
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
File: BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft (raw, json)
Hash identifier: LE9JRvXDi9L6X/Qwrexv8MDmj/sHykXK1DNTi6BscU0=
Subject key identifier: 1F:94:96:26:30:E1:E9:CA:38:A5:A8:AE:5A:02:2D:72:5B:36:26:38
Authority key identifier: 06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E
Certificate issuer: /CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
Certificate serial: 0109
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
Manifest number: 0107
Signing time: Sun 01 Mar 2026 07:04:45 +0000
Manifest this update: Sun 01 Mar 2026 07:04:45 +0000
Manifest next update: Sun 08 Mar 2026 07:04:45 +0000
Files and hashes: 1: BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl (hash: qhxB56cAbw5LMFRQg7SML4o7ycuE2EtYa2+zgeMfPPI=)
2: 79F85264827711EFAACDBD12C4F9AE02.roa (hash: 8S+MnfPAwwqJ4EDo87RkT/K1LmOYDK5SfddRm32GGQ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl
rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:04:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150D5C, serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
Validity
Not Before: Mar 1 07:04:45 2026 GMT
Not After : Mar 8 07:04:45 2026 GMT
Subject: CN=69a3e50d-e3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:68:0e:8f:17:c2:70:da:84:e3:ab:67:4a:1a:
44:ef:b6:e7:4a:c9:ce:ed:45:7a:f4:7a:01:01:19:
d2:d3:66:8e:5b:69:c3:ba:24:b7:e7:09:b5:9b:c3:
ad:71:d8:a4:45:3a:21:8e:f8:4e:7e:72:a8:f1:8a:
18:c2:d1:24:11:6c:e1:cb:3f:49:ba:9a:d8:f4:d9:
53:9c:23:99:0e:f5:bc:c1:95:cf:95:94:7e:94:65:
d0:ec:06:13:39:0a:4f:f1:90:08:3f:3d:42:05:f6:
ed:d0:fd:56:de:ea:1f:e3:f9:5a:f2:44:1d:40:51:
e2:9b:5a:ad:55:10:59:fe:51:c4:41:8a:79:e1:40:
be:87:1a:d8:2e:ff:cb:8c:ce:5c:db:61:6c:9f:da:
b4:05:2f:81:01:33:37:e6:c9:42:50:ba:06:8e:77:
ca:fa:b8:6e:7c:a0:6c:c5:2f:2f:bf:db:79:a5:59:
aa:be:17:f5:20:7d:e0:61:10:af:07:3d:f4:bd:fc:
16:ef:84:04:74:7f:2d:0c:6a:d6:f2:1f:15:93:4d:
0a:2a:97:de:71:15:78:94:c4:39:b3:30:10:a2:e4:
3f:db:e9:b2:e6:e5:f7:82:e4:ba:13:a3:2a:ee:46:
f2:d4:7d:7b:16:4f:76:9a:b5:d4:e7:2e:9e:0c:7e:
56:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:94:96:26:30:E1:E9:CA:38:A5:A8:AE:5A:02:2D:72:5B:36:26:38
X509v3 Authority Key Identifier:
keyid:06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:75:7f:7e:7e:43:11:be:68:41:b9:ba:00:79:d9:1e:d0:42:
72:bb:df:8a:f3:f8:03:f8:80:d7:89:6a:f5:ef:87:f4:09:46:
70:94:fe:32:4c:a4:d6:a4:aa:2a:7c:e6:d0:51:27:bd:d4:25:
d9:f8:42:d5:c1:ec:db:9c:a5:01:3f:f8:ba:42:a3:e4:b8:a2:
47:de:a3:05:12:28:9e:1f:39:90:62:ca:74:d2:31:5a:fd:6d:
2e:2d:e2:37:67:1d:e2:ee:7a:3b:c4:91:77:cf:8f:dd:a6:8e:
35:0c:07:c3:15:90:5f:e3:d3:6e:ec:db:9a:d4:10:2d:cc:f4:
36:8d:ca:3b:da:fd:c7:61:88:65:20:4c:e1:a4:ff:7d:76:83:
ae:54:f0:9b:73:e2:ec:13:11:bb:1f:93:98:b2:1c:fe:3c:91:
55:d9:9e:71:c1:14:52:a6:08:90:3d:1b:ac:63:06:b5:ed:a6:
22:45:44:34:0e:fc:9f:db:e0:cc:d4:7e:31:cf:dc:66:1a:69:
98:25:6a:a0:5b:23:32:23:f4:48:43:d7:10:e8:ac:59:dc:19:
cd:45:1f:c3:59:ab:80:f0:6f:f2:13:88:9c:9c:f6:22:b7:b2:
fa:64:37:0f:4e:d1:c7:9c:f2:3d:c8:40:dc:ad:7b:cd:c3:aa:
ac:56:15:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:46 2026 by rpki-client