
$ rpki-client -vvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
File: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft (raw, json)
Hash identifier: uZYqxNZKf2daQfpnZ4XSpNekdaAIahMH3w3t+L79Ah4=
Subject key identifier: 72:9D:02:53:2A:3F:30:3F:0F:97:B2:93:B1:C6:67:B8:57:80:7B:14
Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
Certificate issuer: /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Certificate serial: 020C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
Manifest number: 01FC
Signing time: Thu 23 Jul 2026 04:35:44 +0000
Manifest this update: Thu 23 Jul 2026 04:35:43 +0000
Manifest next update: Thu 30 Jul 2026 04:35:43 +0000
Files and hashes: 1: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl (hash: pgHKDH9DZ61lNgmSo79xb/tChZzNTHogcJe2QcNIsEg=)
2: 342A14D6F0E911EEAAAD9A6CC4F9AE02.roa (hash: zAWlrytMBb7aOvLXuHLVnYaYJEpV8eVWaLPA029dJCU=)
3: 5A44099895C111EE951C9E4CC4F9AE02.roa (hash: DkdcatwLmN2ONkPOpKETQhUgaZX36ttB9+kcADlT4Z4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl
rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913939F, serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Validity
Not Before: Jul 23 04:35:43 2026 GMT
Not After : Jul 30 04:35:43 2026 GMT
Subject: CN=6a619a1f-ce86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5e:59:ff:f7:36:7c:b6:ad:c7:96:f3:c3:12:
61:db:87:db:ba:a6:84:9d:a9:93:f1:12:b9:81:52:
ac:a7:62:f7:5a:13:72:94:4b:17:16:c3:5e:54:49:
87:da:3a:01:60:24:ac:73:64:56:3b:6e:d7:07:f4:
0e:8a:ff:f0:24:97:65:d5:c6:3c:c6:6a:80:1d:7a:
16:07:97:9a:ff:b0:e5:ff:5c:48:4e:32:31:8a:6d:
d9:94:01:e4:bb:78:71:57:bf:7d:4a:f4:48:cf:47:
67:ac:43:b5:e6:2e:e7:1f:d3:16:c4:28:7d:c5:f9:
4a:b6:42:19:0b:39:05:9c:74:a4:d0:97:25:8e:fc:
23:89:1f:05:bc:fc:22:a5:d3:26:3c:2d:c1:6c:f0:
aa:10:95:ac:d1:de:d3:e3:f8:5c:e6:eb:de:0a:25:
9f:97:14:3a:c0:d1:41:68:37:51:52:32:9c:f7:06:
00:f0:b7:aa:15:ba:53:f7:39:66:c8:09:f9:96:f1:
3a:e7:7a:ac:15:fc:c3:1b:22:31:0a:76:96:b0:7c:
7b:39:ae:31:4e:bf:a1:78:9b:63:fe:38:ab:4e:6d:
58:c6:35:92:f4:e2:80:d9:9e:9b:5f:b1:31:b7:ef:
88:ae:6a:41:d9:19:66:11:b6:7f:d4:22:63:aa:68:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9D:02:53:2A:3F:30:3F:0F:97:B2:93:B1:C6:67:B8:57:80:7B:14
X509v3 Authority Key Identifier:
keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:60:ef:1e:97:98:55:4b:7a:d3:43:17:57:f8:b6:28:d1:57:
59:86:f4:2e:5a:df:fd:41:35:1a:35:a0:ef:bb:ec:d4:15:ae:
13:7a:8b:e1:0c:c4:6b:95:72:9d:52:a5:4b:5a:42:a2:1d:99:
3d:81:f1:67:4e:25:51:84:a4:72:63:0c:75:fa:ea:99:82:56:
b0:be:5d:1a:2d:08:c2:2e:dc:b6:d7:e8:e2:a8:fd:36:7d:ff:
45:bc:ff:fa:87:b1:a5:0f:8b:89:a9:18:98:ff:bd:78:58:e1:
2d:db:a0:11:44:35:7e:db:39:27:c7:b2:8d:16:f8:ba:12:e0:
ea:35:53:1c:49:3d:f2:cb:b5:50:8d:80:e0:dd:56:d1:20:fc:
9b:27:ea:40:27:6a:bd:4e:aa:a1:2a:4b:fc:4d:86:74:e0:a4:
42:a0:25:71:04:06:b3:ff:21:db:7c:5c:43:4d:0e:4b:80:98:
01:6d:42:36:b2:8a:18:96:9d:24:e4:39:fa:33:2a:09:e4:3f:
5d:5b:77:16:6b:48:03:6c:f1:bb:0d:ec:44:65:a3:d6:cc:01:
d2:b0:80:c6:25:e5:26:e3:33:96:23:58:ed:87:62:0a:e7:ef:
8c:d5:2c:39:c2:04:5c:26:1a:80:32:eb:43:6e:b0:cf:14:46:
4e:14:01:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:15 2026 by rpki-client