
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
File: bu53G7POfpjbOWDE2C90Kiz36Ek.mft (raw, json)
Hash identifier: jbsQBXIj3Vno7Dap56ezFEt4pFpo9tP2cNP0agJIo+c=
Subject key identifier: DE:E7:6A:B5:5C:97:7D:E8:79:CF:FC:25:ED:25:A4:F1:11:2E:F4:18
Authority key identifier: 6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49
Certificate issuer: /CN=A9118827/serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849
Certificate serial: 05DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
Manifest number: 05D5
Signing time: Tue 22 Sep 2026 22:42:01 +0000
Manifest this update: Tue 22 Sep 2026 22:42:01 +0000
Manifest next update: Tue 29 Sep 2026 22:42:01 +0000
Files and hashes: 1: bu53G7POfpjbOWDE2C90Kiz36Ek.crl (hash: /b+afaLgpdZs2UCnXu2VLHEeUIKgqYYicg0rtD9FH0M=)
2: 95D9A9461BEC11EC97B39812C4F9AE02.roa (hash: v0rJzZLI+1O5nfOP2tDFakvguyT8MUXLjwiVOqN97W8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl
rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1500 (0x5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118827, serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849
Validity
Not Before: Sep 22 22:42:01 2026 GMT
Not After : Sep 29 22:42:01 2026 GMT
Subject: CN=6ab30439-8d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:bb:12:1e:a1:16:38:68:83:b4:b7:8d:d5:
4a:18:35:45:7e:8f:9b:16:45:b2:1b:6b:98:62:bb:
c8:0f:58:23:9e:3a:bf:b0:36:bd:a7:57:9f:d2:fa:
34:17:c7:1e:c1:56:2e:0a:73:c9:44:d5:52:98:25:
f9:be:9e:9b:54:ba:a9:b5:1a:b7:87:09:9a:bd:aa:
5e:12:93:8e:0e:5b:d8:62:d7:3c:26:b3:e0:0b:c4:
e1:bb:be:08:1e:b1:38:1e:7c:be:29:6a:ed:a6:4d:
10:99:cf:6e:88:7e:df:14:65:43:e7:e7:fe:e6:d6:
48:8c:44:2e:9c:09:0b:d8:b7:58:7c:46:09:35:ca:
cc:e4:06:8f:48:33:d0:e6:79:c6:d7:f6:12:4b:c8:
fe:7e:da:67:86:4f:59:86:f9:a8:4c:79:52:e4:56:
8d:d5:a3:a7:ce:09:a0:cd:98:a2:bd:98:15:09:04:
e8:23:03:67:1b:6f:4c:6d:d0:c0:ef:f7:e5:f3:1a:
a1:2a:d7:2b:66:b7:ad:b1:ec:77:82:cc:73:3e:b4:
70:32:fe:98:be:0f:63:5d:80:2d:be:ac:58:cb:ea:
43:d1:6d:a3:a9:e2:fc:76:9d:b0:36:e8:98:29:99:
cd:24:4c:ef:7e:8c:61:8e:f6:21:d7:88:34:5b:48:
8c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E7:6A:B5:5C:97:7D:E8:79:CF:FC:25:ED:25:A4:F1:11:2E:F4:18
X509v3 Authority Key Identifier:
keyid:6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:eb:05:44:77:d6:c7:fa:9f:35:d1:d5:25:06:60:3a:47:9e:
91:06:e8:c9:5c:9f:5a:99:c7:48:fb:16:58:6d:c0:d0:c1:30:
52:17:dc:fd:6a:60:15:dc:8c:95:8b:c2:71:5d:6e:41:60:e8:
a7:73:f9:40:53:03:65:c0:7b:db:de:52:81:30:2a:bc:2e:e2:
af:bd:57:6e:ff:46:1e:32:72:98:27:b0:d7:5b:fe:c0:63:80:
87:2e:5b:94:ce:24:c4:ff:45:6d:39:d0:ac:a8:3c:aa:e7:99:
69:59:4e:bf:d1:5c:ac:ac:4d:1a:24:ca:87:4b:ed:f6:28:c0:
18:e3:fd:b9:87:10:56:76:57:f7:4e:52:9d:86:32:64:32:6e:
c6:3a:69:30:05:f2:f7:b1:5d:46:04:71:34:83:8a:50:a3:37:
43:d0:0b:b8:29:f6:87:2f:b6:84:3f:08:2a:2b:c2:dc:c7:89:
90:3f:96:ef:86:0a:d9:e8:6d:f0:cf:6b:89:7f:58:4d:71:35:
22:aa:5e:bd:ba:a7:4c:c6:97:55:dc:7f:e9:ed:ff:12:07:98:
50:a1:5c:d4:b0:29:ff:04:d6:66:80:e1:bc:9c:ec:2b:52:24:
8c:43:db:81:96:eb:41:c2:f4:f3:7b:db:73:21:b0:50:b8:2b:
8d:b0:a3:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg4MjcxMTAvBgNVBAUTKDZFRUU3NzFCQjNDRTdFOThEQjM5NjBDNEQ4MkY3NDJB
MkNGN0U4NDkwHhcNMjYwOTIyMjI0MjAxWhcNMjYwOTI5MjI0MjAxWjAYMRYwFAYD
VQQDEw02YWIzMDQzOS04ZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArqm7Eh6hFjhog7S3jdVKGDVFfo+bFkWyG2uYYrvID1gjnjq/sDa9p1ef0vo0
F8cewVYuCnPJRNVSmCX5vp6bVLqptRq3hwmavapeEpOODlvYYtc8JrPgC8Thu74I
HrE4Hny+KWrtpk0Qmc9uiH7fFGVD5+f+5tZIjEQunAkL2LdYfEYJNcrM5AaPSDPQ
5nnG1/YSS8j+ftpnhk9ZhvmoTHlS5FaN1aOnzgmgzZiivZgVCQToIwNnG29MbdDA
7/fl8xqhKtcrZretsex3gsxzPrRwMv6Yvg9jXYAtvqxYy+pD0W2jqeL8dp2wNuiY
KZnNJEzvfoxhjvYh14g0W0iM6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN7narVc
l33oec/8Je0lpPERLvQYMB8GA1UdIwQYMBaAFG7udxuzzn6Y2zlgxNgvdCos9+hJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODgyNy8zQzdDQjQ1MDFC
RTgxMUVDQkJBNjVCNTBDNEY5QUUwMi9idTUzRzdQT2ZwamJPV0RFMkM5MEtpejM2
RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2J1NTNHN1BPZnBqYk9XREUyQzkwS2l6MzZFay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODgyNy8zQzdDQjQ1MDFCRTgxMUVDQkJBNjVCNTBDNEY5QUUwMi9idTUzRzdQT2Zw
amJPV0RFMkM5MEtpejM2RWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgesFRHfWx/qfNdHVJQZgOkeekQboyVyfWpnHSPsWWG3A0MEwUhfc/WpgFdyM
lYvCcV1uQWDop3P5QFMDZcB7295SgTAqvC7ir71Xbv9GHjJymCew11v+wGOAhy5b
lM4kxP9FbTnQrKg8queZaVlOv9FcrKxNGiTKh0vt9ijAGOP9uYcQVnZX905SnYYy
ZDJuxjppMAXy97FdRgRxNIOKUKM3Q9ALuCn2hy+2hD8IKivC3MeJkD+W74YK2eht
8M9riX9YTXE1IqpevbqnTMaXVdx/6e3/EgeYUKFc1LAp/wTWZoDhvJzsK1IkjEPb
gZbrQcL083vbcyGwULgrjbCj9A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:55:55 2026 by rpki-client