
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
File: bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft (raw, json)
Hash identifier: t6O7+M28OoU4AJc6YPbzn5+z7zOjAgrRhrvGNHSVxmg=
Subject key identifier: 42:2B:91:4C:35:87:DD:DA:F2:6C:80:5B:DA:8D:26:3A:25:D8:EE:C6
Authority key identifier: 6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33
Certificate issuer: /CN=A9117CD5/serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
Manifest number: 84
Signing time: Wed 25 Mar 2026 06:51:01 +0000
Manifest this update: Wed 25 Mar 2026 06:51:01 +0000
Manifest next update: Wed 01 Apr 2026 06:51:01 +0000
Files and hashes: 1: bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl (hash: LBQOcC2mkRF+DCs4j1LbcKl7ZbtL6smIWtuIPCZcmT8=)
2: 0BC2889A5FA911F0BE187C31C4F9AE02.roa (hash: f1UUKk9+4mpBrjo6aq4pvsFyFPqGlKiCEdavWTpQG0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl
rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117CD5, serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33
Validity
Not Before: Mar 25 06:51:01 2026 GMT
Not After : Apr 1 06:51:01 2026 GMT
Subject: CN=69c385d5-0592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:fd:e8:e7:c6:77:da:b3:7e:7a:f6:83:33:
80:54:1d:32:e8:11:ab:4d:e2:73:08:95:e3:95:59:
c8:25:c4:36:9c:0d:ea:b1:29:43:b0:81:33:a5:e0:
dc:08:87:67:9d:b5:78:5d:66:13:0e:bb:d0:79:0d:
7f:73:a8:4e:33:7f:a5:41:59:70:a4:c4:07:4c:cb:
be:e7:80:d0:b1:03:95:8a:b0:15:7e:b0:ef:16:3e:
f8:7f:bc:09:5c:d4:ba:9a:15:fe:f6:d2:68:0c:38:
9a:b1:22:4f:ad:6b:68:46:75:2f:eb:86:a9:34:3b:
60:71:21:20:8e:7c:ef:c5:3d:ff:3c:a8:93:ac:3a:
f0:a7:64:d1:cc:ff:06:e3:a4:32:58:bb:27:cb:e6:
fe:56:a4:95:ee:09:06:41:ab:8e:71:3b:ba:ab:8f:
28:5a:2e:b8:dc:6d:9e:24:5e:3a:fc:56:29:a8:be:
90:29:e4:97:a7:a3:98:37:49:6f:73:cf:74:0d:25:
22:57:41:6a:39:c6:72:e8:8c:28:6b:49:94:b8:d0:
38:18:a4:10:33:5d:83:fc:df:18:45:49:25:f9:4e:
ee:3d:8d:27:61:13:16:d6:1d:a6:43:6b:86:91:0e:
b4:ea:00:47:39:f1:7e:f4:f4:ae:95:29:ff:66:5a:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2B:91:4C:35:87:DD:DA:F2:6C:80:5B:DA:8D:26:3A:25:D8:EE:C6
X509v3 Authority Key Identifier:
keyid:6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:0d:b5:21:cb:c6:15:76:d7:93:5c:7e:0d:e7:90:0e:01:4b:
a1:ed:18:ed:10:a8:dd:31:15:7f:e5:a6:53:b1:38:68:d4:86:
c3:ad:97:02:7c:d8:a6:4b:58:16:9d:30:89:9c:23:8c:9c:ef:
65:50:9f:06:b5:b1:c7:32:10:53:07:f6:87:bf:af:80:9a:3c:
3e:11:8d:71:15:6e:75:c1:95:a3:a1:fc:cd:65:f7:2f:bb:99:
81:ce:05:62:90:94:7d:e9:2f:34:ea:2d:93:74:e8:b7:14:03:
3f:4e:67:e7:ed:cf:0e:6c:88:e7:1c:68:ae:04:34:53:c1:e2:
99:58:4b:77:aa:c0:b4:f9:4d:8b:dd:67:b1:68:79:0c:d3:c4:
2b:38:b5:d8:88:d1:f5:05:91:bd:98:3b:35:90:27:f2:46:c8:
8b:bc:e2:58:68:97:eb:90:3a:48:49:c5:a0:9f:0a:b3:f7:28:
65:ba:ef:c6:4f:24:f0:65:88:09:57:5c:01:35:13:41:9c:83:
4f:76:9d:ff:fa:c3:3f:86:3b:1c:82:54:35:75:e2:a0:0d:fd:
88:90:d9:ff:d1:84:27:ea:39:7e:cc:4d:a0:b6:c4:12:70:ad:
a5:a5:62:b3:af:7a:97:4d:17:b6:4c:dd:a6:14:92:5d:d8:76:
e2:66:fd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:00 2026 by rpki-client