
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
File: mBpus4OnlllRIB38cbLqDUSWGxQ.mft (raw, json)
Hash identifier: NbdaHa9K3fF2KMJl8HBXMaegjM+JSCLrpTmoekSQLpE=
Subject key identifier: 83:29:F9:14:C5:56:19:D2:73:82:B6:1F:98:9F:80:6D:68:AD:F2:BA
Authority key identifier: 98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14
Certificate issuer: /CN=A9110888/serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14
Certificate serial: 0609
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
Manifest number: 0601
Signing time: Thu 16 Apr 2026 22:49:01 +0000
Manifest this update: Thu 16 Apr 2026 22:49:00 +0000
Manifest next update: Thu 23 Apr 2026 22:49:00 +0000
Files and hashes: 1: mBpus4OnlllRIB38cbLqDUSWGxQ.crl (hash: 2SqiUgbIaZiEgkio305/Ah31+rxYX+D61zeu8Dk4BZQ=)
2: B6FC3096EB1611EBB525CD6AC4F9AE02.roa (hash: AF6vWSmwUhVDsCdJYVQ22pgA0i7fPT/eXOyn+SyBVY4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl
rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1545 (0x609)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110888, serialNumber=981A6EB383A7965951201DFC71B2EA0D44961B14
Validity
Not Before: Apr 16 22:49:00 2026 GMT
Not After : Apr 23 22:49:00 2026 GMT
Subject: CN=69e1675c-c56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:f8:ab:b1:70:dc:41:36:88:9d:7d:eb:d7:
49:d9:e6:3a:5c:e2:c5:bf:2f:42:c3:21:a6:5e:a2:
a0:ed:6f:ce:fb:11:af:4c:fa:26:d4:46:51:e1:61:
99:00:df:2e:c9:07:33:dd:9b:c0:2f:9d:2f:ca:44:
32:4e:fe:0b:ac:9b:1a:ca:af:9b:62:5e:de:0a:4d:
5c:76:1e:a9:8a:41:61:7d:e9:2c:e0:65:16:58:c7:
b1:a6:ae:67:c5:26:2d:41:4a:4a:28:ca:e5:10:ce:
47:f2:1d:52:10:0f:70:f5:b3:1f:f5:f8:05:ef:a5:
0c:37:0c:e3:5d:84:79:e3:af:6f:62:b3:41:bd:90:
62:46:c5:04:24:ff:f8:ca:d1:ad:db:e5:77:59:55:
0d:17:72:e0:85:a3:26:9f:b7:66:1a:ca:45:c7:b1:
07:0b:43:5a:d9:03:cb:b6:da:4f:3e:a7:c0:e9:97:
3f:bc:33:db:ba:5b:96:92:3c:cd:d8:55:2a:69:f2:
a6:21:a8:70:82:0a:41:db:7c:b0:24:19:4c:c5:06:
c1:cd:cc:0b:a4:a1:ef:d1:3f:80:67:9f:8e:72:3c:
1d:e1:4e:1e:41:01:b9:39:79:3b:2f:df:b5:4a:48:
4c:98:03:d6:09:53:eb:3d:95:cf:db:03:8d:7e:37:
9d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:29:F9:14:C5:56:19:D2:73:82:B6:1F:98:9F:80:6D:68:AD:F2:BA
X509v3 Authority Key Identifier:
keyid:98:1A:6E:B3:83:A7:96:59:51:20:1D:FC:71:B2:EA:0D:44:96:1B:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBpus4OnlllRIB38cbLqDUSWGxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110888/6C8E3AA6EB1411EBB2D7DD68C4F9AE02/mBpus4OnlllRIB38cbLqDUSWGxQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:c0:34:44:d6:84:8e:59:8d:8d:f0:8e:74:cf:a9:86:e6:5f:
dc:dc:f7:82:61:63:12:29:61:12:1a:6d:fe:c9:32:5d:5b:c2:
62:2b:54:7d:8c:04:df:f5:3c:35:60:0c:0f:b2:e7:c6:e0:d8:
dc:fb:b5:9a:f3:79:b6:2f:36:da:63:c6:17:71:59:52:3b:f5:
05:95:eb:f1:46:d2:7d:c5:01:95:de:fd:a7:72:14:a9:3a:8e:
9a:1e:a6:71:f1:a5:b2:fd:bc:3f:b8:01:09:97:81:02:dd:b6:
64:99:f9:69:99:ce:66:2a:7d:62:f9:68:28:9a:d1:42:8a:85:
9a:72:0f:0c:82:f9:27:13:76:a9:60:23:85:20:f5:e5:e1:f0:
62:bb:69:af:cb:0f:3e:ee:18:f0:5b:c0:00:38:c5:a4:25:cd:
95:31:7e:59:05:c5:53:91:a4:32:26:20:a3:4e:b1:8c:7c:e5:
55:db:6a:b4:14:e1:7f:78:c6:f5:61:ed:12:4a:7d:5f:e6:f6:
b5:60:cc:06:27:b9:3e:07:fa:7e:28:87:c3:4d:d3:48:b0:9e:
20:e3:7c:d5:71:94:03:e1:d5:31:1f:b7:f5:fa:3a:1d:75:78:
01:96:f5:b9:ba:62:38:76:e6:d4:08:cf:fb:40:ca:5b:d7:c2:
31:7d:69:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:36:41 2026 by rpki-client