
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
File: bu53G7POfpjbOWDE2C90Kiz36Ek.mft (raw, json)
Hash identifier: 2Kfr8RN2uje/iyc83xYrBMBZG21qwjvc6lN5szBp0KQ=
Subject key identifier: C5:82:91:43:D5:21:46:A3:2F:42:2A:B2:5A:14:02:E0:9C:8B:44:00
Authority key identifier: 6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49
Certificate issuer: /CN=A9118827/serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849
Certificate serial: 05BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
Manifest number: 05B7
Signing time: Mon 27 Jul 2026 00:00:12 +0000
Manifest this update: Mon 27 Jul 2026 00:00:12 +0000
Manifest next update: Mon 03 Aug 2026 00:00:12 +0000
Files and hashes: 1: bu53G7POfpjbOWDE2C90Kiz36Ek.crl (hash: ucE+9qvO+N72Dw1rZ/OONVD/uRBQUlg7j8noKfzwgRE=)
2: 95D9A9461BEC11EC97B39812C4F9AE02.roa (hash: v0rJzZLI+1O5nfOP2tDFakvguyT8MUXLjwiVOqN97W8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl
rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1470 (0x5be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118827, serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849
Validity
Not Before: Jul 27 00:00:12 2026 GMT
Not After : Aug 3 00:00:12 2026 GMT
Subject: CN=6a669f8c-a4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:25:3b:53:42:b2:ee:91:65:0f:11:ae:75:
9f:6a:ae:e1:b9:4d:f4:bb:e1:19:b2:76:63:58:fe:
80:63:57:58:81:1d:70:7f:bd:46:f1:df:4f:52:6a:
42:43:78:64:f8:24:ec:64:9a:18:aa:ff:4b:6a:9f:
4b:7c:dd:1d:54:5e:3e:01:34:24:b8:c2:5f:14:75:
a8:06:cf:7e:05:60:71:85:a5:66:52:89:30:a9:0b:
76:8a:65:06:bb:61:3c:7b:6f:a1:31:83:35:a1:f2:
72:31:f3:7c:61:fb:a9:71:b2:75:b2:2b:e9:af:4a:
3f:e9:d6:70:ff:5b:e8:67:f1:f5:b9:0e:61:59:68:
58:7d:ca:73:a1:7f:51:0b:87:37:13:54:43:cd:e2:
8d:1d:76:26:93:e8:c0:0f:4a:16:39:5f:f5:20:b8:
6d:a2:6d:0b:b5:31:66:68:aa:8c:fd:0d:54:ca:94:
67:da:63:37:95:85:27:1c:08:cd:97:37:4c:94:34:
07:7c:df:14:81:87:72:14:70:6b:59:4e:9b:2e:f4:
4d:34:59:38:24:10:ac:85:a1:1d:47:61:af:73:23:
5a:fc:dd:30:9f:33:33:1b:3d:58:ee:a3:f7:08:1f:
9c:36:18:58:1f:15:3d:f9:06:34:56:49:b8:98:7c:
bb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:82:91:43:D5:21:46:A3:2F:42:2A:B2:5A:14:02:E0:9C:8B:44:00
X509v3 Authority Key Identifier:
keyid:6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:c9:b8:a5:26:11:b6:9b:44:e8:ce:66:a4:0f:00:43:d7:68:
41:eb:ff:5e:ef:3c:39:30:a1:d5:5e:53:26:45:a7:f2:ef:f6:
18:a0:8e:39:a0:f4:b4:fd:70:7a:cc:a1:83:cc:a4:e5:25:bd:
3a:c8:3f:03:c3:ac:4b:f1:53:b2:66:de:ed:33:2e:61:e0:8a:
4c:38:6d:8d:16:23:2d:f1:c4:2d:3c:cc:e0:28:a4:38:8b:46:
35:50:84:a3:ae:2c:01:13:32:4b:0a:ca:b7:87:56:cc:0b:72:
5b:61:0d:99:62:27:9a:56:b6:24:4c:30:b7:fc:3c:1b:1b:03:
0e:60:2e:e3:1e:cc:e8:4f:02:f3:9f:22:e6:8d:ce:33:cb:e9:
34:94:ca:fe:8e:8e:73:6e:26:0c:e3:aa:de:ea:25:2a:44:eb:
fb:69:fc:f6:a6:ba:82:56:6b:40:f9:56:3a:86:54:64:35:e3:
f8:b1:36:01:40:43:60:4f:f2:cc:54:e8:de:af:a1:9e:b3:53:
5f:bf:1b:57:9b:b3:e3:6c:c3:a3:ae:95:29:c3:2a:24:32:88:
27:c2:9a:0d:f4:35:e3:c1:7f:f3:fa:3b:d4:46:db:77:4d:6b:
ff:62:fc:97:fd:d2:6a:2b:d2:b5:5f:82:dd:9f:7e:a0:ab:b5:
3e:30:05:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:26 2026 by rpki-client