
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
File: bWlDJ6eLD158LQx0Y3dIHe3doAI.mft (raw, json)
Hash identifier: 2JKJXO2KMPf1+AXvldjWG+cInk/s5LTsLqcWY/fyMcQ=
Subject key identifier: 60:19:65:69:56:3E:0E:9D:2F:3E:7B:6C:F7:8D:46:8A:65:AB:21:85
Authority key identifier: 6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02
Certificate issuer: /CN=A9186392/serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002
Certificate serial: 0227
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
Manifest number: 0221
Signing time: Sun 01 Mar 2026 03:35:40 +0000
Manifest this update: Sun 01 Mar 2026 03:35:39 +0000
Manifest next update: Sun 08 Mar 2026 03:35:39 +0000
Files and hashes: 1: bWlDJ6eLD158LQx0Y3dIHe3doAI.crl (hash: fYWuyv1bmg97bmdiV7zl+hFk5euylqotfr9q5f8B3Ho=)
2: 3CF4087AD90611ED890F5D5FC4F9AE02.roa (hash: c52+qULtQI4nUSwyiYqI9B7pVL/XEZ9W/nL53Dz6dtI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl
rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186392, serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002
Validity
Not Before: Mar 1 03:35:39 2026 GMT
Not After : Mar 8 03:35:39 2026 GMT
Subject: CN=69a3b40b-8d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5d:08:61:29:61:38:e1:a7:1c:22:7d:8f:c5:
b8:32:04:f0:1f:0e:e7:ba:6c:c9:12:66:b8:06:58:
5a:2d:e8:d2:48:40:91:19:05:fd:09:70:0a:66:4a:
ec:30:86:4b:3e:41:e2:ee:6d:5f:e4:95:7a:0d:fb:
7a:c9:1e:56:0e:de:58:6a:42:1f:d7:60:f3:0e:48:
13:09:8b:76:86:11:fd:23:a8:0a:11:ca:58:e6:2e:
97:50:67:da:18:d5:85:84:7a:3d:59:c9:f1:90:6e:
e7:f6:c9:55:2b:0b:30:17:65:4d:38:a0:18:6a:4e:
ca:bc:4e:45:3a:3f:14:b8:d2:d8:bb:96:2b:60:28:
a5:45:21:5c:82:ec:3d:5d:59:b7:58:0f:8e:4d:44:
8a:32:e5:10:db:3c:52:a5:2b:0a:12:1c:d3:1b:35:
a3:1d:23:5d:a6:b3:86:f8:ea:6b:c0:28:f5:67:b2:
a8:e9:03:62:84:ec:82:b7:a5:c9:07:25:89:8a:7a:
f0:26:a0:43:7f:0c:b9:3a:3c:c9:7d:dd:3c:f9:dc:
5d:30:93:61:77:65:71:27:7f:1b:8e:36:e3:9d:49:
ea:7b:aa:8d:d3:e2:7f:0d:34:11:a3:72:ca:b0:78:
cb:4b:c4:09:ca:93:95:68:f7:48:b7:8d:10:65:6d:
53:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:19:65:69:56:3E:0E:9D:2F:3E:7B:6C:F7:8D:46:8A:65:AB:21:85
X509v3 Authority Key Identifier:
keyid:6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:30:de:aa:eb:eb:01:49:a2:06:7c:83:d7:41:b5:57:38:c6:
04:75:79:6e:e0:fb:ff:14:6d:4d:9b:9f:3e:6f:d4:31:da:86:
45:46:7c:3d:01:1f:ec:d4:ab:fb:e8:23:b4:85:ea:a8:4a:9f:
70:0a:7f:75:cb:5c:44:1b:6d:fa:79:55:ee:64:ff:07:11:c5:
9d:e5:60:7e:15:e4:aa:aa:b4:ec:07:61:5d:7c:ec:6a:66:68:
c8:a7:ea:77:91:8c:c9:a4:c4:a1:ff:6a:15:47:bc:43:b8:7f:
1e:6c:71:54:05:5d:3d:52:67:a3:6b:e7:5a:82:a8:ec:c1:76:
0a:5f:cc:17:26:49:e9:34:a6:33:84:94:1e:0d:95:1f:74:b1:
f5:ad:f5:8f:3a:81:17:9c:c3:57:9e:c0:af:e8:53:20:53:8e:
05:39:88:72:40:a6:27:e5:9a:0b:bf:57:06:a8:54:a5:4b:6b:
66:d3:a0:62:32:a3:4d:df:02:2e:f7:66:d5:a6:40:6d:e2:64:
d4:41:a8:6c:bd:ec:a6:8f:a6:1e:31:60:90:2a:2c:4f:73:08:
8e:09:96:c2:01:a8:80:12:d1:a2:80:c2:0e:e0:ac:a4:cc:7a:
f0:e1:96:3f:d7:e4:da:66:78:54:b2:92:fe:ac:ae:e9:17:46:
ab:bb:cb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:23:04 2026 by rpki-client