
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json)
Hash identifier: o4pXGXqxKkDSKBeX0TPviPRUMXu9zvMrPHqbFQ95DWk=
Subject key identifier: 0C:D4:CC:25:99:3B:62:4B:08:F1:71:39:4E:0B:11:21:1B:85:80:EA
Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1
Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
Certificate serial: 1002
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
Manifest number: 0FEF
Signing time: Tue 28 Jul 2026 17:35:38 +0000
Manifest this update: Tue 28 Jul 2026 17:35:38 +0000
Manifest next update: Tue 04 Aug 2026 17:35:38 +0000
Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: Z2z2MU9GPDmpFK+e3ywhNN7vbKiuYe/gAQDvXSdp2ck=)
2: F6B0145ACD2011F0B3EB5B69C4F9AE02.roa (hash: k4cp/STum9L4RJNKMc3zj8Ri5aFzIHY5Vza6zrwXHLY=)
3: AA75695ACD2011F0B214A868C4F9AE02.roa (hash: 2mnTM/HTgdiRw1sKfT4sEhRjUUWStC3e6p+pRA/D//M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl
rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4098 (0x1002)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
Validity
Not Before: Jul 28 17:35:38 2026 GMT
Not After : Aug 4 17:35:38 2026 GMT
Subject: CN=6a68e86a-908b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:6c:2e:a3:4e:09:cc:91:21:11:91:b8:c9:
bd:1a:27:f1:e3:60:4f:d4:96:52:e9:fa:54:26:22:
67:e9:93:a6:a9:fb:77:e4:50:b2:2b:55:eb:33:be:
0e:37:a1:ac:08:99:b7:4f:66:80:c2:86:45:4a:d8:
2e:d2:ef:91:fb:ea:f8:3d:cc:b9:66:76:c0:fd:5e:
7a:e8:11:7b:ff:2f:34:5c:50:54:65:b5:81:3d:34:
d7:f3:57:6d:a8:32:20:6f:bf:60:e4:c6:a3:18:08:
3c:8c:b1:74:4f:0a:5e:bd:8d:0a:a3:c0:d7:35:e2:
d9:f0:d7:79:4a:7f:7f:43:64:db:d2:d0:1d:dc:2f:
39:b3:6f:52:6a:4d:74:15:7e:e0:f3:4d:60:83:02:
f1:1f:07:bf:63:18:5b:aa:da:05:98:f8:e7:df:b4:
26:84:5b:68:14:5f:6f:23:9a:c5:63:08:60:9d:46:
c6:b9:8a:3e:3b:bd:d3:fa:1d:7a:e6:1a:c5:94:8b:
87:7f:90:14:3e:11:70:51:4e:f0:69:22:8e:4e:c1:
13:ce:cf:36:49:d1:d8:8f:2e:62:85:91:73:4d:76:
db:bc:d1:99:39:c3:75:d7:e1:9a:41:45:fa:12:32:
3a:11:2b:83:9e:7c:7d:97:98:37:bd:85:c1:fb:15:
16:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D4:CC:25:99:3B:62:4B:08:F1:71:39:4E:0B:11:21:1B:85:80:EA
X509v3 Authority Key Identifier:
keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:21:f3:b9:56:85:4f:9d:63:44:ef:91:99:25:67:35:be:7c:
20:e7:ff:48:6f:81:f2:c3:75:16:51:fe:e8:8a:ca:d5:f8:5f:
1b:83:55:98:c7:a7:4f:9c:ea:4c:19:e0:80:a7:5c:e3:a5:65:
55:d9:de:e3:30:cc:69:98:99:02:93:d5:33:8d:1a:76:05:68:
68:82:f7:f2:39:bd:4c:e6:42:54:7c:99:eb:a3:c6:52:0e:ea:
a2:83:2d:f0:0e:c5:a1:e6:45:d6:7f:92:49:ef:49:78:57:89:
40:d3:63:6d:88:58:25:ce:86:a2:86:07:b1:c9:e0:93:4b:89:
69:8f:a2:3c:c3:23:ad:bc:f7:c4:41:11:56:23:1c:04:02:d6:
38:f2:b8:3c:de:dd:9b:b9:9d:cb:ba:87:be:39:51:6a:9d:62:
c6:cd:eb:b6:dd:01:84:2c:b0:c6:1e:3d:18:8f:47:b7:fb:95:
7c:36:b8:b8:b6:4b:e6:06:be:21:ee:0a:bf:eb:9e:0c:d5:77:
e4:48:c3:6e:69:03:87:d5:e7:d5:8c:fd:6d:fd:aa:37:85:5e:
a6:07:c0:7e:2f:25:60:a5:e2:4d:f6:0e:c0:08:2d:bf:90:cf:
67:ef:f5:bf:f6:39:88:44:8f:f0:29:6e:7f:46:d7:41:8d:b0:
43:8f:ab:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0NUM0NzM2OTMy
RkQ4NjM5RjEwHhcNMjYwNzI4MTczNTM4WhcNMjYwODA0MTczNTM4WjAYMRYwFAYD
VQQDEw02YTY4ZTg2YS05MDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAud5sLqNOCcyRIRGRuMm9Gifx42BP1JZS6fpUJiJn6ZOmqft35FCyK1XrM74O
N6GsCJm3T2aAwoZFStgu0u+R++r4Pcy5ZnbA/V566BF7/y80XFBUZbWBPTTX81dt
qDIgb79g5MajGAg8jLF0TwpevY0Ko8DXNeLZ8Nd5Sn9/Q2Tb0tAd3C85s29Sak10
FX7g801ggwLxHwe/YxhbqtoFmPjn37QmhFtoFF9vI5rFYwhgnUbGuYo+O73T+h16
5hrFlIuHf5AUPhFwUU7waSKOTsETzs82SdHYjy5ihZFzTXbbvNGZOcN11+GaQUX6
EjI6ESuDnnx9l5g3vYXB+xUWgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzUzCWZ
O2JLCPFxOU4LESEbhYDqMB8GA1UdIwQYMBaAFPm4+R0pKL6qNRzDRcRzaTL9hjnx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzJDQy9DQzE5Mzg3Njc4
REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3ZxbzFITU5GeEhOcE12MkdP
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1iajVIU2tvdnFvMUhNTkZ4SE5wTXYyR09mRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzJDQy9DQzE5Mzg3Njc4REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3Zx
bzFITU5GeEhOcE12MkdPZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAayHzuVaFT51jRO+RmSVnNb58IOf/SG+B8sN1FlH+6IrK1fhfG4NVmMenT5zq
TBnggKdc46VlVdne4zDMaZiZApPVM40adgVoaIL38jm9TOZCVHyZ66PGUg7qooMt
8A7FoeZF1n+SSe9JeFeJQNNjbYhYJc6GooYHscngk0uJaY+iPMMjrbz3xEERViMc
BALWOPK4PN7dm7mdy7qHvjlRap1ixs3rtt0BhCywxh49GI9Ht/uVfDa4uLZL5ga+
Ie4Kv+ueDNV35EjDbmkDh9Xn1Yz9bf2qN4VepgfAfi8lYKXiTfYOwAgtv5DPZ+/1
v/Y5iESP8Cluf0bXQY2wQ4+rwQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:43:57 2026 by rpki-client