
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
File: bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft (raw, json)
Hash identifier: HgXHolLf2PGBlNpug0IcTFeC9ZRlRr+vZGY1xmnWjRg=
Subject key identifier: 56:AA:F7:43:4F:5F:F4:E4:0D:D7:5E:C3:6E:90:53:ED:2D:0D:69:FF
Authority key identifier: 6D:DE:C6:A1:71:29:23:0E:EE:FE:50:8A:F1:19:62:FB:4C:0F:6F:C2
Certificate issuer: /CN=A9167C9C/serialNumber=6DDEC6A17129230EEEFE508AF11962FB4C0F6FC2
Certificate serial: 065F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
Manifest number: 0658
Signing time: Sun 26 Jul 2026 23:30:08 +0000
Manifest this update: Sun 26 Jul 2026 23:30:07 +0000
Manifest next update: Sun 02 Aug 2026 23:30:07 +0000
Files and hashes: 1: bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl (hash: Ls6Gq3wwcLpqlFLZc8P43tsyTl+25qus1pY46fnaT1U=)
2: BF811486DC1E11EBB2C72F52C4F9AE02.roa (hash: 3RyEfrC1/+oLdtWYjCCiGJj81mtXCEJfqPIsFdcM1I0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl
rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1631 (0x65f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167C9C, serialNumber=6DDEC6A17129230EEEFE508AF11962FB4C0F6FC2
Validity
Not Before: Jul 26 23:30:07 2026 GMT
Not After : Aug 2 23:30:07 2026 GMT
Subject: CN=6a669880-3a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b6:bb:38:0c:69:28:2b:1b:23:e9:8a:b1:fd:
cd:c0:88:95:55:24:08:67:8e:54:eb:33:7f:ab:4d:
b2:9a:93:57:0e:af:18:0e:ec:d3:cd:a0:1e:0f:b3:
f6:f5:53:03:ca:1c:ab:76:c9:ff:56:7c:03:08:2b:
84:8c:f6:62:02:43:67:9f:b0:c8:32:ec:3e:c3:0f:
ed:91:4d:3e:bd:67:f7:d1:34:98:1b:cf:93:b6:20:
66:5c:b4:7a:96:9d:d8:c3:a5:b6:0e:e1:47:f9:7a:
bd:80:83:8d:e0:31:76:19:2f:57:56:df:5c:c1:76:
4e:43:e1:86:e3:18:49:e5:5a:c8:2d:74:d4:b0:c8:
9d:20:33:a7:b8:3d:cb:7a:ed:3e:4a:c8:c5:88:e1:
8f:a4:ab:14:a3:fd:c6:4e:30:02:6a:74:87:59:85:
18:3b:ea:35:f9:c3:d4:07:66:3e:da:76:a0:21:bb:
90:a8:9f:ad:4d:af:a1:b3:92:41:70:03:6c:87:60:
28:20:7b:ca:0e:97:5f:44:54:f8:0d:3d:bc:7d:5a:
28:47:ff:b0:cc:08:c1:9e:90:3d:fa:45:b3:98:de:
25:23:a2:65:a8:e6:fb:88:f3:87:2c:4b:b5:04:fa:
58:72:43:08:c0:42:6a:af:7d:71:47:2a:bf:1a:c9:
f0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AA:F7:43:4F:5F:F4:E4:0D:D7:5E:C3:6E:90:53:ED:2D:0D:69:FF
X509v3 Authority Key Identifier:
keyid:6D:DE:C6:A1:71:29:23:0E:EE:FE:50:8A:F1:19:62:FB:4C:0F:6F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:08:a5:52:4f:5e:48:64:57:29:2c:90:8b:f0:95:f5:c6:fd:
