
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
File: bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft (raw, json)
Hash identifier: 3Ynwr1OJjSj6Ty6dVQKabBGM4FSwyJWITVaLXZJ5eeQ=
Subject key identifier: E9:36:E1:FF:39:FF:B4:85:4F:67:AB:B2:B8:1E:E0:C4:AD:07:B4:34
Authority key identifier: 6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33
Certificate issuer: /CN=A9117CD5/serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
Manifest number: 9C
Signing time: Mon 11 May 2026 07:29:56 +0000
Manifest this update: Mon 11 May 2026 07:29:56 +0000
Manifest next update: Mon 18 May 2026 07:29:56 +0000
Files and hashes: 1: bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl (hash: QOyPiKR8MEdq3gtHkWWglZdnN7o9G2ogUVg6BBv+6jg=)
2: 0BC2889A5FA911F0BE187C31C4F9AE02.roa (hash: f1UUKk9+4mpBrjo6aq4pvsFyFPqGlKiCEdavWTpQG0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl
rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117CD5, serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33
Validity
Not Before: May 11 07:29:56 2026 GMT
Not After : May 18 07:29:56 2026 GMT
Subject: CN=6a018574-72ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:ad:9e:5f:0b:51:6c:f0:8e:34:03:3e:d0:
8c:05:6a:cb:fd:55:e7:dd:68:8c:f2:ea:cd:45:91:
83:71:df:e3:d7:2b:b4:c4:98:fa:57:a1:62:f2:00:
38:00:f3:eb:c6:38:10:61:67:35:48:5d:0f:70:16:
78:90:30:2e:a2:02:9b:82:93:87:69:5c:d2:c6:e3:
cf:61:a3:fd:07:9b:af:a4:fe:40:26:93:f8:28:60:
8c:13:d5:fb:75:da:d6:d0:de:0a:68:0f:0d:23:c4:
1e:f5:77:ce:28:2e:e9:ca:9a:87:f5:67:4d:94:95:
7f:c5:25:5e:a6:77:53:9d:48:0e:1f:c2:69:31:7c:
a0:5d:66:00:49:f7:1c:4f:54:4c:e2:90:b9:99:ca:
e5:f4:5b:60:ee:07:dd:cc:cf:35:91:3a:41:10:6f:
55:d2:5c:9e:b0:ca:10:8b:3a:00:a0:49:1e:bf:99:
e9:a9:11:6c:8a:50:2e:bd:4b:28:15:df:d1:2e:b0:
dc:8a:43:04:59:4d:2c:50:47:95:98:b0:39:e9:77:
74:bb:ed:01:08:a1:79:d7:35:17:36:2f:b4:33:39:
85:5f:1d:53:56:4c:02:d5:23:e1:4c:49:53:e9:fc:
e1:2c:d8:ba:e3:f1:ee:d0:d3:97:ae:40:40:60:00:
5e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:36:E1:FF:39:FF:B4:85:4F:67:AB:B2:B8:1E:E0:C4:AD:07:B4:34
X509v3 Authority Key Identifier:
keyid:6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:98:cf:ed:d8:ac:7c:dc:fd:03:4b:3e:0f:1f:51:ee:c2:19:
5b:ac:76:f9:a6:80:ad:a7:cc:c0:79:eb:52:80:c2:3b:66:a3:
bb:dc:08:5d:40:0e:26:47:4b:a4:bc:9c:5a:63:78:fa:7c:bb:
bb:fa:a3:4d:bf:25:b9:9b:99:22:57:03:64:2c:d5:e1:ac:09:
b7:56:3f:1f:31:f6:08:69:ee:94:44:34:f1:89:53:b8:20:8c:
bf:19:33:16:b1:e4:a3:cb:12:f8:17:35:44:06:91:3c:e2:01:
c6:1b:97:f9:58:2a:01:34:72:10:38:47:b5:f9:42:b7:e4:bd:
78:c8:a6:7c:a8:73:7e:ff:26:36:2e:03:82:5f:28:b0:d9:c1:
49:2d:78:58:44:51:68:12:44:69:28:3e:24:e7:44:be:9b:e4:
b4:97:3f:2c:80:32:e5:3f:c2:80:29:5c:46:df:24:2e:a6:bb:
c8:a6:84:06:ac:30:3a:af:fa:f6:3f:ae:87:13:4e:2d:cb:b9:
5d:69:17:69:58:e5:ee:27:be:63:e4:ed:f5:b5:40:30:bb:1d:
fe:fc:97:9e:37:77:d7:d4:64:02:67:c9:61:38:1f:8c:7c:62:
f6:75:38:b5:c0:b1:a5:4d:fd:4e:01:f6:81:9c:7a:89:ed:77:
95:5a:fd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:05:23 2026 by rpki-client