
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
File: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft (raw, json)
Hash identifier: vapt6hckYMfEn9F328bHF62Zy8vfVpnEEG/n71qFycY=
Subject key identifier: A8:65:16:B1:C1:35:72:87:B9:B6:03:E5:8D:A3:A4:2E:B0:E8:BE:B9
Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
Certificate issuer: /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Certificate serial: 022D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
Manifest number: 021D
Signing time: Fri 25 Sep 2026 03:00:11 +0000
Manifest this update: Fri 25 Sep 2026 03:00:11 +0000
Manifest next update: Fri 02 Oct 2026 03:00:11 +0000
Files and hashes: 1: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl (hash: o9umP5wnq1foLyE8nqwzqhHaNeUEtSS2gYSAbsd30z4=)
2: 5A44099895C111EE951C9E4CC4F9AE02.roa (hash: DkdcatwLmN2ONkPOpKETQhUgaZX36ttB9+kcADlT4Z4=)
3: 342A14D6F0E911EEAAAD9A6CC4F9AE02.roa (hash: zAWlrytMBb7aOvLXuHLVnYaYJEpV8eVWaLPA029dJCU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl
rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913939F, serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Validity
Not Before: Sep 25 03:00:11 2026 GMT
Not After : Oct 2 03:00:11 2026 GMT
Subject: CN=6ab5e3bb-7630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:f9:7c:2d:59:41:6a:78:52:cf:aa:47:fd:
90:a0:d8:49:a0:21:a1:52:e7:35:21:28:89:0b:cc:
08:f2:c7:6d:a7:4b:08:17:e8:94:35:61:b2:76:f0:
36:d0:c1:55:3f:11:14:f4:d4:48:8e:97:59:ae:e2:
d8:bd:38:a8:6a:55:f8:30:c6:d8:a6:78:27:ad:ee:
1b:73:70:80:43:05:1a:d2:36:05:a4:68:9b:c8:61:
5e:f5:de:b4:a8:3d:f2:4a:f6:5e:77:38:b9:f3:d9:
f1:f6:ce:65:93:52:6a:75:f8:2b:5a:1a:d0:40:66:
38:13:9c:15:20:03:b8:3e:27:66:c6:68:f2:c4:61:
de:3b:27:30:60:fc:1d:e4:16:74:0f:17:78:c9:d1:
8b:a8:bf:a6:ff:dd:65:3c:17:e4:35:30:b3:20:fa:
f6:54:c8:78:1d:a5:ae:6a:6f:22:91:69:9f:d4:33:
b8:bc:67:22:40:00:ea:e5:76:89:82:1d:37:ec:2b:
38:64:77:e0:c5:7f:7b:e5:44:2e:5e:24:ba:9e:9f:
13:85:d3:27:07:cf:c0:a4:b7:fe:0f:66:2b:7b:10:
43:bf:46:32:06:1e:05:dc:0d:07:41:57:45:61:e9:
83:57:31:0f:2b:be:8c:59:93:40:2b:4d:20:00:71:
39:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:65:16:B1:C1:35:72:87:B9:B6:03:E5:8D:A3:A4:2E:B0:E8:BE:B9
X509v3 Authority Key Identifier:
keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:f3:d9:48:7b:17:95:1c:44:31:05:d1:a0:b8:37:ee:f9:17:
0c:77:e5:64:8a:2b:14:07:90:47:dc:09:5c:79:12:d3:a3:ac:
c9:80:d8:10:6c:a5:0f:a8:c0:60:f7:2f:b0:e7:60:96:4c:d8:
cb:6e:71:fc:5a:46:e1:16:d8:75:fd:b7:71:c9:49:d7:f1:d3:
1c:ab:bc:77:cc:81:a8:f2:8a:89:c2:cb:e3:59:95:fc:af:46:
f9:d9:2e:41:ae:52:02:80:24:65:bc:b5:d8:13:04:00:9c:ff:
81:39:bc:2b:82:61:9d:f5:9c:94:dc:51:de:33:f1:4d:87:ba:
40:99:20:99:c6:b9:3c:d6:9c:8a:88:42:78:a0:12:88:2b:09:
5c:21:5c:c8:d0:cf:53:fb:03:cb:44:30:2f:38:bd:7f:28:f2:
0e:69:7f:f6:0c:a9:07:39:96:31:1e:a3:a5:c2:dc:26:fc:f5:
e8:c6:a4:f6:12:0c:87:45:32:07:29:cf:81:0d:52:d1:53:f8:
ea:1d:b8:59:ae:e0:aa:d2:31:f0:65:2a:c9:79:30:3d:54:8b:
57:a9:8c:bd:5f:65:0a:82:f9:d5:b1:96:20:b6:24:d4:ad:59:
ed:26:3d:92:8d:4c:63:4f:2b:d9:d0:10:2a:97:81:de:0e:75:
36:8f:88:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzkzOUYxMTAvBgNVBAUTKDA3MUUyNTg1NUU2QTM1QjNEODA4RkY3QTYwQTA4Qjg3
ODEzNTYzNjIwHhcNMjYwOTI1MDMwMDExWhcNMjYxMDAyMDMwMDExWjAYMRYwFAYD
VQQDEw02YWI1ZTNiYi03NjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAycP5fC1ZQWp4Us+qR/2QoNhJoCGhUuc1ISiJC8wI8sdtp0sIF+iUNWGydvA2
0MFVPxEU9NRIjpdZruLYvTioalX4MMbYpngnre4bc3CAQwUa0jYFpGibyGFe9d60
qD3ySvZedzi589nx9s5lk1JqdfgrWhrQQGY4E5wVIAO4PidmxmjyxGHeOycwYPwd
5BZ0Dxd4ydGLqL+m/91lPBfkNTCzIPr2VMh4HaWuam8ikWmf1DO4vGciQADq5XaJ
gh037Cs4ZHfgxX975UQuXiS6np8ThdMnB8/ApLf+D2YrexBDv0YyBh4F3A0HQVdF
YemDVzEPK76MWZNAK00gAHE5HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKhlFrHB
NXKHubYD5Y2jpC6w6L65MB8GA1UdIwQYMBaAFAceJYVeajWz2Aj/emCgi4eBNWNi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTM5Ri8yMkU1RjY1NjhB
QzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5iUFlDUDk2WUtDTGg0RTFZ
MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J4NGxoVjVxTmJQWUNQOTZZS0NMaDRFMVkySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OTM5Ri8yMkU1RjY1NjhBQzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5i
UFlDUDk2WUtDTGg0RTFZMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ/PZSHsXlRxEMQXRoLg37vkXDHflZIorFAeQR9wJXHkS06OsyYDYEGylD6jA
YPcvsOdglkzYy25x/FpG4RbYdf23cclJ1/HTHKu8d8yBqPKKicLL41mV/K9G+dku
Qa5SAoAkZby12BMEAJz/gTm8K4JhnfWclNxR3jPxTYe6QJkgmca5PNaciohCeKAS
iCsJXCFcyNDPU/sDy0QwLzi9fyjyDml/9gypBzmWMR6jpcLcJvz16Mak9hIMh0Uy
BynPgQ1S0VP46h24Wa7gqtIx8GUqyXkwPVSLV6mMvV9lCoL51bGWILYk1K1Z7SY9
ko1MY08r2dAQKpeB3g51No+IPw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:07:23 2026 by rpki-client