
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft
File: bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft (raw, json)
Hash identifier: I6fJT81dRg8AAypoRXc6HXb9JljbvIzu1LCD9egN8NE=
Subject key identifier: 95:BC:86:F5:D6:16:C7:4A:0C:71:A9:98:E8:92:E0:BD:5E:66:AC:54
Authority key identifier: 6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC
Certificate issuer: /CN=A9119010/serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC
Certificate serial: 0D36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft
Manifest number: 0E4A
Signing time: Sat 26 Sep 2026 18:24:06 +0000
Manifest this update: Sat 26 Sep 2026 18:24:05 +0000
Manifest next update: Sat 03 Oct 2026 18:24:05 +0000
Files and hashes: 1: bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl (hash: /Hd4tmqZ8mR0/nyuNB71ejAINpulMI2iUoef/UoAAQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl
rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3382 (0xd36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119010, serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC
Validity
Not Before: Sep 26 18:24:05 2026 GMT
Not After : Oct 3 18:24:05 2026 GMT
Subject: CN=6ab80dc6-c4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:d3:08:b6:6f:ce:5f:10:df:a5:7f:ae:79:
75:0c:29:92:54:54:ac:ab:75:22:da:56:d0:85:02:
30:a7:0a:5f:13:01:43:f3:a6:f5:a4:3c:3a:8f:9a:
bd:0a:13:02:d6:8e:43:2f:65:c1:b9:12:c9:56:7d:
e3:49:ce:c6:c0:11:8b:77:c6:76:68:ec:28:33:cd:
00:57:9d:aa:f4:b7:cf:8d:4d:70:e4:89:c6:79:76:
73:ac:3b:6b:87:5d:e7:2f:79:15:b1:f8:d1:99:5a:
22:da:4f:2f:3b:c9:22:a5:6b:cd:6a:65:3d:4b:20:
a7:5e:83:39:68:94:09:20:23:f4:a7:ad:59:84:95:
d2:ea:2b:93:2e:6c:ae:a9:1c:0e:50:0e:0f:8b:e8:
7c:ba:41:f0:7c:a2:42:0c:4c:b5:5b:0a:0c:93:84:
46:95:82:b6:b7:23:8d:48:bc:55:ac:24:f4:6d:0b:
64:a8:39:58:82:5f:10:e1:10:1c:7c:2c:f2:a6:ef:
8d:a7:f9:26:34:79:b5:61:59:06:53:83:5c:27:9c:
bc:06:94:13:7e:80:2f:d4:b5:e5:41:d8:36:50:00:
de:8a:7f:40:ff:c3:f7:ac:e7:95:7a:45:5a:43:d2:
c5:1e:50:d3:2f:41:26:da:6a:5a:1c:41:e5:71:24:
6a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BC:86:F5:D6:16:C7:4A:0C:71:A9:98:E8:92:E0:BD:5E:66:AC:54
X509v3 Authority Key Identifier:
keyid:6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:f6:b3:35:a5:b7:9b:8a:71:07:cb:3b:03:26:e3:b3:64:c1:
06:30:2c:d6:96:27:35:ca:f3:b2:31:9a:e0:69:56:f0:05:08:
34:3b:72:1e:16:9c:59:16:f8:00:bc:b8:6f:db:63:6d:0c:e1:
c9:ea:71:fb:79:61:a6:28:39:70:3f:61:c9:09:7c:8e:39:a0:
72:c3:98:1e:da:bb:fa:a3:2f:15:e3:dd:b3:15:c1:04:45:8b:
ee:e6:8a:47:91:38:93:24:01:28:28:87:71:e7:44:33:ed:70:
30:27:a7:c7:42:69:28:98:37:4d:4e:ff:2b:93:e4:80:95:81:
96:3b:d6:e2:fa:6e:36:24:4a:e3:22:fb:0d:dc:bf:60:c9:b4:
67:f0:28:84:13:b2:e0:cf:a4:03:ae:ec:9f:30:b4:6d:c1:fa:
4d:f5:95:7b:15:88:13:61:27:ff:56:be:8b:18:6e:2e:e1:6f:
32:84:a2:b7:bb:b0:f7:76:98:54:30:b5:6e:7d:f1:bf:b9:28:
27:ed:57:e4:27:60:0c:24:46:c3:6d:e8:dd:7a:0d:14:6b:35:
a6:f7:39:ff:1f:ec:92:f7:65:33:ed:ef:b1:62:09:b3:69:91:
a8:8f:35:14:08:89:0c:6d:3c:6c:91:ef:55:69:06:83:73:2c:
f8:d7:72:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:26:12 2026 by rpki-client