
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
File: bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft (raw, json)
Hash identifier: vCYMYX+ihu4TpJS1ScWJI8Qlf2wpnHaliR3Z1dxCAog=
Subject key identifier: A2:1A:82:33:14:85:6B:2D:E9:37:FD:47:B8:45:51:0F:ED:FF:8C:85
Authority key identifier: 6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33
Certificate issuer: /CN=A9117CD5/serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33
Certificate serial: C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
Manifest number: C0
Signing time: Thu 23 Jul 2026 08:45:13 +0000
Manifest this update: Thu 23 Jul 2026 08:45:12 +0000
Manifest next update: Thu 30 Jul 2026 08:45:12 +0000
Files and hashes: 1: bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl (hash: lPTq9hceHz0/CD5miOfBwViFiOmpKFphXJk/fdgl9E0=)
2: 0BC2889A5FA911F0BE187C31C4F9AE02.roa (hash: f1UUKk9+4mpBrjo6aq4pvsFyFPqGlKiCEdavWTpQG0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl
rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:45:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117CD5, serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33
Validity
Not Before: Jul 23 08:45:12 2026 GMT
Not After : Jul 30 08:45:12 2026 GMT
Subject: CN=6a61d499-9f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6b:5d:52:2d:45:96:76:e5:68:28:a4:d7:9e:
25:ef:b0:6b:22:c8:ac:13:0c:b2:c9:d1:c5:0c:3c:
66:d0:b2:82:bb:89:c4:0b:87:d5:0f:f5:12:5a:e0:
0e:1a:b5:f4:dc:a8:77:0b:44:d7:b6:ac:21:34:82:
a4:f1:dc:42:f6:b1:5d:87:ff:0e:a0:cb:45:25:66:
c7:ca:b6:2d:a4:e5:4f:92:0d:6e:a4:8e:86:0f:c6:
c4:40:bd:bb:44:02:1a:ec:d0:e8:d8:f8:aa:a7:b4:
6f:ea:68:a9:f6:76:58:9a:63:55:70:54:40:0f:e6:
d6:51:f0:0f:63:44:99:d1:61:9c:2c:35:f1:05:46:
a7:1e:30:82:49:b4:b1:ca:c5:8b:61:0a:66:07:95:
51:b1:63:56:06:07:06:8b:30:bd:92:57:a5:2e:9d:
c9:93:8b:7e:3e:8e:42:7b:52:ba:fc:79:c1:ee:7a:
69:75:0a:d2:61:6d:3f:ff:21:ef:bd:22:b7:d7:8d:
58:ae:d8:a5:a7:6c:6b:61:b8:fe:14:df:b3:e9:da:
d2:66:4b:7d:2d:79:61:56:d0:17:ea:cf:7e:52:f4:
0b:57:be:dc:4c:5b:9c:36:8f:d9:2f:8e:3f:4d:d8:
2c:73:7e:2f:03:a2:2a:bb:eb:25:a6:5e:47:16:44:
dc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1A:82:33:14:85:6B:2D:E9:37:FD:47:B8:45:51:0F:ED:FF:8C:85
X509v3 Authority Key Identifier:
keyid:6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:76:64:f7:02:e4:c2:f3:0b:99:0a:57:0d:17:33:7f:c1:9c:
f1:9b:c2:43:e0:5d:7c:59:8b:c0:88:ca:3e:e2:cc:9f:a2:8c:
ce:5f:a3:89:4d:8b:85:12:d7:a8:ae:eb:ee:76:54:c2:78:aa:
d9:f0:f1:16:9c:99:83:f9:e8:dc:6c:e1:06:4d:3b:c6:ac:cd:
60:2c:96:72:38:4b:e9:72:45:8f:9d:4c:ed:39:7b:ed:87:f5:
75:68:bd:c9:f6:86:78:ca:f3:5e:ac:06:b3:4f:03:e6:5b:62:
f4:63:b1:9c:ca:38:c8:ea:93:cb:77:3e:0c:2f:aa:fa:a5:28:
01:b1:bd:cc:65:68:5e:47:9d:5c:3f:29:f4:29:79:cf:21:6e:
cd:25:fb:85:88:9c:c5:e4:e8:c3:39:09:a9:8a:74:1e:94:e4:
c1:f9:f2:e5:2b:75:e0:18:26:ae:38:b0:15:f7:ed:7a:7a:ff:
4f:e7:c8:03:aa:64:5d:dc:db:bf:54:3f:1c:b0:d9:38:91:f8:
ed:3f:d8:93:d4:97:f1:15:0d:c3:95:33:15:9e:7d:56:d0:b0:
b0:8b:3d:62:fc:28:39:bd:54:b2:eb:e9:11:31:5a:73:81:58:
77:61:bb:d2:9d:c8:b2:70:2d:c9:14:67:0c:2b:03:4b:09:ca:
1a:7f:ff:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:54:17 2026 by rpki-client