
$ rpki-client -vvf rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
File: bjpCzSsjnaPmWO-5fq0VsObt2qE.mft (raw, json)
Hash identifier: QuAVRiIlxA2r8rh7bnZMg/SaUDIFZFwW9WvuzOsZJ5U=
Subject key identifier: 43:94:9E:3A:7D:FF:41:E4:B8:0B:8E:B3:8F:03:F5:33:D5:A4:E2:9D
Authority key identifier: 6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1
Certificate issuer: /CN=A914AA58/serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1
Certificate serial: 0458
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
Manifest number: 0450
Signing time: Wed 29 Jul 2026 00:56:19 +0000
Manifest this update: Wed 29 Jul 2026 00:56:18 +0000
Manifest next update: Wed 05 Aug 2026 00:56:18 +0000
Files and hashes: 1: bjpCzSsjnaPmWO-5fq0VsObt2qE.crl (hash: yZvwSyVWPkcPu96KlDnZqQig26JMHCQwi9SQqNSslAU=)
2: CC2E531EAA7811ECB6791A3EC4F9AE02.roa (hash: VcHb84wLi9VnbtMp6mSLBWoA9CBF2yld3MvXmytrUnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl
rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 00:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112 (0x458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914AA58, serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1
Validity
Not Before: Jul 29 00:56:18 2026 GMT
Not After : Aug 5 00:56:18 2026 GMT
Subject: CN=6a694fb2-2063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:30:04:7a:be:87:72:5a:ca:ad:3d:d3:73:
7b:75:5a:41:33:14:04:ca:87:ec:70:9a:13:6a:c2:
f5:4f:7c:df:c9:7f:17:a9:8e:5f:bf:0c:d8:9b:78:
61:29:9b:04:f6:cf:c7:c1:56:e8:43:13:b5:b1:28:
38:4a:17:f2:b1:0d:0d:7a:4c:32:44:0c:15:de:35:
9f:17:bc:81:c4:ff:3c:61:00:e5:a5:3f:ba:d8:0c:
37:20:e4:e1:d1:67:f3:50:ff:44:7f:74:2f:76:5e:
2b:8f:1a:4e:ae:56:e1:05:d1:72:23:ab:3d:a7:1d:
a3:ed:eb:e4:17:42:77:e5:72:8c:c6:f9:56:86:b9:
8b:81:0e:d8:37:7a:79:d5:36:93:b7:61:5f:99:50:
9c:76:95:01:49:67:ed:83:16:ae:f1:b4:02:13:5f:
16:b6:1d:6c:81:c5:5d:b3:c3:1b:0f:9e:24:95:58:
05:f9:0b:5e:41:1c:5c:37:d9:d2:43:ca:6b:ad:22:
2f:cf:ee:65:99:99:3c:e3:1b:a3:68:69:bd:47:62:
b6:91:6d:fc:05:da:1f:3f:d4:ab:0e:86:4b:b4:00:
e5:06:d9:a9:81:6f:72:5b:28:b5:4f:9d:cd:2a:6f:
be:c5:fc:6c:26:b7:88:5e:c4:3e:c6:2a:c0:b0:4b:
8f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:94:9E:3A:7D:FF:41:E4:B8:0B:8E:B3:8F:03:F5:33:D5:A4:E2:9D
X509v3 Authority Key Identifier:
keyid:6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:6f:df:34:62:ae:25:71:ea:68:e6:12:b3:82:ad:7d:ea:b4:
f2:71:d2:21:f2:5a:46:c8:42:37:04:d7:fd:ce:3e:ad:51:6e:
ca:c2:81:31:15:f6:83:00:6f:f7:d9:7c:1f:7f:3a:ac:be:4a:
ac:3a:16:b0:54:b1:d8:ba:77:b2:fb:f4:02:44:b4:11:cc:b8:
31:b6:44:00:27:34:1c:4c:43:ab:b7:9d:97:7e:1e:3d:7d:01:
3d:29:c6:7d:21:2a:48:c4:f3:95:be:b3:a8:aa:4a:74:f0:45:
fd:47:9e:95:28:36:79:0b:59:e3:12:97:06:56:93:28:40:7d:
a6:dc:22:f5:07:3c:01:e1:0e:94:85:85:1c:7a:02:26:ec:e1:
eb:4a:9f:3b:7b:b8:69:99:76:11:ff:9b:3f:3e:96:81:cf:16:
25:1e:db:27:bf:2c:3f:94:0e:f3:ee:f2:7c:a4:fa:09:a0:19:
99:de:85:a6:b3:63:38:b2:78:4c:07:c1:67:19:f2:85:c2:8f:
5b:61:c9:27:e5:0c:33:51:2c:a3:67:50:10:89:08:41:5f:a1:
67:be:fb:82:ff:97:f2:0e:41:24:bf:1f:2e:f3:53:18:2c:3d:
74:38:e9:d1:d9:0c:31:69:62:f9:43:83:f3:e2:06:c5:81:2f:
c4:ed:89:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:19 2026 by rpki-client