
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft
File: BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft (raw, json)
Hash identifier: CKlMsH+oJCkSsMfgPrZ4/KjU2jKk17WsWiAL4hM300I=
Subject key identifier: EA:8D:9B:24:21:D6:C3:D1:80:F5:8D:F2:4B:7C:FD:3E:C0:60:5E:96
Authority key identifier: 04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7
Certificate issuer: /CN=A9165B02/serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7
Certificate serial: 06B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft
Manifest number: 06A9
Signing time: Sun 26 Jul 2026 23:13:49 +0000
Manifest this update: Sun 26 Jul 2026 23:13:48 +0000
Manifest next update: Sun 02 Aug 2026 23:13:48 +0000
Files and hashes: 1: BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl (hash: a8Hy2kYbn/hqXnjHk7Zq5d4jI6myw5pZ01G1ltvcE90=)
2: CEEBA382BD1511EB9E873260C4F9AE02.roa (hash: 7GG4HXVAAliKVWU1/QAGmEXY38iid1/8BMRmSndCqBc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl
rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:13:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1713 (0x6b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165B02, serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7
Validity
Not Before: Jul 26 23:13:48 2026 GMT
Not After : Aug 2 23:13:48 2026 GMT
Subject: CN=6a6694ac-208b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e0:0e:4b:90:27:03:87:05:ea:58:f3:2d:b6:
6d:36:ee:b4:1b:78:e2:19:c5:26:fd:83:97:84:9d:
55:0b:ab:1b:47:38:b0:6f:a7:80:2e:5b:de:35:96:
c9:7b:89:b4:65:18:ea:2d:0a:1a:59:e9:74:00:f0:
a5:a0:5e:f0:4f:60:d0:81:ed:2a:14:02:e7:08:b3:
5d:78:86:47:a3:b9:47:9e:ee:d7:c7:28:1f:ae:67:
99:57:00:22:a7:c8:d8:e4:e7:67:94:3a:b7:c4:14:
bc:59:86:21:e5:3c:5b:06:1e:e9:ff:ed:9e:3c:14:
ec:5a:47:96:23:a3:f4:0f:73:85:e0:1a:d1:5e:fb:
d9:20:26:29:b3:36:e5:e7:4d:2f:1e:cb:5e:4d:4e:
e9:67:5c:32:4f:26:0d:78:f1:6d:54:c5:2e:3f:ef:
02:9f:0f:02:8b:c0:1b:ca:57:40:c0:bf:7c:2e:ee:
ae:41:c6:e3:05:f9:38:ca:e4:ce:c7:20:96:18:bb:
04:43:50:69:b4:63:76:25:3f:a8:d0:62:c9:df:15:
14:22:19:6e:90:14:f1:ae:24:4b:a2:42:73:48:aa:
2b:c1:e6:63:88:df:06:b5:1c:c8:fa:56:d5:b9:8c:
be:de:96:28:e6:4c:1d:83:24:66:2c:5d:f8:9d:62:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8D:9B:24:21:D6:C3:D1:80:F5:8D:F2:4B:7C:FD:3E:C0:60:5E:96
X509v3 Authority Key Identifier:
keyid:04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:3f:bd:34:53:40:26:e1:62:a3:73:7e:41:bb:c3:5a:b9:11:
88:b2:f4:d0:ca:dd:49:27:ef:9d:b6:4a:83:82:96:48:19:57:
85:fc:99:b7:b7:86:c4:db:be:b9:c6:f7:80:50:0c:ef:5e:65:
59:2d:34:0e:5a:fa:fd:ec:e0:af:5b:9a:0a:14:9d:0d:04:31:
9f:f6:42:e0:21:ae:2c:4d:bb:89:3b:f1:4b:90:6c:bc:60:fe:
85:36:63:83:dd:50:fa:c4:39:43:f1:c9:23:00:ec:a6:50:aa:
3f:c2:33:71:01:b4:cc:86:01:23:a1:6b:f3:4c:1a:4d:a5:df:
1e:e5:ae:8d:6d:3b:53:41:4e:ee:1b:fa:2d:07:03:08:f4:77:
68:62:6e:4e:f5:b4:6a:7a:01:9c:0d:ef:e0:64:df:63:ee:a5:
fa:4a:61:ed:d2:8f:f7:3b:53:4e:b3:60:60:3d:d1:e9:d2:40:
1f:63:ec:0b:57:8a:00:d9:3d:ec:40:47:7f:ed:e4:0e:93:b0:
c3:1f:ff:12:9d:eb:c6:32:f7:4d:69:07:1e:11:79:93:6f:8c:
f0:c5:3d:e0:80:5c:97:b5:e9:cd:b5:5b:ac:ae:67:45:14:3e:
9f:26:fc:44:f7:96:49:bb:2a:ce:4d:d7:e9:2c:04:6a:3f:b8:
d8:54:9a:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjVCMDIxMTAvBgNVBAUTKDA0MUQ1MTkyNDdDNDZFNzNGNkE2N0RERjdDOTA0OUJG
RjI3OUMwQjcwHhcNMjYwNzI2MjMxMzQ4WhcNMjYwODAyMjMxMzQ4WjAYMRYwFAYD
VQQDEw02YTY2OTRhYy0yMDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3eAOS5AnA4cF6ljzLbZtNu60G3jiGcUm/YOXhJ1VC6sbRziwb6eALlveNZbJ
e4m0ZRjqLQoaWel0APCloF7wT2DQge0qFALnCLNdeIZHo7lHnu7XxygfrmeZVwAi
p8jY5OdnlDq3xBS8WYYh5TxbBh7p/+2ePBTsWkeWI6P0D3OF4BrRXvvZICYpszbl
500vHsteTU7pZ1wyTyYNePFtVMUuP+8Cnw8Ci8AbyldAwL98Lu6uQcbjBfk4yuTO
xyCWGLsEQ1BptGN2JT+o0GLJ3xUUIhlukBTxriRLokJzSKorweZjiN8GtRzI+lbV
uYy+3pYo5kwdgyRmLF34nWLZHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOqNmyQh
1sPRgPWN8kt8/T7AYF6WMB8GA1UdIwQYMBaAFAQdUZJHxG5z9qZ933yQSb/yecC3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUIwMi85NUEzOEVGNkJE
MTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJuUDJwbjNmZkpCSnZfSjV3
TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JCMVJra2ZFYm5QMnBuM2ZmSkJKdl9KNXdMYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NUIwMi85NUEzOEVGNkJEMTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJu
UDJwbjNmZkpCSnZfSjV3TGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJj+9NFNAJuFio3N+QbvDWrkRiLL00MrdSSfvnbZKg4KWSBlXhfyZt7eGxNu+
ucb3gFAM715lWS00Dlr6/ezgr1uaChSdDQQxn/ZC4CGuLE27iTvxS5BsvGD+hTZj
g91Q+sQ5Q/HJIwDsplCqP8IzcQG0zIYBI6Fr80waTaXfHuWujW07U0FO7hv6LQcD
CPR3aGJuTvW0anoBnA3v4GTfY+6l+kph7dKP9ztTTrNgYD3R6dJAH2PsC1eKANk9
7EBHf+3kDpOwwx//Ep3rxjL3TWkHHhF5k2+M8MU94IBcl7XpzbVbrK5nRRQ+nyb8
RPeWSbsqzk3X6SwEaj+42FSazw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:23 2026 by rpki-client