
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
File: bkWq8A0m8fB31nRzkUTUuMOU87g.mft (raw, json)
Hash identifier: kckOwlNJCri8xHbIp8Zu84cwVFprcTraWOZ6Ew0JIy4=
Subject key identifier: 79:A5:8B:15:42:CB:CF:A4:32:FA:51:97:4D:F6:56:6B:C6:C5:39:E7
Authority key identifier: 6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8
Certificate issuer: /CN=A919F0DA/serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8
Certificate serial: 24D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
Manifest number: 6320
Signing time: Sun 20 Sep 2026 14:15:26 +0000
Manifest this update: Sun 20 Sep 2026 14:15:26 +0000
Manifest next update: Sun 27 Sep 2026 14:15:26 +0000
Files and hashes: 1: bkWq8A0m8fB31nRzkUTUuMOU87g.crl (hash: +pFZfhmN9V4h80R383+w3TDhclrFVHU+SmY6KWX8aYo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl
rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9431 (0x24d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA, serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8
Validity
Not Before: Sep 20 14:15:26 2026 GMT
Not After : Sep 27 14:15:26 2026 GMT
Subject: CN=6aafea7e-abb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:86:2d:50:29:f5:77:7d:5a:5f:e8:4e:7a:65:
05:fe:42:74:f0:50:9c:c4:46:6c:1c:a7:12:99:10:
d6:0f:43:a0:d8:b4:da:3f:fe:05:01:40:f7:1e:d2:
09:00:16:1c:8a:6e:71:48:49:d0:b1:6b:1c:6d:4a:
58:70:ef:31:f6:d5:22:ca:24:de:44:05:cb:88:9f:
22:88:ed:90:13:89:f8:1d:c8:d0:26:ca:df:4b:d3:
b3:22:a8:00:73:e2:ba:b8:6d:c6:d1:2f:fd:96:46:
e7:58:0e:77:e8:0d:8b:8d:66:16:1a:31:39:6a:28:
38:1d:20:34:a4:39:f4:4a:3c:26:d1:af:ad:c2:af:
1d:bc:a7:e4:92:69:56:38:b3:42:5e:32:69:de:46:
5c:7a:42:eb:b0:82:89:da:97:73:e0:be:18:ef:9e:
e7:1b:98:9e:c1:93:e5:75:3b:9f:45:c6:8e:ba:26:
1d:b2:f8:b0:91:69:ab:49:66:6a:d5:ad:b8:d1:8e:
39:95:d1:07:a4:da:20:42:29:58:14:38:2f:b6:72:
ba:c9:f4:91:0a:53:72:34:f3:94:dd:bb:2f:1c:8a:
d2:0c:c9:d3:c0:ce:0a:ee:db:59:37:9f:94:a9:eb:
52:36:51:c0:24:fd:b7:b2:6a:f9:44:23:01:54:f4:
26:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A5:8B:15:42:CB:CF:A4:32:FA:51:97:4D:F6:56:6B:C6:C5:39:E7
X509v3 Authority Key Identifier:
keyid:6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ed:4d:9b:72:16:92:92:fc:ea:a5:e9:07:3e:85:f9:33:e7:
a2:c6:f2:b0:72:49:1e:c2:30:9b:08:3f:a2:f1:cd:2b:d2:81:
a5:52:10:2a:03:cf:a4:be:25:2c:c6:a4:45:80:9a:8e:5b:e4:
60:82:1a:19:95:17:26:11:26:95:c6:bc:74:55:bc:f9:e0:8e:
41:a8:57:ef:f4:e7:ae:48:d3:e9:b1:86:9b:cf:0b:2c:a2:cd:
d1:ae:56:86:82:b6:12:59:7b:04:43:12:39:85:95:f9:eb:ef:
ef:cf:fa:07:d7:70:0a:fd:09:8b:ec:67:83:ab:0e:91:99:8a:
e5:c6:d3:d4:3e:82:c8:55:ff:f7:ea:1e:03:3b:1f:70:ba:f5:
51:df:ad:33:3b:c9:e5:6f:18:ae:6e:b1:cc:c8:20:79:2f:33:
55:f9:ee:25:43:c3:32:58:41:43:4a:76:6c:f3:be:b0:79:79:
d8:90:62:bb:3a:de:53:88:b8:30:ee:63:ec:73:1f:3c:aa:42:
dd:7e:37:83:a8:87:2e:a1:04:9a:53:52:49:69:e3:55:32:2b:
0d:37:2c:19:af:66:56:08:77:0f:68:84:51:3b:c4:95:a1:f0:
fd:fd:d7:00:30:54:ee:74:ad:7d:d0:da:85:7e:07:47:b1:8f:
ca:7a:3b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:02:26 2026 by rpki-client