
$ rpki-client -vvf rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
File: bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft (raw, json)
Hash identifier: GZb6x+9Npccf+F6ssMysvsX9imZMIX/XA9Pa1qFrais=
Subject key identifier: DE:4E:58:E1:54:13:D0:9E:B2:E1:07:8C:92:2F:06:DE:37:6D:2B:11
Authority key identifier: 6E:1F:12:40:9C:F3:9B:F9:13:C4:32:B5:87:6F:FA:FD:9F:D0:61:95
Certificate issuer: /CN=A919243F/serialNumber=6E1F12409CF39BF913C432B5876FFAFD9FD06195
Certificate serial: 90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
Manifest number: 8D
Signing time: Mon 27 Jul 2026 09:42:08 +0000
Manifest this update: Mon 27 Jul 2026 09:42:07 +0000
Manifest next update: Mon 03 Aug 2026 09:42:07 +0000
Files and hashes: 1: bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl (hash: iq/+0dY4Wl5ZLPguKE6djlpuAcNdFMrSRQ8bZDVJPjs=)
2: 384B24AAB65511F0AE39E37FC4F9AE02.roa (hash: 5Y743cqmfS64WE3oNhO7FpcyGYqVQg0KBej2FkM8DC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl
rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:42:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919243F, serialNumber=6E1F12409CF39BF913C432B5876FFAFD9FD06195
Validity
Not Before: Jul 27 09:42:07 2026 GMT
Not After : Aug 3 09:42:07 2026 GMT
Subject: CN=6a6727f0-b0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fb:eb:2f:3d:46:01:38:5e:01:e0:a7:f5:90:
ed:2f:96:40:e5:e3:4e:c2:6f:b0:54:62:33:5d:85:
cd:8b:3b:83:bb:31:1a:c5:8a:34:58:3f:4c:53:b8:
50:e2:81:ce:ef:bf:58:22:fb:f8:d0:ef:0c:80:9a:
d5:20:98:c5:46:48:b7:3c:17:20:8d:3e:e9:42:60:
79:f9:20:29:68:f1:3d:0f:3d:db:4f:8a:ce:4d:68:
0e:50:b9:15:18:34:60:ae:e7:1b:a0:b3:16:52:79:
7b:87:61:2b:29:aa:1f:f4:38:47:72:20:f6:7c:84:
71:3b:01:11:af:89:ae:09:ce:5b:53:eb:5f:82:9e:
35:d3:ce:11:72:ec:d6:8d:9b:64:98:f4:a7:0d:d6:
a9:bb:bb:76:12:9c:f6:68:ff:33:e1:42:42:71:3b:
4f:5c:f0:a2:ac:f9:c7:e1:79:bf:d5:e7:8a:98:41:
a8:68:56:3f:37:e1:c2:97:b5:95:ab:79:e1:e4:36:
d1:c1:cb:ed:ae:8b:f5:82:fa:ca:1e:cb:ad:20:e6:
34:db:85:10:c0:79:93:25:b8:0d:88:68:6f:b3:ef:
d9:c4:d0:71:d3:ed:e6:0a:57:f0:ee:8a:b9:4e:67:
e0:b0:e2:79:36:95:99:74:e0:b4:7a:81:54:cd:0a:
4e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4E:58:E1:54:13:D0:9E:B2:E1:07:8C:92:2F:06:DE:37:6D:2B:11
X509v3 Authority Key Identifier:
keyid:6E:1F:12:40:9C:F3:9B:F9:13:C4:32:B5:87:6F:FA:FD:9F:D0:61:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cd:a8:82:99:ff:47:91:73:70:e8:64:2e:8e:72:ec:39:dc:
