
$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
File: bCx8FCiea7W3J1sapr_foCJ7kIY.mft (raw, json)
Hash identifier: TsJcBw/5I2FMksJqilYnPIHnUCTBnaaTtHlvKwsiQR0=
Subject key identifier: C0:92:92:38:01:2B:68:A8:3D:A9:15:FA:BB:B3:49:45:A0:7E:1A:4B
Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
Certificate issuer: /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Certificate serial: 0178
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
Manifest number: 0161
Signing time: Thu 23 Jul 2026 06:46:59 +0000
Manifest this update: Thu 23 Jul 2026 06:46:58 +0000
Manifest next update: Thu 30 Jul 2026 06:46:58 +0000
Files and hashes: 1: bCx8FCiea7W3J1sapr_foCJ7kIY.crl (hash: 7KQp0eW+OtVSEc5L2zDHWygRV8eroi8qmm/D2agAaws=)
2: 63A0A458F38811EFB8E2D638C4F9AE02.roa (hash: MzzziUvdgBRD34K13czjAKz5Qa4KFePNv6ZSJaDtfDg=)
3: BC8ECC20F38811EF8AB19939C4F9AE02.roa (hash: xM+k8JQJmpD4Ax0g8sE6JNmMBLQtiYg67IPffewNqIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl
rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Validity
Not Before: Jul 23 06:46:58 2026 GMT
Not After : Jul 30 06:46:58 2026 GMT
Subject: CN=6a61b8e2-572b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:cd:e9:eb:0d:52:c7:44:03:6b:85:2a:e0:
57:b2:ea:aa:91:b8:ad:3f:fe:27:02:b5:e7:bd:46:
0d:8f:67:d6:60:f2:4f:f1:59:d2:da:80:3a:e5:69:
44:b7:86:7d:50:8b:31:7a:00:9d:fa:6d:55:a3:69:
f5:fa:d9:56:80:61:96:13:7a:7a:ac:e4:42:c0:bf:
ff:30:f3:06:c0:a7:69:85:33:ab:97:ce:71:81:47:
06:16:e3:33:65:c8:4e:10:3c:8c:ae:5c:11:68:d0:
19:6f:8c:df:7d:fb:7f:fe:4d:a7:8e:c5:69:48:1e:
3a:4d:e9:98:69:9f:ef:af:09:b7:80:91:54:ec:7e:
59:c2:86:9c:aa:c9:72:9c:70:6c:77:97:02:fa:bd:
73:91:3a:b2:af:24:08:03:2a:0e:de:e1:19:40:06:
f6:24:c2:d1:64:1e:2a:a4:78:19:3b:54:61:b9:d3:
35:77:11:16:4a:b2:0a:74:bd:cf:6c:61:70:da:c2:
8a:64:15:e0:10:6f:88:9d:a1:ed:8e:69:f1:1d:c1:
cd:2a:29:a8:a1:be:da:9a:f5:c6:69:18:a9:48:e4:
75:f5:eb:5b:ad:cc:a3:e6:8e:50:6a:77:fc:3e:c3:
da:98:c5:02:a1:94:b9:7c:2d:be:80:68:da:54:2a:
79:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:92:92:38:01:2B:68:A8:3D:A9:15:FA:BB:B3:49:45:A0:7E:1A:4B
X509v3 Authority Key Identifier:
keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b3:3d:87:23:ee:1c:14:ff:84:95:bc:e6:71:87:30:d7:ff:
00:c0:a3:94:fb:79:ff:63:0d:96:11:f9:db:d3:6d:e3:74:6e:
d2:4d:88:94:62:dc:f6:01:9d:65:1c:a2:41:e9:05:c4:ea:9b:
d4:4e:6f:da:44:48:88:98:32:ae:f7:14:03:78:31:57:40:2c:
db:79:db:00:20:07:a5:59:4f:60:77:2b:e3:d6:b5:05:f0:3c:
c5:c7:ac:5b:40:c6:6a:56:fc:51:3f:72:75:ed:95:17:63:cc:
04:a1:74:a6:93:17:c1:12:dc:01:9e:b0:47:41:7a:c1:9a:ac:
6e:5a:45:04:0f:ce:cb:41:36:cf:05:2b:a4:5e:90:11:0c:c9:
94:68:59:54:a6:9b:c7:e2:68:cb:f3:26:79:73:01:cd:ea:0d:
e2:2a:6f:3a:58:81:ef:73:37:0d:ab:71:51:31:81:50:00:fb:
fb:b3:be:de:9c:f4:29:0d:77:47:f9:cc:ad:9f:35:7d:7d:a9:
6e:ac:ef:b0:32:d5:db:d7:71:0e:65:ca:8f:c2:e9:e8:ca:4d:
be:bb:cd:98:80:32:7c:da:93:26:0b:2d:13:33:1e:81:04:8c:
c3:d7:8a:e8:47:7e:ab:2c:46:4a:4a:5e:5a:f2:74:a3:58:d0:
c6:84:86:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzEyMEExMTAvBgNVBAUTKDZDMkM3QzE0Mjg5RTZCQjVCNzI3NUIxQUE2QkZERkEw
MjI3QjkwODYwHhcNMjYwNzIzMDY0NjU4WhcNMjYwNzMwMDY0NjU4WjAYMRYwFAYD
VQQDEw02YTYxYjhlMi01NzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwYXN6esNUsdEA2uFKuBXsuqqkbitP/4nArXnvUYNj2fWYPJP8VnS2oA65WlE
t4Z9UIsxegCd+m1Vo2n1+tlWgGGWE3p6rORCwL//MPMGwKdphTOrl85xgUcGFuMz
ZchOEDyMrlwRaNAZb4zffft//k2njsVpSB46TemYaZ/vrwm3gJFU7H5Zwoacqsly
nHBsd5cC+r1zkTqyryQIAyoO3uEZQAb2JMLRZB4qpHgZO1RhudM1dxEWSrIKdL3P
bGFw2sKKZBXgEG+InaHtjmnxHcHNKimoob7amvXGaRipSOR19etbrcyj5o5Qanf8
PsPamMUCoZS5fC2+gGjaVCp5kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMCSkjgB
K2ioPakV+ruzSUWgfhpLMB8GA1UdIwQYMBaAFGwsfBQonmu1tydbGqa/36Aie5CG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS9EQUY4MUM0NDg2
RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3VzNKMXNhcHJfZm9DSjdr
SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2JDeDhGQ2llYTdXM0oxc2Fwcl9mb0NKN2tJWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTIwQS9EQUY4MUM0NDg2RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3
VzNKMXNhcHJfZm9DSjdrSVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAq7M9hyPuHBT/hJW85nGHMNf/AMCjlPt5/2MNlhH529Nt43Ru0k2IlGLc9gGd
ZRyiQekFxOqb1E5v2kRIiJgyrvcUA3gxV0As23nbACAHpVlPYHcr49a1BfA8xces
W0DGalb8UT9yde2VF2PMBKF0ppMXwRLcAZ6wR0F6wZqsblpFBA/Oy0E2zwUrpF6Q
EQzJlGhZVKabx+Joy/MmeXMBzeoN4ipvOliB73M3DatxUTGBUAD7+7O+3pz0KQ13
R/nMrZ81fX2pbqzvsDLV29dxDmXKj8Lp6MpNvrvNmIAyfNqTJgstEzMegQSMw9eK
6Ed+qyxGSkpeWvJ0o1jQxoSGfw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:31 2026 by rpki-client