
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
File: bu53G7POfpjbOWDE2C90Kiz36Ek.mft (raw, json)
Hash identifier: 6wYFjtsx8W1rMo0peOQ9t6qraMR4K/+7f4qzu+PD0Rk=
Subject key identifier: CF:D8:14:C4:9E:CF:17:82:E5:D3:74:DE:92:83:AF:CE:AC:7C:29:7A
Authority key identifier: 6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49
Certificate issuer: /CN=A9118827/serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849
Certificate serial: 057F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
Manifest number: 0578
Signing time: Tue 24 Mar 2026 22:59:02 +0000
Manifest this update: Tue 24 Mar 2026 22:59:01 +0000
Manifest next update: Tue 31 Mar 2026 22:59:01 +0000
Files and hashes: 1: bu53G7POfpjbOWDE2C90Kiz36Ek.crl (hash: g7OCBU2gB5NBf2qX5OPficGWucjRdVou2RSJ5VlDH3I=)
2: 95D9A9461BEC11EC97B39812C4F9AE02.roa (hash: v0rJzZLI+1O5nfOP2tDFakvguyT8MUXLjwiVOqN97W8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl
rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1407 (0x57f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118827, serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849
Validity
Not Before: Mar 24 22:59:01 2026 GMT
Not After : Mar 31 22:59:01 2026 GMT
Subject: CN=69c31735-0634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:5a:86:43:01:23:13:ea:01:48:92:c2:0d:
9c:5b:d0:25:83:ee:c5:15:80:17:97:bb:1f:fa:db:
9a:87:e4:21:1f:9b:92:82:10:e3:1e:26:05:1f:aa:
fb:e2:6a:e4:63:2f:fc:33:33:04:d1:5f:59:bc:57:
82:9c:81:30:ac:50:91:73:98:11:84:dc:9e:6f:39:
66:6d:9a:7f:f8:78:2d:44:1a:14:c6:1f:ea:30:96:
e3:d8:70:21:ec:26:83:bf:b5:69:ca:5a:d0:14:52:
5b:c4:82:bf:e6:c2:d9:34:c2:30:5b:84:77:d6:e5:
a1:fa:63:37:70:0e:36:38:db:7c:e3:ee:79:1e:60:
e1:45:f4:af:25:43:c9:92:00:31:7a:20:e9:7e:be:
7d:54:4a:43:f2:6b:f2:1e:60:97:a7:98:e7:34:73:
ef:7f:e0:1b:9c:63:8c:8c:c6:16:75:aa:68:44:56:
46:e8:51:d4:16:e1:d2:0f:ad:4d:78:d9:05:b5:a4:
2f:ea:ba:47:19:33:f2:47:bd:06:61:dd:f7:22:49:
c9:b5:ab:f9:03:56:ca:f4:ae:62:df:77:31:66:aa:
6a:04:5a:69:02:6e:af:43:2f:e8:4d:99:39:9c:4b:
79:d9:d9:cb:2e:ae:fc:50:3e:2a:69:74:f4:fe:b2:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D8:14:C4:9E:CF:17:82:E5:D3:74:DE:92:83:AF:CE:AC:7C:29:7A
X509v3 Authority Key Identifier:
keyid:6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:5f:4a:13:2b:f1:2c:67:3f:65:2b:5c:0a:f2:08:68:27:68:
0f:66:66:c3:d4:94:d3:f3:73:6b:c9:72:77:54:f7:0a:13:64:
f4:a6:05:98:7a:0d:c3:0d:0e:3e:e7:75:bb:e6:df:67:97:10:
c6:b2:89:6d:66:17:40:80:e0:40:27:b6:bf:74:cb:76:28:78:
f1:31:c0:70:2d:db:8a:d4:d0:1a:b3:aa:36:d7:ae:43:d8:bf:
0f:c6:80:94:27:9f:86:ef:51:17:72:be:2c:06:c1:b5:d6:31:
59:83:6f:e4:e1:db:1d:88:0b:78:4c:ea:c5:3a:f1:37:0c:c5:
2f:c9:17:46:3c:97:d6:de:27:6c:2f:83:b8:79:8d:26:3a:74:
b5:cb:08:c5:ce:4e:07:e7:66:9c:1e:4d:74:d9:59:a8:d4:89:
5e:48:4a:12:67:72:32:0f:e4:0d:8c:39:5f:c3:de:59:cf:cf:
c2:42:3e:c8:a2:93:32:47:49:b6:6b:04:64:27:13:5f:58:f7:
32:93:1f:9b:15:11:c5:d4:6f:10:58:ee:ff:0c:95:85:9f:b3:
77:d2:c9:0b:de:d8:69:c3:bc:60:4f:33:7d:2b:33:9d:4f:36:
58:e8:86:8c:0c:91:4d:e5:f9:36:e2:bc:fe:7b:92:d8:c8:fd:
78:a1:d6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:37:16 2026 by rpki-client