
$ rpki-client -vvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
File: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft (raw, json)
Hash identifier: nkxhY+Y69BV3X3CoK5QYKZiLuL8Fgen1hdjgAnmmCDo=
Subject key identifier: B2:DD:F7:0C:7F:18:63:76:86:13:CC:26:35:C0:D5:DD:A0:31:36:43
Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
Certificate issuer: /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Certificate serial: 01E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
Manifest number: 01D9
Signing time: Wed 13 May 2026 03:43:48 +0000
Manifest this update: Wed 13 May 2026 03:43:48 +0000
Manifest next update: Wed 20 May 2026 03:43:48 +0000
Files and hashes: 1: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl (hash: UcN5auDJe70KyEzI50/hAj/Sw+KtAo92iSGW6r2mKUE=)
2: 342A14D6F0E911EEAAAD9A6CC4F9AE02.roa (hash: zAWlrytMBb7aOvLXuHLVnYaYJEpV8eVWaLPA029dJCU=)
3: 5A44099895C111EE951C9E4CC4F9AE02.roa (hash: DkdcatwLmN2ONkPOpKETQhUgaZX36ttB9+kcADlT4Z4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl
rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913939F, serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Validity
Not Before: May 13 03:43:48 2026 GMT
Not After : May 20 03:43:48 2026 GMT
Subject: CN=6a03f374-ec2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:30:c0:7d:e0:62:56:7f:fa:7b:4a:a4:e9:
5f:f6:01:24:bd:53:88:65:9d:cd:92:c3:5e:a7:b4:
04:e7:82:a5:50:fd:f1:64:6b:10:b4:85:6f:92:08:
5e:37:f0:65:25:1c:8a:bb:d1:79:eb:e0:05:31:ba:
26:e9:a7:ab:4a:d8:e0:52:b4:a4:55:a5:69:8c:82:
5e:13:ed:6c:0f:66:dd:9b:71:02:58:6b:4d:1d:2b:
9b:4f:77:26:6f:53:a0:2e:eb:60:58:a0:9d:16:24:
86:de:03:1d:7e:f0:30:93:65:5f:45:44:3d:f0:29:
49:84:28:f0:07:76:be:6e:d2:0c:3f:f9:93:8d:b7:
ba:71:b6:a7:9a:e9:cb:0d:69:1b:ef:28:45:16:f5:
bf:ae:59:6b:6c:c7:8d:41:a1:44:76:f4:e2:30:ea:
c4:11:bd:b5:9d:bf:bf:7e:50:98:2b:1a:b5:d0:ea:
cf:07:b4:8d:01:6d:b8:ae:68:24:27:4f:7b:8f:e8:
ff:97:f8:a9:b4:e8:d6:6a:1c:3c:1a:aa:a0:20:c5:
e6:15:1b:06:49:cd:cf:4e:03:9e:38:21:2e:1e:5a:
6f:e1:1f:24:86:0d:88:4a:09:b9:fa:3f:76:aa:eb:
b0:22:c0:f3:ba:18:6c:f5:d1:eb:81:03:24:43:a8:
e2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DD:F7:0C:7F:18:63:76:86:13:CC:26:35:C0:D5:DD:A0:31:36:43
X509v3 Authority Key Identifier:
keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c8:92:0e:51:ea:15:42:4f:97:61:b8:e6:a9:87:df:15:dc:
88:63:13:96:46:13:f8:7c:0d:21:0f:a6:f1:aa:7d:2b:83:76:
a6:51:5f:4b:98:fa:c0:2a:83:78:e9:ce:40:1b:50:8c:28:0c:
81:0a:36:89:f7:a1:d5:38:10:94:a8:e0:d6:64:5b:cc:93:04:
e4:3e:0a:4b:8e:21:c9:4a:84:5e:58:8d:2f:b9:53:8a:f5:a6:
a6:d2:a5:fa:91:c9:1b:7d:b3:c5:81:20:a8:dc:ca:73:0c:0d:
83:81:99:b3:06:64:b2:07:24:c6:2a:59:72:67:6c:96:15:14:
65:11:ad:49:00:8e:18:49:df:f0:83:62:e7:4f:26:99:fc:9f:
c7:16:b7:0c:18:3f:cf:cb:85:81:39:3e:f0:13:c7:b3:0c:71:
e6:85:2c:35:3e:a7:9d:a7:f7:92:6a:c4:0f:07:86:34:4b:45:
34:05:b3:0c:0d:94:08:e3:f0:20:9c:04:2a:06:13:e7:46:6d:
f5:6c:80:f0:6d:96:5a:d6:db:d4:49:f3:d5:99:13:c2:a7:9c:
71:56:d3:86:db:6e:a5:68:50:19:0c:0c:45:c8:0a:69:a0:c3:
22:2c:8e:c5:b7:e6:57:52:cb:1b:83:3a:ae:87:43:d8:05:1f:
2d:66:bc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:21 2026 by rpki-client