3d:4a:
c1:26:90:a7:2d:61:17:99:e8:1e:29:0c:47:2d:5b:
f3:ce:aa:ad:b0:4c:49:c9:bf:74:8b:c5:4e:6e:80:
de:e8:64:bb:d1:fb:d5:a4:79:0e:3e:85:32:9e:7c:
43:14:48:e8:df:53:66:e3:c9:a0:a3:aa:21:dc:ae:
92:11:b5:bc:79:fb:28:4f:bf:29:14:0c:c9:c7:d2:
c0:6e:22:f0:0e:22:d0:d5:5d:1c:4f:e4:34:23:e7:
f2:ec:d4:d6:db:22:7e:b4:85:35:96:6a:2d:d8:01:
4b:aa:29:88:05:b3:49:90:46:a5:1f:ef:dc:c3:09:
6e:71:59:6e:e6:7d:ee:49:f5:1f:e5:d6:37:25:31:
d0:3b:29:8b:f4:12:5c:a6:5c:a0:10:43:f5:1e:63:
6a:08:02:d9:fa:e5:9f:6a:ab:44:12:5e:13:35:35:
8b:09:4b:24:20:5a:20:13:a1:4a:28:10:ef:c0:bf:
94:4f:71:2c:ec:3d:c2:e7:88:3a:5a:20:29:a1:bf:
3b:06:8b:53:cf:bd:54:e1:21:e8:fb:94:43:0f:ae:
ae:a1:8d:90:22:4f:c9:14:a5:27:3c:73:8f:53:07:
3c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A5:0E:2A:C9:F3:A2:17:8B:A1:91:59:A7:A3:1A:5F:B4:E7:97:31
X509v3 Authority Key Identifier:
keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a7:09:16:50:ed:a8:f9:ed:4c:14:06:e1:77:e3:fb:4e:1b:
42:b1:12:01:7b:bf:39:4a:34:1d:6a:aa:06:dc:c9:af:2c:7a:
83:fb:9b:a2:0d:a9:d7:a8:62:7a:7b:89:0c:33:29:ab:03:b5:
f0:ff:1c:50:6a:14:91:10:ea:91:89:76:b5:2d:c5:dc:32:fe:
82:ed:1f:5e:66:e1:a1:fd:c4:19:af:a0:36:de:22:b1:8f:40:
51:34:f0:8b:b4:b8:9b:1d:8b:d0:16:66:0e:b9:50:ff:8f:99:
35:93:a7:90:d0:29:13:30:a0:93:24:55:5f:af:b5:04:09:33:
f9:78:35:d0:59:4d:5a:a4:c8:37:3c:91:8e:8f:e4:41:44:15:
25:5a:15:a4:84:47:44:66:1a:81:53:dd:5a:f9:20:03:74:81:
32:fa:46:8a:c3:c5:e7:76:c5:e2:c6:bb:af:ae:dc:0d:1c:cc:
82:88:1a:87:71:04:5a:09:ca:a9:1b:99:aa:7e:3e:a0:37:b4:
ff:8d:dd:fc:d9:99:ea:1c:8e:8a:de:35:4d:0a:b2:11:15:1a:
ae:f6:97:57:b6:55:b1:36:75:17:4c:84:28:46:52:77:13:d3:
47:9f:d9:b2:f7:22:32:a0:ea:52:48:33:ca:47:a3:0f:cc:36:
4b:37:48:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:18:07 2026 by rpki-client