
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
File: bOLX0NlZgNdDytSEhphI26Elwps.mft (raw, json)
Hash identifier: hqJPBRI9NylRb20Zp37y2HewRn0rX1sV3226HHIkdmU=
Subject key identifier: 0E:39:4F:20:37:89:51:F2:06:E8:B0:BC:9B:BE:F2:0E:92:C2:61:52
Authority key identifier: 6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B
Certificate issuer: /CN=A9120E98/serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
Certificate serial: 0212
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
Manifest number: 020A
Signing time: Mon 27 Jul 2026 04:39:05 +0000
Manifest this update: Mon 27 Jul 2026 04:39:04 +0000
Manifest next update: Mon 03 Aug 2026 04:39:04 +0000
Files and hashes: 1: bOLX0NlZgNdDytSEhphI26Elwps.crl (hash: sG5HHtJq8Xkao4j+SAZJI2EtNH3CIMomc+3OqjMJ/S8=)
2: 36F3B6A86E5411EEAA31F87AC4F9AE02.roa (hash: pDTxi/uoAFHGF48GS5j39SSpSo1n7kGbSYg7ozTcf7g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl
rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120E98, serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
Validity
Not Before: Jul 27 04:39:04 2026 GMT
Not After : Aug 3 04:39:04 2026 GMT
Subject: CN=6a66e0e9-3bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cb:7f:04:6d:82:39:1c:55:ec:18:c8:b4:2a:
f1:8c:cf:e5:e9:ca:9a:c7:d5:d0:95:51:eb:34:58:
46:07:b7:24:48:94:fc:27:13:fa:09:38:f4:84:1c:
a5:7e:f2:28:97:bc:d6:69:e7:13:18:f2:d8:05:56:
40:32:d4:11:03:ca:8c:72:2a:27:ef:48:dd:67:3e:
1f:d4:7e:a1:8d:35:13:36:e5:ec:e0:0b:91:7f:9e:
43:d2:14:c4:dc:ee:83:69:78:f0:06:c5:b7:44:b3:
27:3d:7c:cf:3c:0f:dc:50:fe:2d:36:48:17:b8:11:
b5:e3:29:07:3e:ff:0e:c2:c8:30:02:1e:f0:66:69:
08:6b:27:ea:1d:8d:9d:b8:6f:3a:4f:70:da:03:2d:
aa:e1:9f:d8:c5:7a:ad:10:9c:05:d0:97:5c:ed:8f:
05:37:6c:0f:16:7f:43:bc:4e:c7:b9:80:84:6d:2f:
8e:98:f7:a4:89:12:3d:35:7e:a0:22:d8:9b:4d:6e:
bd:15:d3:73:b3:09:a6:c3:9a:28:e0:4c:82:cc:61:
65:2f:83:02:5b:8a:20:56:d1:56:1d:ea:ec:0e:44:
fc:e3:b6:6c:da:e0:39:3c:a1:c7:c1:11:f9:fa:e8:
a1:68:f8:a1:e8:8a:b7:3f:02:1f:2d:cb:23:2f:25:
5e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:39:4F:20:37:89:51:F2:06:E8:B0:BC:9B:BE:F2:0E:92:C2:61:52
X509v3 Authority Key Identifier:
keyid:6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:45:4f:4b:3c:31:a8:a5:17:62:e6:03:95:25:0b:e0:bf:58:
51:0e:06:0c:31:a8:52:30:7c:ab:53:cf:0a:aa:94:2f:24:f2:
91:96:64:f9:13:38:5d:93:13:75:ac:f7:f5:11:b2:0a:6a:5d:
40:f3:9b:83:3f:59:e5:6c:ce:30:e3:a6:f9:83:a1:5f:cd:1d:
8f:21:dd:5e:b6:29:34:ca:9d:49:54:68:c7:f4:d7:b7:91:62:
f6:1f:26:0c:73:56:c1:7e:60:22:b1:2c:f5:93:b5:db:34:a5:
20:1e:14:16:de:d3:e8:ce:93:8b:7d:cc:62:89:d6:e2:ff:bf:
29:b0:49:97:ca:a1:14:95:d9:9e:0a:dd:66:0a:49:c5:f8:95:
b7:ac:ea:43:c3:dc:f9:dc:78:f5:83:6b:d2:3a:e6:6a:b1:ee:
fb:f9:c7:c5:f7:c3:9f:c6:6d:ac:26:b0:a4:6d:78:22:aa:d3:
fa:0b:f0:5b:a3:d3:76:aa:1e:b4:3b:71:c7:43:4d:8c:bb:64:
34:eb:75:a5:c8:7e:69:3b:e7:8c:c0:93:55:72:93:3c:ca:4b:
fd:67:35:f5:d7:a8:85:8c:d2:6c:34:29:63:53:c6:59:cb:da:
83:f2:3b:9e:58:8f:44:d5:9c:8f:1f:9d:7c:82:73:3c:5e:e4:
93:b8:1f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:52:39 2026 by rpki-client