
$ rpki-client -vvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
File: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft (raw, json)
Hash identifier: yE896qaFcTyi4y3HWUK3dRhGYJ739axnh3LeWRdhHD8=
Subject key identifier: B9:D1:39:45:84:E7:65:BB:2B:69:B8:28:2B:EA:F2:A6:17:B1:55:55
Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
Certificate issuer: /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Certificate serial: 01DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
Manifest number: 01CC
Signing time: Fri 17 Apr 2026 03:32:08 +0000
Manifest this update: Fri 17 Apr 2026 03:32:07 +0000
Manifest next update: Fri 24 Apr 2026 03:32:07 +0000
Files and hashes: 1: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl (hash: pmhQnkWS8YZvV2XO77aCDnDQSN71ryvQ5RK1DevIup4=)
2: 5A44099895C111EE951C9E4CC4F9AE02.roa (hash: DkdcatwLmN2ONkPOpKETQhUgaZX36ttB9+kcADlT4Z4=)
3: 342A14D6F0E911EEAAAD9A6CC4F9AE02.roa (hash: zAWlrytMBb7aOvLXuHLVnYaYJEpV8eVWaLPA029dJCU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl
rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913939F, serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Validity
Not Before: Apr 17 03:32:07 2026 GMT
Not After : Apr 24 03:32:07 2026 GMT
Subject: CN=69e1a9b7-e922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6c:92:61:17:0f:c3:65:dc:e6:a8:5c:d2:3a:
ce:ed:06:32:bf:87:7f:2f:d3:c7:98:66:ef:b4:f1:
f1:a4:b3:d6:9b:1f:49:9b:50:d5:47:d8:f9:c3:5e:
56:d4:f3:98:47:91:e5:0e:50:db:1b:96:16:13:b9:
05:6a:e7:62:2b:34:26:38:d9:52:e7:87:51:ac:36:
91:bf:41:97:cd:5b:22:91:ba:8e:9a:ee:9e:a9:b2:
36:1f:bb:28:fc:91:ae:7d:d9:1a:dd:75:63:88:ef:
7c:ea:a0:af:89:74:b9:c6:45:be:b5:62:74:47:8f:
35:62:ce:9e:99:77:58:5a:58:67:50:87:59:a1:96:
12:b8:e6:7d:52:8d:3c:7c:26:a7:af:ad:02:a5:f2:
b6:99:ba:86:f5:88:33:aa:ea:3b:26:35:c9:4f:37:
52:93:fb:f2:57:90:eb:8f:6f:dc:f9:5e:97:9a:f7:
0b:98:5e:0a:e0:f1:a1:90:78:7c:08:49:74:a3:38:
d3:36:6b:6e:73:c0:07:c7:83:26:c2:a6:f1:a1:66:
4f:43:c7:1c:13:f7:8f:08:80:d3:b0:f1:01:cf:07:
32:1b:ef:f7:fa:0f:6b:a0:da:cb:56:23:3b:17:98:
67:40:9a:d3:d9:69:96:3f:22:d1:11:03:53:f8:61:
87:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D1:39:45:84:E7:65:BB:2B:69:B8:28:2B:EA:F2:A6:17:B1:55:55
X509v3 Authority Key Identifier:
keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:88:0f:59:1f:27:c3:97:6e:ea:6f:58:26:1d:f5:12:90:c3:
2d:1f:79:f1:ac:1b:cd:e4:1d:bd:0d:2e:06:dc:0b:05:7e:c1:
e9:c0:77:26:98:cf:79:49:75:bb:94:b7:30:ff:1a:85:bf:a4:
bd:4d:8a:72:64:ce:65:53:49:97:04:c0:ab:7f:0e:56:76:7a:
77:1c:3b:db:2a:d5:78:82:5d:78:bd:21:03:fc:69:05:42:68:
21:88:57:11:10:e6:6b:c3:ac:e3:f1:cd:fd:e9:ae:ed:63:95:
df:c1:fb:40:27:8b:db:60:67:4a:e3:59:f0:b4:18:fd:8e:19:
38:e6:93:dd:b5:d1:0b:93:12:60:13:7a:4e:29:1e:cd:89:db:
3e:a6:fd:64:2a:74:f7:a7:f3:14:b9:0a:c1:c9:a5:f7:8a:9c:
c4:fd:5b:67:a7:09:c5:75:3f:4e:fe:ea:29:79:2f:2e:b1:e2:
0d:18:29:07:5d:10:4c:b9:71:70:6e:cd:df:37:57:cb:f8:b4:
39:c3:72:1c:15:8f:14:0f:63:3a:68:ef:15:88:34:cd:ff:3c:
e4:18:f0:70:f2:8e:f7:3d:5b:ca:58:4b:13:b5:5c:1d:9a:7a:
58:2d:a0:84:6f:fe:cb:11:4b:0f:ba:56:c9:fd:fd:60:20:ad:
6d:ca:a1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:38:27 2026 by rpki-client