8e:ba:d9:83:ef:ee:81:59:ea:7b:84:26:43:5e:87:17:af:6a:
6e:03:e7:03:7d:b1:f4:8a:87:51:e6:e0:80:74:9b:b1:ad:cc:
84:e0:18:5c:39:23:a2:53:2a:54:9d:97:f8:79:01:ed:78:fb:
d9:98:62:fb:18:c9:c4:69:5a:7a:ea:b8:30:b9:51:0e:ad:f1:
94:bf:35:0c:e3:d5:bc:84:f5:8d:74:8c:3b:73:65:b7:7d:a9:
44:1a:30:f8:fe:a4:46:e0:ea:ae:66:79:38:e8:24:a6:38:c3:
84:31:89:c5:21:a0:c0:ed:62:5e:44:17:6b:3f:91:64:6b:90:
c0:5c:44:ff:bd:25:44:6b:06:c4:50:32:d7:fd:39:39:fa:bb:
49:7a:31:a0:9b:97:63:23:00:2f:7e:6a:e1:1e:9d:3f:6c:0d:
a4:73:94:81:b9:9c:64:77:b6:1f:09:7a:c6:c3:ba:56:81:3c:
03:ad:08:6c:c5:99:a4:0f:dd:c0:fc:8d:43:7c:d9:1a:77:f5:
d3:aa:5e:cb:a0:3f:0a:be:79:a1:3f:e1:77:95:9a:60:a3:40:
aa:42:8f:fb:44:34:a9:a0:c8:45:aa:61:2e:ea:2c:f4:b8:58:
c2:02:a7:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdDOUMxMTAvBgNVBAUTKDZEREVDNkExNzEyOTIzMEVFRUZFNTA4QUYxMTk2MkZC
NEMwRjZGQzIwHhcNMjYwNzI2MjMzMDA3WhcNMjYwODAyMjMzMDA3WjAYMRYwFAYD
VQQDEw02YTY2OTg4MC0zYTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyba7OAxpKCsbI+mKsf3NwIiVVSQIZ45U6zN/q02ympNXDq8YDuzTzaAeD7P2
9VMDyhyrdsn/VnwDCCuEjPZiAkNnn7DIMuw+ww/tkU0+vWf30TSYG8+TtiBmXLR6
lp3Yw6W2DuFH+Xq9gION4DF2GS9XVt9cwXZOQ+GG4xhJ5VrILXTUsMidIDOnuD3L
eu0+SsjFiOGPpKsUo/3GTjACanSHWYUYO+o1+cPUB2Y+2nagIbuQqJ+tTa+hs5JB
cANsh2AoIHvKDpdfRFT4DT28fVooR/+wzAjBnpA9+kWzmN4lI6JlqOb7iPOHLEu1
BPpYckMIwEJqr31xRyq/Gsnw7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFaq90NP
X/TkDddew26QU+0tDWn/MB8GA1UdIwQYMBaAFG3exqFxKSMO7v5QivEZYvtMD2/C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0M5Qy85QjZDNDI4MERD
MUIxMUVCQTYzNTUwNEVDNEY5QUUwMi9iZDdHb1hFcEl3N3VfbENLOFJsaS0wd1Bi
OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JkN0dvWEVwSXc3dV9sQ0s4UmxpLTB3UGI4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0M5Qy85QjZDNDI4MERDMUIxMUVCQTYzNTUwNEVDNEY5QUUwMi9iZDdHb1hFcEl3
N3VfbENLOFJsaS0wd1BiOEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAngilUk9eSGRXKSyQi/CV9cb9jrrZg+/ugVnqe4QmQ16HF69qbgPnA32x9IqH
UebggHSbsa3MhOAYXDkjolMqVJ2X+HkB7Xj72Zhi+xjJxGlaeuq4MLlRDq3xlL81
DOPVvIT1jXSMO3Nlt32pRBow+P6kRuDqrmZ5OOgkpjjDhDGJxSGgwO1iXkQXaz+R
ZGuQwFxE/70lRGsGxFAy1/05Ofq7SXoxoJuXYyMAL35q4R6dP2wNpHOUgbmcZHe2
Hwl6xsO6VoE8A60IbMWZpA/dwPyNQ3zZGnf106pey6A/Cr55oT/hd5WaYKNAqkKP
+0Q0qaDIRaphLuos9LhYwgKnvg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:07 2026 by rpki-client