
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft
File: bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft (raw, json)
Hash identifier: rAbpBwo3F379lo0WUC/jeppBoi/yDCiX0S0FtZGzzzk=
Subject key identifier: A0:FD:CC:A5:3B:D6:0B:1E:3B:2F:A5:2F:D5:D5:21:FF:90:C5:FD:CC
Authority key identifier: 6F:00:24:6A:85:88:84:8C:3A:17:27:52:F3:2A:E4:EA:30:C6:80:A4
Certificate issuer: /CN=A917983D/serialNumber=6F00246A8588848C3A172752F32AE4EA30C680A4
Certificate serial: 03B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft
Manifest number: 03AD
Signing time: Tue 29 Sep 2026 00:44:18 +0000
Manifest this update: Tue 29 Sep 2026 00:44:17 +0000
Manifest next update: Tue 06 Oct 2026 00:44:17 +0000
Files and hashes: 1: bwAkaoWIhIw6FydS8yrk6jDGgKQ.crl (hash: x+x4/9PiSlvtjywCPicFYHtCFwrBj0b9raqgU6Or3bI=)
2: 1F59A248F69E11EC947BBC5EC4F9AE02.roa (hash: dyH4e+gx3HXeT/oT8iwilMjLeLPk/EJ/gCFp5UvAwZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.crl
rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 00:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949 (0x3b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917983D, serialNumber=6F00246A8588848C3A172752F32AE4EA30C680A4
Validity
Not Before: Sep 29 00:44:17 2026 GMT
Not After : Oct 6 00:44:17 2026 GMT
Subject: CN=6abb09e2-430e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1b:7e:54:f1:eb:f5:ea:c5:d3:7e:48:87:d4:
09:32:8e:99:65:d1:35:42:8c:6b:6b:b4:61:d0:dd:
b0:1d:a1:e3:c5:2c:e2:f4:96:f4:59:6e:9c:67:50:
d0:33:0f:3e:3e:be:11:b4:80:71:5c:18:96:70:01:
16:f0:b2:0a:0b:9a:f0:54:8b:e7:c0:a4:37:72:0e:
56:74:68:2b:60:75:96:2f:e7:29:e7:b0:35:ec:6a:
9a:99:49:51:06:70:4c:07:58:11:ea:dc:28:45:e4:
11:b4:01:4e:67:1e:1b:18:93:71:fd:54:cb:66:a7:
42:ef:d0:01:8b:5a:12:19:c0:58:fb:74:67:0e:f4:
51:81:08:f8:eb:e1:7b:a6:f9:39:b9:25:ad:41:42:
54:4f:e0:e9:40:87:94:63:40:30:30:5b:14:8a:b0:
71:d6:af:2a:5a:ce:dd:9f:ba:76:71:76:92:40:0f:
0d:f0:a2:d3:67:b2:72:61:79:ec:cc:90:71:ea:f8:
c5:db:d0:62:e0:b7:fd:68:3f:41:10:0f:35:4f:a4:
9b:cb:22:ee:62:f0:db:60:cd:82:24:72:02:e5:77:
e0:db:fa:83:4c:63:4d:e5:cf:c7:af:0f:c4:b9:08:
38:ef:64:4b:28:18:fe:0a:f6:db:ad:90:c1:56:99:
23:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FD:CC:A5:3B:D6:0B:1E:3B:2F:A5:2F:D5:D5:21:FF:90:C5:FD:CC
X509v3 Authority Key Identifier:
keyid:6F:00:24:6A:85:88:84:8C:3A:17:27:52:F3:2A:E4:EA:30:C6:80:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bwAkaoWIhIw6FydS8yrk6jDGgKQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917983D/4162F44CF69A11ECA7853B59C4F9AE02/bwAkaoWIhIw6FydS8yrk6jDGgKQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:4e:5e:c1:19:16:9e:ba:69:a7:6e:36:25:28:d7:a2:53:c7:
