
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft
File: bBH4O5qMvdIVMt3w6mHek4jRPGs.mft (raw, json)
Hash identifier: FTbpKAf5WwhcEmXwlI8cghfrJ7GwcKKiIHnUIGP4YVU=
Subject key identifier: 82:FF:C5:ED:37:52:29:78:6B:78:5B:30:76:0E:0F:6B:3E:EE:3F:08
Authority key identifier: 6C:11:F8:3B:9A:8C:BD:D2:15:32:DD:F0:EA:61:DE:93:88:D1:3C:6B
Certificate issuer: /CN=A917D958/serialNumber=6C11F83B9A8CBDD21532DDF0EA61DE9388D13C6B
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft
Manifest number: 0155
Signing time: Wed 23 Sep 2026 05:03:20 +0000
Manifest this update: Wed 23 Sep 2026 05:03:19 +0000
Manifest next update: Wed 30 Sep 2026 05:03:19 +0000
Files and hashes: 1: bBH4O5qMvdIVMt3w6mHek4jRPGs.crl (hash: ZCTErfkI4lmS6hhCmxFa5t1quzeLe8bWDcB+bw4u6vg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.crl
rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D958, serialNumber=6C11F83B9A8CBDD21532DDF0EA61DE9388D13C6B
Validity
Not Before: Sep 23 05:03:19 2026 GMT
Not After : Sep 30 05:03:19 2026 GMT
Subject: CN=6ab35d98-8c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:5d:c2:ed:f8:30:9e:fe:7a:9a:ba:33:d3:
97:8e:ab:10:29:62:15:54:c8:62:b2:0a:c3:97:71:
79:c0:4d:34:be:4e:44:06:6f:5c:16:d7:fa:e3:1e:
57:c2:90:1d:e8:14:b3:a0:30:1d:d2:68:78:c5:df:
05:c1:dc:3e:3f:74:99:05:d1:55:40:0e:b8:1b:ff:
78:2f:6f:6b:a1:d2:28:c0:a3:28:d9:c2:49:de:fd:
3e:e2:22:9f:c9:2c:c7:82:f3:9c:de:bc:84:10:a2:
74:fd:f1:b5:7e:68:b1:0d:8a:eb:41:b4:a2:27:de:
e1:4a:9e:b2:77:f0:04:f2:e8:80:34:30:41:00:cf:
2c:15:11:12:3e:e2:19:dd:8a:66:6d:18:67:e5:48:
b1:33:a9:37:f1:6b:16:9d:16:b7:a9:9b:0d:ad:e1:
e2:58:1e:67:b6:f4:af:c7:c3:75:b0:2a:a2:d4:3d:
eb:c9:d1:3a:d1:25:51:36:6d:5e:cb:96:19:28:21:
b8:f6:cf:82:9c:ec:1e:48:21:25:e1:07:b5:e1:32:
59:aa:0c:c7:20:e0:c6:ba:86:a9:3e:36:54:d1:cf:
8e:af:22:4a:d9:e9:3d:62:a7:8e:57:79:17:2f:d8:
18:ce:7d:1c:aa:73:da:c9:28:df:03:5c:90:0c:d1:
96:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FF:C5:ED:37:52:29:78:6B:78:5B:30:76:0E:0F:6B:3E:EE:3F:08
X509v3 Authority Key Identifier:
keyid:6C:11:F8:3B:9A:8C:BD:D2:15:32:DD:F0:EA:61:DE:93:88:D1:3C:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9e:3a:e2:17:0a:fc:72:e0:45:df:c6:2c:4f:6c:29:94:2b:
4d:32:21:cd:1b:2b:1b:27:80:c6:98:a0:5f:a9:94:00:aa:55:
3b:bb:46:5f:9b:84:0c:20:25:e9:b3:0b:d8:a9:da:66:fd:c3:
4f:a6:12:db:07:f4:52:6d:d6:1e:bd:58:9c:02:95:3f:36:a3:
f7:e7:68:3c:c2:3d:3d:a0:85:e1:a3:0e:c2:14:0c:55:01:e4:
93:15:49:27:79:09:04:a9:8f:40:72:47:2b:f7:68:ea:2f:9e:
dc:2e:fe:8f:cd:e9:77:35:49:c8:45:47:23:f5:b3:f3:ea:3b:
a2:32:5c:8d:31:84:7d:a2:34:92:4c:76:24:c2:6d:a0:99:ba:
e0:3b:bf:99:75:fd:83:d3:6f:83:46:a7:e6:55:73:e2:a6:2c:
f0:23:68:09:68:05:91:93:a2:c4:3b:52:e7:dd:3d:90:bb:d1:
9f:c0:68:bc:ab:4b:7b:a9:e0:c3:3c:1e:75:26:6c:9d:a7:59:
72:e2:e0:85:bc:b7:1a:8d:7a:9e:f5:ae:5d:97:79:9f:4c:18:
b1:83:d1:a6:84:d0:80:48:0f:ba:d4:e2:1c:bf:e9:0f:55:ab:
57:b2:72:f7:d6:ad:28:dd:48:1c:9b:0e:55:00:cc:fb:8c:ae:
f9:f8:46:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:43:31 2026 by rpki-client