
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json)
Hash identifier: 9AwOmC09aVHog37Gr51SnO5PrclwWnUzGYiJuQtEwTg=
Subject key identifier: FA:87:07:AD:3D:53:E1:27:F9:EC:74:C9:EC:9C:CC:B9:C1:A3:93:8A
Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1
Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
Certificate serial: 101E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
Manifest number: 100B
Signing time: Sun 20 Sep 2026 17:25:50 +0000
Manifest this update: Sun 20 Sep 2026 17:25:49 +0000
Manifest next update: Sun 27 Sep 2026 17:25:49 +0000
Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: VDDbiYA1JpD5ULq4nMeh6UdJ7BEr3zAiZsWLiuMCuqs=)
2: AA75695ACD2011F0B214A868C4F9AE02.roa (hash: 2mnTM/HTgdiRw1sKfT4sEhRjUUWStC3e6p+pRA/D//M=)
3: F6B0145ACD2011F0B3EB5B69C4F9AE02.roa (hash: k4cp/STum9L4RJNKMc3zj8Ri5aFzIHY5Vza6zrwXHLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl
rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4126 (0x101e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
Validity
Not Before: Sep 20 17:25:49 2026 GMT
Not After : Sep 27 17:25:49 2026 GMT
Subject: CN=6ab0171e-056d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:36:97:de:a0:00:5f:ad:6d:b6:4d:8c:71:
8f:3b:b9:c9:a5:96:5b:82:21:b4:95:87:a7:fb:11:
ed:8d:6f:0f:e2:b4:b7:75:7b:b9:dd:b6:ce:63:46:
11:94:ba:07:98:65:d9:f4:d6:ce:2f:1a:cf:28:e8:
ba:31:17:b9:45:25:4a:fa:01:f9:47:5c:e5:60:73:
fc:24:b1:e2:73:3b:be:85:15:f1:e7:09:ae:36:4a:
5a:e9:0b:81:9d:ca:85:89:b6:34:e1:6c:33:04:6a:
7a:39:5e:6e:ca:67:30:9a:d4:4e:1f:1d:54:23:81:
b5:ae:3e:a5:49:4c:b5:fe:e0:0f:94:7b:00:54:b7:
12:99:2a:f8:bb:1b:a0:6a:2c:f2:02:ac:c6:ac:f6:
b5:1e:6b:3e:15:d2:15:bb:44:cc:e6:ee:06:42:ee:
0b:72:d6:39:ec:02:7d:ee:35:50:bf:d2:69:6a:0e:
81:ec:f5:72:6c:c1:01:2d:ed:89:69:e8:f2:c9:9a:
40:ed:c6:5e:98:62:13:9c:6f:96:cf:1a:1b:b6:31:
aa:fb:62:23:df:52:72:ad:d4:41:c2:61:eb:ba:d0:
c8:d6:f3:fc:e6:00:6d:f2:ae:7a:aa:cf:44:25:fb:
5d:b4:83:11:27:47:59:17:ae:7c:21:3b:d7:a6:c5:
aa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:87:07:AD:3D:53:E1:27:F9:EC:74:C9:EC:9C:CC:B9:C1:A3:93:8A
X509v3 Authority Key Identifier:
keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:25:76:cb:15:7e:8e:73:eb:bb:32:e4:99:ae:5f:fa:01:65:
47:3f:bf:01:90:7a:b7:d8:97:10:e0:02:20:6d:62:44:8e:aa:
cb:9f:91:7e:b0:9b:d9:66:ca:8c:99:66:1d:b7:76:48:a3:4a:
53:db:8b:11:bf:9d:85:4b:1f:ae:e4:eb:9d:1d:f2:da:29:0b:
58:6b:fe:a7:c6:ad:a7:31:85:0a:87:c9:0b:24:74:1a:fd:9a:
f1:5f:3d:e4:b3:01:cf:44:fc:b3:d1:a0:6c:27:9a:ae:86:6a:
d9:e0:a5:c3:38:1a:97:a4:62:9b:72:fa:98:15:c0:c6:b5:94:
8b:11:66:24:d1:03:f9:eb:54:d0:12:8f:11:d8:07:65:d7:b1:
7d:9f:51:9e:fa:c3:1a:60:f0:e3:1f:ff:50:c4:58:fc:94:19:
43:ce:24:82:87:9f:06:0e:10:42:04:e8:c6:c4:36:bb:38:da:
23:6f:66:8d:d4:45:0d:4b:0d:4c:af:da:0a:47:5a:19:23:2b:
41:92:e8:1c:3a:40:63:96:61:9e:1a:e3:7c:33:14:75:62:b7:
19:1e:b1:3d:7e:2c:8c:2c:66:f5:13:41:81:9f:9e:8d:cd:fd:
0b:d6:d4:1a:13:38:02:f8:34:6d:ed:1e:b0:20:75:57:82:b0:
34:2f:d6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:07:52 2026 by rpki-client