16:3e:c4:01:f7:df:57:c4:d5:a3:45:dd:91:70:98:63:2e:92:
8e:35:ff:2a:4d:f0:00:1f:67:b2:86:8b:cb:84:bf:13:97:b9:
6b:3b:dc:a5:07:ac:c3:09:c0:fa:d6:2d:f1:6e:f2:74:5b:34:
47:0a:43:0a:72:90:ee:2d:fb:b7:8a:0b:0a:e1:e4:59:89:9b:
da:48:8b:89:06:ec:c1:28:e5:c4:0d:9a:f4:09:9c:40:0e:a6:
0e:b4:3f:76:4b:fe:7a:0a:39:f4:02:32:8e:a3:b4:fe:0e:6f:
79:2b:99:f6:31:f5:38:9c:3a:49:af:1f:d8:57:2d:7e:c1:20:
6c:9d:5b:fe:58:bd:28:df:2a:40:6e:47:08:05:2e:22:3c:d2:
4c:25:08:9b:1f:03:13:32:54:6b:eb:73:98:18:0c:53:bd:2b:
12:ad:98:74:ca:c1:cf:af:7d:72:84:ed:10:99:ea:f4:97:48:
81:60:83:cb:18:85:10:14:42:e2:99:e5:f5:9c:8b:12:76:1d:
5b:d9:06:12:44:6e:af:92:09:f7:6d:d0:fc:67:34:86:ce:4e:
42:2c:a6:95:8b:7d:d6:b1:0b:22:8c:c3:56:a4:90:4e:93:e5:
e3:85:83:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzk4M0QxMTAvBgNVBAUTKDZGMDAyNDZBODU4ODg0OEMzQTE3Mjc1MkYzMkFFNEVB
MzBDNjgwQTQwHhcNMjYwOTI5MDA0NDE3WhcNMjYxMDA2MDA0NDE3WjAYMRYwFAYD
VQQDEw02YWJiMDllMi00MzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzBt+VPHr9erF035Ih9QJMo6ZZdE1Qoxra7Rh0N2wHaHjxSzi9Jb0WW6cZ1DQ
Mw8+Pr4RtIBxXBiWcAEW8LIKC5rwVIvnwKQ3cg5WdGgrYHWWL+cp57A17GqamUlR
BnBMB1gR6twoReQRtAFOZx4bGJNx/VTLZqdC79ABi1oSGcBY+3RnDvRRgQj46+F7
pvk5uSWtQUJUT+DpQIeUY0AwMFsUirBx1q8qWs7dn7p2cXaSQA8N8KLTZ7JyYXns
zJBx6vjF29Bi4Lf9aD9BEA81T6SbyyLuYvDbYM2CJHIC5Xfg2/qDTGNN5c/Hrw/E
uQg472RLKBj+CvbbrZDBVpkjnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKD9zKU7
1gseOy+lL9XVIf+Qxf3MMB8GA1UdIwQYMBaAFG8AJGqFiISMOhcnUvMq5OowxoCk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTgzRC80MTYyRjQ0Q0Y2
OUExMUVDQTc4NTNCNTlDNEY5QUUwMi9id0FrYW9XSWhJdzZGeWRTOHlyazZqREdn
S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2J3QWthb1dJaEl3NkZ5ZFM4eXJrNmpER2dLUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OTgzRC80MTYyRjQ0Q0Y2OUExMUVDQTc4NTNCNTlDNEY5QUUwMi9id0FrYW9XSWhJ
dzZGeWRTOHlyazZqREdnS1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvU5ewRkWnrppp242JSjXolPHFj7EAfffV8TVo0XdkXCYYy6SjjX/Kk3wAB9n
soaLy4S/E5e5azvcpQeswwnA+tYt8W7ydFs0RwpDCnKQ7i37t4oLCuHkWYmb2kiL
iQbswSjlxA2a9AmcQA6mDrQ/dkv+ego59AIyjqO0/g5veSuZ9jH1OJw6Sa8f2Fct
fsEgbJ1b/li9KN8qQG5HCAUuIjzSTCUImx8DEzJUa+tzmBgMU70rEq2YdMrBz699
coTtEJnq9JdIgWCDyxiFEBRC4pnl9ZyLEnYdW9kGEkRur5IJ923Q/Gc0hs5OQiym
lYt91rELIozDVqSQTpPl44WD6g==
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:39:19 2026 by rpki-client