
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft
File: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft (raw, json)
Hash identifier: 6+Fndwnflo0WQ/ER5BTukBHl6RQDhhqBFd3LYkV/Mak=
Subject key identifier: 5A:F4:E8:77:46:00:B4:67:22:49:62:1F:A9:2B:4F:E7:FA:C4:0E:C4
Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A
Certificate issuer: /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A
Certificate serial: 1252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft
Manifest number: 1247
Signing time: Thu 16 Apr 2026 17:02:52 +0000
Manifest this update: Thu 16 Apr 2026 17:02:51 +0000
Manifest next update: Thu 23 Apr 2026 17:02:51 +0000
Files and hashes: 1: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl (hash: 8adovMFSGH/4L+JrQXN7F6y0aJZmWVDmnoiOjTiqGfU=)
2: DB056F0C688011F09D2C9A15C4F9AE02.roa (hash: 1FdqXdOFWWUo+KdLUHGDbep6dZHGEbAaO0icxl7Y07Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl
rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4690 (0x1252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111F72, serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A
Validity
Not Before: Apr 16 17:02:51 2026 GMT
Not After : Apr 23 17:02:51 2026 GMT
Subject: CN=69e1163c-dda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6c:80:60:24:3c:f3:03:28:e1:ed:50:0f:46:
ea:03:9f:75:09:b2:54:00:2d:e5:88:4d:67:0a:03:
e9:b7:7a:8d:4d:46:3b:72:ab:0b:d7:36:a2:2d:bb:
4d:b8:0a:f1:df:b5:a5:82:48:f5:be:c2:81:df:63:
06:7f:f0:90:c0:c9:0a:5b:62:20:2a:18:36:89:0f:
77:bb:67:b4:7f:85:25:5b:48:29:e9:44:2a:63:3e:
19:32:41:95:c6:52:4e:ed:87:31:b5:f6:d5:6e:65:
5b:22:40:00:18:af:e4:b2:1d:5f:f7:ee:e4:74:40:
be:29:03:b0:ee:c0:89:9b:0e:65:79:6f:a9:86:4a:
c0:82:90:36:6b:0d:20:44:0b:c4:cd:ba:66:7b:68:
5f:e2:a2:44:bc:3b:c7:9f:f3:0b:e7:87:7f:93:b6:
3a:4d:17:17:b0:f9:91:6c:4e:45:13:10:35:40:d6:
fd:a2:ce:5d:06:b6:fc:34:8a:d0:67:a4:03:cc:47:
38:29:02:f9:34:86:07:f0:aa:13:83:84:40:5f:2f:
bf:b9:7d:f6:f7:92:f8:f1:f9:52:fa:9a:e4:5c:1c:
0f:00:52:93:33:95:3c:8f:ac:9b:61:a5:2d:fd:dc:
b9:e5:46:b1:6b:a8:a8:1d:27:89:fe:32:74:2c:5e:
be:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F4:E8:77:46:00:B4:67:22:49:62:1F:A9:2B:4F:E7:FA:C4:0E:C4
X509v3 Authority Key Identifier:
keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9d:07:55:08:62:85:9b:ca:6b:22:01:d5:d7:8b:0d:e2:bb:
e9:b3:54:e2:e8:ac:d2:27:d7:cc:94:69:b3:61:a9:f6:23:31:
71:fc:68:e9:1d:7d:81:4d:fe:e1:7f:cc:29:bf:37:16:d1:8f:
9a:e8:ed:86:3d:be:46:eb:db:64:d2:7e:38:f0:53:27:08:73:
6a:8b:50:a6:aa:b5:28:e5:1f:2b:30:5b:5d:a8:a2:b0:32:0f:
69:04:e7:22:66:ae:2d:75:a9:22:2e:58:2b:78:ef:b8:72:0b:
87:b2:3e:bc:c0:43:d0:94:b7:9c:7d:d2:35:0a:dc:26:6e:9c:
fb:b0:ee:44:fe:e7:0e:d2:ab:7b:c5:08:bd:17:42:73:66:d5:
a3:02:20:51:e4:eb:d6:4e:95:bc:6e:68:a2:2f:f3:d3:de:8b:
6d:f4:33:1f:62:f8:59:d8:80:e0:cb:09:27:7f:65:e9:65:3b:
cf:d6:16:b4:e4:e1:ad:38:50:39:50:37:4e:9f:9a:c2:20:f3:
d8:9f:db:c3:75:7d:b9:3a:92:d8:7f:ff:7d:9b:8f:38:f4:e1:
0a:c0:47:85:46:da:be:9e:3e:89:2e:aa:4c:49:f6:94:b3:83:
e6:7e:0d:93:76:99:70:5b:0d:b6:7c:11:ed:00:ad:9b:e8:d7:
b3:fb:fe:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:46:46 2026 by rpki-client