
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
File: BN7ay9uvpcHBT5KBe5b39QMQCig.mft (raw, json)
Hash identifier: 2LrlvaYhs6gZ8fQtqQr0v/gv1cvlXWUwy9BulzEFwc0=
Subject key identifier: D8:F6:9C:15:E8:92:BD:B3:1A:31:90:FF:18:E4:80:18:00:0B:68:27
Authority key identifier: 04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28
Certificate issuer: /CN=A912DD36/serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
Manifest number: 0192
Signing time: Mon 27 Jul 2026 06:08:33 +0000
Manifest this update: Mon 27 Jul 2026 06:08:32 +0000
Manifest next update: Mon 03 Aug 2026 06:08:32 +0000
Files and hashes: 1: BN7ay9uvpcHBT5KBe5b39QMQCig.crl (hash: C5pfiCIGeE1mc9sogdCO/KIZs5RiLvc/qm4gn60+2wE=)
2: 09EC8E16662211EFB6FA446CC4F9AE02.roa (hash: b75sAYMEIXYdDT25gmVHvykzgLoZpS+x22joZCKSsl4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.crl
rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:08:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DD36, serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28
Validity
Not Before: Jul 27 06:08:32 2026 GMT
Not After : Aug 3 06:08:32 2026 GMT
Subject: CN=6a66f5e1-f700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:34:90:7b:02:ba:f1:09:26:c7:27:25:80:
24:7e:bb:eb:cc:9c:23:64:b1:59:46:9a:e6:9e:ad:
76:d3:e7:69:f4:19:6b:09:78:3c:5f:2d:48:4f:ed:
c2:05:be:da:c0:bf:e9:ba:d9:c9:19:52:1a:43:40:
7c:1f:74:62:6e:b8:56:da:f3:ba:3e:01:28:ea:82:
b7:1f:21:43:98:ce:96:8a:51:d0:fc:b0:f1:4a:f6:
db:59:71:eb:5d:0d:0a:c4:0c:a8:57:d0:c2:d7:08:
e9:d0:53:44:f2:ca:7c:a8:01:a7:10:c9:63:43:06:
55:2d:19:9d:77:aa:aa:9d:82:77:40:06:e6:73:28:
3c:46:16:0f:fd:e4:63:c8:4f:ef:02:2b:ba:16:58:
d4:33:fd:43:1e:64:24:85:5a:39:f3:c1:1c:e6:04:
7e:31:82:da:d7:e0:92:2d:0f:34:d9:ec:36:0c:a3:
a7:7a:2c:3b:f9:47:e7:e1:fc:05:78:fe:78:fa:a1:
ac:70:83:55:2d:9a:23:ff:88:51:46:4e:67:40:db:
9a:80:44:08:51:c7:29:2d:c7:8f:3e:99:5e:07:d6:
ac:1f:8f:04:df:31:06:31:84:7c:a9:09:38:6a:6c:
3f:8d:96:93:74:63:95:f5:ed:ec:a6:78:2d:79:ee:
30:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F6:9C:15:E8:92:BD:B3:1A:31:90:FF:18:E4:80:18:00:0B:68:27
X509v3 Authority Key Identifier:
keyid:04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:66:49:13:e8:54:91:0d:00:38:fc:f1:09:d3:bd:9b:1c:91:
57:2c:f8:c6:f0:30:d4:88:71:ac:17:8d:13:62:d9:85:9f:d2:
3a:f4:12:9a:2e:25:5e:39:61:18:71:2a:9c:1f:22:f3:ff:5d:
49:f2:89:5b:d5:7f:24:97:98:3c:7d:b2:4a:67:fd:c8:2c:ac:
69:09:32:f7:21:20:34:42:05:a8:c5:d3:9e:dc:44:59:fe:55:
35:c3:a6:37:22:cf:9c:f5:1d:aa:97:19:d4:17:5c:0c:bf:71:
d8:73:d8:88:cb:60:f8:90:3e:a7:69:30:29:ee:9b:a3:86:6a:
38:a3:92:b2:15:29:be:ca:6c:14:2c:97:68:fa:78:3a:ed:8f:
58:04:d7:f3:c0:ab:55:b2:9d:b2:26:04:58:6e:78:e2:c7:21:
37:ec:46:f2:bd:97:8c:82:08:e2:cc:71:75:59:7c:57:fa:93:
fd:86:52:e8:40:6a:6b:d6:cb:ca:40:29:fc:94:52:6a:f3:6e:
89:27:40:84:3a:4d:0e:55:bc:ee:03:56:c8:26:d7:a3:e5:ec:
48:99:e3:61:78:09:f3:01:ed:49:8c:9b:e6:ac:d3:43:9d:2a:
e5:f7:97:ae:9e:89:5f:12:65:23:b0:11:57:e9:22:66:f3:8b:
ad:c6:1e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:52:58 2026 by rpki-client