83:15:ae:b8:52:db:61:c7:51:63:a7:08:64:6c:cb:8a:8b:5a:
71:1c:87:91:c5:54:34:f1:d7:b0:1b:d7:d2:e9:f7:15:f1:2d:
65:16:29:bb:5d:9a:68:a2:38:6c:6e:bc:90:f2:66:a5:a4:98:
85:ab:80:36:cf:fb:ba:98:27:8b:6f:96:e5:6e:9b:36:25:1a:
8e:8c:be:c1:65:e1:d9:c9:45:51:9f:f8:c3:27:b4:2a:f9:53:
96:a4:ca:c6:b7:ee:ac:ed:1b:66:f5:50:01:71:7f:a1:b4:ca:
db:e5:30:fc:2a:2a:77:d9:f0:57:6a:34:b8:68:6b:d2:f2:0e:
e4:f4:66:72:e3:5c:2f:c2:ef:bf:ee:01:57:c4:d4:e2:73:4f:
6b:80:a9:4d:09:69:11:23:ae:82:fa:20:99:d8:e0:06:55:e7:
06:95:3a:ce:5c:61:39:1c:c9:c2:6a:83:a3:44:2d:09:a6:20:
1a:bd:90:ac:38:28:dc:3a:68:f0:52:72:6f:82:fe:1e:17:86:
02:ed:c7:35:e4:8c:71:bd:15:51:4f:7e:a3:c8:70:db:03:49:
18:21:64:21:95:ae:a4:fe:f5:ab:21:5d:4b:00:c1:86:81:ae:
b4:d1:bf:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTI0M0YxMTAvBgNVBAUTKDZFMUYxMjQwOUNGMzlCRjkxM0M0MzJCNTg3NkZGQUZE
OUZEMDYxOTUwHhcNMjYwNzI3MDk0MjA3WhcNMjYwODAzMDk0MjA3WjAYMRYwFAYD
VQQDEw02YTY3MjdmMC1iMGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnfvrLz1GATheAeCn9ZDtL5ZA5eNOwm+wVGIzXYXNizuDuzEaxYo0WD9MU7hQ
4oHO779YIvv40O8MgJrVIJjFRki3PBcgjT7pQmB5+SApaPE9Dz3bT4rOTWgOULkV
GDRgrucboLMWUnl7h2ErKaof9DhHciD2fIRxOwERr4muCc5bU+tfgp41084RcuzW
jZtkmPSnDdapu7t2Epz2aP8z4UJCcTtPXPCirPnH4Xm/1eeKmEGoaFY/N+HCl7WV
q3nh5DbRwcvtrov1gvrKHsutIOY024UQwHmTJbgNiGhvs+/ZxNBx0+3mClfw7oq5
TmfgsOJ5NpWZdOC0eoFUzQpOewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN5OWOFU
E9CesuEHjJIvBt43bSsRMB8GA1UdIwQYMBaAFG4fEkCc85v5E8QytYdv+v2f0GGV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjQzRi9FOERDQTYzMkI2
NTQxMUYwOUVDRjRCN0ZDNEY5QUUwMi9iaDhTUUp6em1fa1R4REsxaDJfNl9aX1FZ
WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JoOFNRSnp6bV9rVHhESzFoMl82X1pfUVlaVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjQzRi9FOERDQTYzMkI2NTQxMUYwOUVDRjRCN0ZDNEY5QUUwMi9iaDhTUUp6em1f
a1R4REsxaDJfNl9aX1FZWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn82ogpn/R5FzcOhkLo5y7DncgxWuuFLbYcdRY6cIZGzLiotacRyHkcVUNPHX
sBvX0un3FfEtZRYpu12aaKI4bG68kPJmpaSYhauANs/7upgni2+W5W6bNiUajoy+
wWXh2clFUZ/4wye0KvlTlqTKxrfurO0bZvVQAXF/obTK2+Uw/Coqd9nwV2o0uGhr
0vIO5PRmcuNcL8Lvv+4BV8TU4nNPa4CpTQlpESOugvogmdjgBlXnBpU6zlxhORzJ
wmqDo0QtCaYgGr2QrDgo3Dpo8FJyb4L+HheGAu3HNeSMcb0VUU9+o8hw2wNJGCFk
IZWupP71qyFdSwDBhoGutNG/EQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:18:32 2026 by rpki-client