
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
File: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft (raw, json)
Hash identifier: Vcjrj/ShKAKqDmHDN9JstTJijDCuTMSvZ6VzTo1cwMc=
Subject key identifier: 58:83:B9:87:24:F0:0C:63:82:D3:FA:B4:AE:5B:7E:CA:6A:42:EA:1F
Authority key identifier: 6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB
Certificate issuer: /CN=A9196172/serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
Certificate serial: 1236
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
Manifest number: 1220
Signing time: Thu 24 Sep 2026 17:05:48 +0000
Manifest this update: Thu 24 Sep 2026 17:05:47 +0000
Manifest next update: Thu 01 Oct 2026 17:05:47 +0000
Files and hashes: 1: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl (hash: SJj4gSwva2zUD8b950iOs/eH3N245zyPd173nWccbLI=)
2: 2CE73CF20F1D11E991F4271EC4F9AE02.roa (hash: dwjkn2DW2HgGCHSm1qCTooFpBKfe2SamOh5enGZ3aMA=)
3: 2D9B5B380F1D11E991F4271EC4F9AE02.roa (hash: l9qxQIDYZFB8lqVkzL19z7LMxH3Tman8VfcseXtGTGQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl
rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:05:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4662 (0x1236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196172, serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
Validity
Not Before: Sep 24 17:05:47 2026 GMT
Not After : Oct 1 17:05:47 2026 GMT
Subject: CN=6ab5586c-b340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:5a:25:2f:b7:7a:70:90:92:4d:00:f5:fc:
a7:21:28:ca:be:b6:8e:46:47:08:ed:f4:f8:8a:2b:
0d:5d:7d:e7:0f:39:de:d1:de:34:0b:08:e4:5e:a8:
37:d0:d0:e4:b7:5b:be:86:09:c6:d6:5a:5f:cf:e6:
ce:55:4e:3b:68:f9:fe:e7:0f:ac:51:33:98:1a:8e:
3b:b7:33:1c:a1:cb:10:de:53:bb:38:bc:94:b0:62:
6d:32:25:e3:fe:57:3e:26:7a:72:73:2d:c4:19:64:
94:16:e6:ef:84:c3:dc:55:d1:50:0e:33:c9:fa:e5:
89:99:1d:a3:c2:d2:f3:1e:d4:7c:e8:00:23:e2:26:
22:a2:7c:e5:81:b5:63:e5:bc:cd:03:2b:77:85:ae:
a8:2b:f2:35:33:52:6b:89:5e:e9:61:52:8d:4b:58:
0d:27:6b:60:e4:8c:14:8e:54:55:20:2c:20:fc:8b:
0f:c3:15:75:18:fb:a5:ab:90:95:0e:43:44:10:46:
f5:c1:1e:3a:21:5f:f7:dd:f7:1d:57:60:11:65:1b:
54:25:a4:ce:45:06:d3:26:48:8c:26:89:ed:26:c5:
e7:4f:92:d6:b2:65:7b:ba:81:53:5b:bc:a4:5e:93:
29:90:d8:7d:13:7a:6e:29:5f:11:17:5d:64:b1:62:
f0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:83:B9:87:24:F0:0C:63:82:D3:FA:B4:AE:5B:7E:CA:6A:42:EA:1F
X509v3 Authority Key Identifier:
keyid:6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:63:eb:57:d1:76:2b:16:3d:f7:96:ba:7d:92:02:51:bf:24:
7e:2f:ba:bf:66:57:ea:9a:7c:23:96:73:a9:02:7a:1f:a9:25:
73:b3:d8:45:96:f5:27:19:9f:59:8a:8f:03:bc:c4:29:cf:56:
72:47:32:df:ec:f9:d8:5b:ea:06:ec:92:10:73:0c:52:4d:d6:
2e:b4:12:b6:81:20:df:8a:eb:07:51:97:7d:01:01:5b:59:f6:
84:5a:8b:90:c0:d8:44:20:5b:c8:76:e4:14:20:f7:8e:bc:88:
92:08:d0:13:9c:57:15:33:3d:fb:27:5c:7b:3d:11:49:8c:3e:
8e:27:37:ca:b6:3c:14:0b:5a:af:06:a7:8c:0b:43:a4:2c:f2:
55:e7:d4:5d:01:b9:28:a2:a5:7a:ab:75:1a:ea:a8:fd:0a:12:
52:08:46:8f:29:85:ad:a1:cb:4d:29:87:57:f5:6e:7c:7c:59:
d5:e3:9c:c0:f4:96:e8:12:ac:41:d2:f9:40:bb:e1:2d:db:1d:
27:3c:53:27:67:3e:17:8c:5f:c7:2a:e1:d3:71:94:0c:ee:c4:
44:3e:8f:b6:80:7a:ca:07:05:c6:f3:37:d8:df:36:9c:ad:71:
ff:e9:70:eb:26:3c:d0:54:4e:73:57:eb:f8:d6:72:05:87:a9:
96:14:5b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:50:10 2026 by rpki-client