
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft
File: BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft (raw, json)
Hash identifier: ACnUopeoMhXLpHyD0pfjN986xvCfpbo7vMNHnLY2IR4=
Subject key identifier: B3:B9:93:DB:DF:52:D9:5A:D1:2C:A8:61:20:8A:BB:83:04:69:2C:07
Authority key identifier: 04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1
Certificate issuer: /CN=A9160244/serialNumber=0434017186DB84CA89477570DDA10AD731597FF1
Certificate serial: 25BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft
Manifest number: 25AA
Signing time: Sun 20 Sep 2026 15:42:15 +0000
Manifest this update: Sun 20 Sep 2026 15:42:14 +0000
Manifest next update: Sun 27 Sep 2026 15:42:14 +0000
Files and hashes: 1: BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl (hash: jYMrE91UGaJOtBIK8bqj0Df3C4DZhE/pCqBCpw0YWIc=)
2: E1FACBC0B10D11E5894F4D1CC4F9AE02.roa (hash: EfCaGCtcrH8N6gwKDqZgf5tZ2F02vPFMjaNcZrTJZPE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl
rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9659 (0x25bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160244, serialNumber=0434017186DB84CA89477570DDA10AD731597FF1
Validity
Not Before: Sep 20 15:42:14 2026 GMT
Not After : Sep 27 15:42:14 2026 GMT
Subject: CN=6aaffed7-b655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:4d:fa:be:49:e8:28:48:6d:05:ab:ce:b7:
4e:b5:b9:30:53:d4:47:81:59:41:59:7a:5f:b2:c2:
48:fc:7e:a8:c0:d0:7f:fc:54:56:14:00:aa:d9:8e:
89:25:e8:21:04:09:72:f4:22:f0:fb:45:17:b9:5c:
b6:45:bc:3b:13:a3:e1:4f:2a:8f:b1:c8:6b:18:9f:
6b:fd:ca:b9:a8:4d:54:4a:2f:89:e2:ce:dc:2a:8e:
81:0d:0d:1d:05:33:58:4c:25:3e:33:e1:6b:43:31:
38:ff:10:4e:5a:24:ce:f7:0d:5e:1f:1c:e7:72:e6:
c2:ce:84:ff:9c:0e:6d:ae:b1:db:a5:84:62:35:7f:
c3:07:48:ae:d1:f2:40:5f:20:f1:a8:67:bd:86:88:
7f:c6:b3:e5:98:71:7d:e3:05:71:32:49:50:df:ee:
fe:55:67:d4:57:c9:83:36:64:03:c0:97:91:81:ec:
20:46:7e:ab:4b:bd:46:22:04:7c:d5:54:f1:2e:00:
f4:ad:78:4b:2f:10:00:1b:9e:d3:0e:e2:ce:9f:7b:
07:74:e0:da:cb:87:e9:40:41:5c:92:01:3c:1c:3a:
1b:05:72:35:0d:73:9d:82:15:11:1f:05:0a:8f:68:
94:fe:02:a6:ca:46:70:0d:84:65:98:a1:9a:8e:b4:
8c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B9:93:DB:DF:52:D9:5A:D1:2C:A8:61:20:8A:BB:83:04:69:2C:07
X509v3 Authority Key Identifier:
keyid:04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:d8:f8:34:db:7e:dc:97:08:1b:1c:27:82:52:1c:b6:25:c4:
50:22:e8:b2:96:f3:ed:a4:b6:f4:ee:6d:49:b0:31:74:80:c3:
46:52:63:10:13:d7:56:71:f4:b1:2d:69:d7:b4:59:4f:e4:c3:
f1:99:4b:bf:07:9e:79:a0:b3:f0:74:81:e5:d1:92:46:70:c0:
19:14:43:03:46:cd:e9:b3:c5:e6:76:1a:29:09:48:86:5a:44:
70:81:03:e5:56:28:6c:e4:4c:0a:3c:f5:39:be:e4:44:59:a3:
55:ad:6a:51:32:b2:92:66:58:e9:93:94:21:5a:f9:3b:6c:25:
84:0c:6a:73:e3:b7:6d:f9:6d:d5:ab:c1:b9:af:ec:9a:16:98:
04:46:d2:4a:4c:1d:09:8b:d8:c9:35:05:1d:96:44:fb:1a:91:
4f:ed:d7:79:29:47:1c:7e:e0:74:ae:0a:18:11:82:25:79:ee:
94:78:36:4d:63:98:c1:01:50:c9:05:fe:81:f3:6d:23:97:9b:
47:f6:0d:8d:65:2f:53:3a:3e:08:ea:fe:37:43:48:20:4c:58:
3e:d1:8d:7c:02:6c:d7:b0:2a:57:a0:6a:5d:42:6f:61:6a:34:
96:4e:28:47:de:61:23:03:13:c7:f6:75:f9:68:30:46:84:23:
57:76:08:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:13:51 2026 by rpki-client