
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
File: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json)
Hash identifier: rbJxbBzlF1MS0+ytKWPRrQ56AHfG2S7T47PdFdbg/88=
Subject key identifier: F6:0E:36:97:8A:0B:36:43:FB:99:AB:CD:8B:8A:68:9A:CD:15:54:8A
Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6
Certificate issuer: /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
Certificate serial: 023E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
Manifest number: 0232
Signing time: Fri 17 Apr 2026 02:22:05 +0000
Manifest this update: Fri 17 Apr 2026 02:22:04 +0000
Manifest next update: Fri 24 Apr 2026 02:22:04 +0000
Files and hashes: 1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: jLO/+Qm2Atj01Rcp5ULa+sw8Y6EbOnQk1WSGs7/eLnU=)
2: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: yifIUTqbn7Wd/uULyvr6BJeOjGF176Fhn2BVhJf8YA0=)
3: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: /jnNf6yhC1u/KapU+QnPIqPvCzJZYcUOSV+8kDzVszA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl
rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126B7C, serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
Validity
Not Before: Apr 17 02:22:04 2026 GMT
Not After : Apr 24 02:22:04 2026 GMT
Subject: CN=69e1994d-c47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:03:19:32:bc:dd:fc:6d:65:c6:a4:b1:7a:df:
36:e1:97:53:9e:a4:08:80:e2:8a:33:cd:17:a5:2d:
31:ee:0e:b5:f4:da:8f:92:0d:06:0a:41:7e:34:f7:
31:a6:0c:52:c0:1e:23:ba:df:93:d7:5c:05:c0:b5:
41:cf:e5:10:3a:ae:49:65:19:fc:0b:60:ce:d3:8c:
e6:13:0d:58:33:38:30:ba:7a:2d:03:c2:19:d1:3c:
6d:cb:40:46:ca:8c:a6:85:fc:29:55:62:ef:67:44:
2e:c1:d7:22:af:25:29:74:31:ac:6b:a6:9a:54:5d:
7c:a1:d8:c9:7c:62:61:04:b8:d7:46:6b:24:4a:76:
af:8a:5e:a8:ec:a5:e7:f1:77:94:57:81:b3:0f:22:
67:38:da:cd:c0:4d:74:dd:98:2d:b2:8c:d0:d5:e6:
a6:d6:eb:68:eb:86:19:fb:fa:c1:15:c8:ad:9e:ff:
95:53:de:cd:d3:4e:27:e0:88:43:2b:bc:a1:3e:30:
80:13:4c:2b:5c:9c:f3:9d:c7:90:c0:cc:68:37:4b:
f2:26:ca:e0:44:60:d1:9b:38:12:6e:29:35:a6:21:
a1:5e:88:7b:63:17:4d:07:a6:63:35:ed:36:1f:c2:
c5:bc:41:14:be:47:26:9b:ac:6e:b2:0b:4b:e9:b9:
5f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0E:36:97:8A:0B:36:43:FB:99:AB:CD:8B:8A:68:9A:CD:15:54:8A
X509v3 Authority Key Identifier:
keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:bd:25:e5:40:ea:d8:8e:7e:4d:6e:9a:14:06:4f:dd:0b:e5:
89:00:d9:4e:5f:59:73:37:f3:58:84:97:77:77:6a:c5:2c:89:
32:db:b2:17:e2:65:1f:90:af:ff:e4:e8:a4:42:28:74:19:40:
ad:fc:8e:e5:35:dd:c8:29:ae:78:92:b1:e3:54:e9:11:5e:12:
ac:65:85:6f:5e:80:d3:4c:d7:e9:61:d5:db:3d:bc:0e:3b:b7:
80:6c:d2:86:94:6b:50:71:07:54:ae:6a:fe:2f:2d:00:1a:63:
46:19:9c:62:6a:b7:87:b6:29:4e:df:5d:dd:5b:85:f4:53:89:
87:62:aa:79:88:bb:c5:25:78:f8:59:cc:ca:0a:1a:a2:59:16:
e1:90:f1:6c:43:0a:b4:ae:4e:ae:29:8b:ad:a5:77:0e:da:ef:
34:f1:fd:00:3d:eb:be:3b:77:b3:5f:cd:d4:ed:89:99:cd:62:
72:d8:76:09:f0:ef:93:e6:67:c8:e8:09:fa:fb:48:9b:68:e4:
e5:1b:24:c4:c0:4b:9f:45:0d:37:bb:c2:b4:25:34:97:91:7e:
45:54:3e:77:f5:3b:ef:07:a6:98:d9:53:5d:f0:42:cf:ac:5b:
ec:ee:5d:ff:fd:25:72:c3:22:ba:d0:ee:cf:59:77:76:3b:7e:
59:f1:73:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:29:50 2026 by rpki-client