
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.mft
File: B2qM_AnS8rcX4jyBAokXiMq1UT4.mft (raw, json)
Hash identifier: nKNEWSoEdewvrHP/zRxwlY7pubC6NlvrKMwVKpFGfdo=
Subject key identifier: 9C:76:C6:A7:C4:EB:A4:A0:0D:9D:3F:A3:B4:6C:BD:50:75:06:9F:DC
Authority key identifier: 07:6A:8C:FC:09:D2:F2:B7:17:E2:3C:81:02:89:17:88:CA:B5:51:3E
Certificate issuer: /CN=A914C9CD/serialNumber=076A8CFC09D2F2B717E23C8102891788CAB5513E
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2qM_AnS8rcX4jyBAokXiMq1UT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.mft
Manifest number: 05
Signing time: Thu 23 Jul 2026 06:31:41 +0000
Manifest this update: Thu 23 Jul 2026 06:31:40 +0000
Manifest next update: Thu 30 Jul 2026 06:31:40 +0000
Files and hashes: 1: B2qM_AnS8rcX4jyBAokXiMq1UT4.crl (hash: n9SWVnLcW1Jr9BTBfmnJkuHMoFUU4X1bw9AK/67x9Bc=)
2: 4F2C0476865E11F19C092B2C95A30FBC.roa (hash: egifpNM5XF4+DHAIdWtYVVii3Yk/k7piv94MdlcO3yE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.crl
rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2qM_AnS8rcX4jyBAokXiMq1UT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C9CD, serialNumber=076A8CFC09D2F2B717E23C8102891788CAB5513E
Validity
Not Before: Jul 23 06:31:40 2026 GMT
Not After : Jul 30 06:31:40 2026 GMT
Subject: CN=6a61b54d-a0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d0:01:58:f9:94:fa:a1:45:98:e0:5b:34:b0:
6c:07:e7:22:d3:75:0b:a1:12:1d:8c:ba:31:e5:a3:
52:a9:2e:96:b6:37:75:2e:2d:81:b9:54:8a:f8:26:
55:c7:2a:50:a2:b9:9f:49:02:40:82:83:bc:ff:65:
71:b2:89:e9:c4:93:9a:b1:49:f1:4c:a9:fd:28:39:
6f:d2:bf:92:83:cf:42:79:06:75:a4:ff:a4:eb:f9:
b3:be:ec:e5:49:ce:a6:00:62:96:41:ec:6f:27:08:
f5:c4:d4:b4:62:e9:24:f0:d0:6f:a4:4e:56:d1:b2:
c4:48:3a:22:d3:a1:f5:d7:40:c2:21:01:61:02:8b:
de:f4:fb:51:b0:5a:47:42:55:c5:5b:f6:a9:ab:18:
35:39:3c:89:2f:45:4b:41:6b:6a:d4:9f:96:07:96:
5c:e5:9f:bf:57:c0:f1:58:de:e1:cb:b8:f6:47:86:
51:d6:81:0a:15:2e:60:40:7e:16:23:8b:dc:18:5a:
4b:01:02:4c:26:8d:13:ac:d1:55:2a:10:95:20:3f:
47:07:df:8d:e7:0d:ba:cc:e1:4f:ba:0d:e7:af:14:
ca:59:8b:0a:23:15:c9:0a:9f:6d:a6:4c:fb:5e:28:
1d:17:e6:56:c5:b6:1b:b0:04:0f:92:65:00:4a:ae:
1f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:76:C6:A7:C4:EB:A4:A0:0D:9D:3F:A3:B4:6C:BD:50:75:06:9F:DC
X509v3 Authority Key Identifier:
keyid:07:6A:8C:FC:09:D2:F2:B7:17:E2:3C:81:02:89:17:88:CA:B5:51:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2qM_AnS8rcX4jyBAokXiMq1UT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:d9:65:bf:2e:f8:77:77:87:18:d0:19:33:9b:28:8c:37:30:
8c:e2:2f:85:20:7c:e2:2c:c5:f2:01:5d:81:ad:8f:0f:45:c1:
96:52:db:e5:d9:75:fd:fa:66:09:82:cd:77:19:bc:cc:14:ce:
e9:97:8f:17:95:b2:54:df:fa:6c:69:02:60:af:8b:2e:dc:ab:
2d:e3:bf:ef:40:15:bf:84:97:28:69:80:af:67:ff:f3:c7:ba:
3e:97:59:5c:28:7b:90:09:e2:24:7e:85:e6:bc:bb:9a:8c:de:
98:56:cb:b5:74:de:60:2e:04:33:ab:e9:70:8f:5b:6b:a7:16:
47:46:0f:f6:98:05:d8:53:60:51:f9:eb:3f:ac:86:6f:7c:85:
74:08:3b:67:03:da:83:fc:9a:7b:e2:a7:17:91:4a:22:d9:35:
0b:7f:14:4c:b6:47:81:c8:21:45:8d:e1:20:d5:0f:8d:a6:58:
d3:52:8a:7a:03:81:45:4b:02:c2:53:db:1f:35:a2:ca:7f:3b:
ea:13:4f:5b:03:b5:d7:75:f9:18:48:c4:c3:b1:c1:84:9e:c4:
07:5e:a0:54:90:38:9e:57:23:12:c9:28:04:92:f5:d5:cc:40:
e7:b4:a1:8f:66:dc:e5:72:8d:12:f5:1d:75:67:53:df:91:65:
90:09:dc:af
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QzlDRDExMC8GA1UEBRMoMDc2QThDRkMwOUQyRjJCNzE3RTIzQzgxMDI4OTE3ODhD
QUI1NTEzRTAeFw0yNjA3MjMwNjMxNDBaFw0yNjA3MzAwNjMxNDBaMBgxFjAUBgNV
BAMTDTZhNjFiNTRkLWEwYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDO0AFY+ZT6oUWY4Fs0sGwH5yLTdQuhEh2MujHlo1KpLpa2N3UuLYG5VIr4JlXH
KlCiuZ9JAkCCg7z/ZXGyienEk5qxSfFMqf0oOW/Sv5KDz0J5BnWk/6Tr+bO+7OVJ
zqYAYpZB7G8nCPXE1LRi6STw0G+kTlbRssRIOiLTofXXQMIhAWECi970+1GwWkdC
VcVb9qmrGDU5PIkvRUtBa2rUn5YHllzln79XwPFY3uHLuPZHhlHWgQoVLmBAfhYj
i9wYWksBAkwmjROs0VUqEJUgP0cH343nDbrM4U+6DeevFMpZiwojFckKn22mTPte
KB0X5lbFthuwBA+SZQBKrh83AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnHbGp8Tr
pKANnT+jtGy9UHUGn9wwHwYDVR0jBBgwFoAUB2qM/AnS8rcX4jyBAokXiMq1UT4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDOUNELzA3ODY2NzBDODY1
ODExRjFCODgyRUFGNTkyQTMwRkJDL0IycU1fQW5TOHJjWDRqeUJBb2tYaU1xMVVU
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQjJxTV9BblM4cmNYNGp5QkFva1hpTXExVVQ0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD
OUNELzA3ODY2NzBDODY1ODExRjFCODgyRUFGNTkyQTMwRkJDL0IycU1fQW5TOHJj
WDRqeUJBb2tYaU1xMVVUNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDJ2WW/Lvh3d4cY0BkzmyiMNzCM4i+FIHziLMXyAV2BrY8PRcGWUtvl2XX9+mYJ
gs13GbzMFM7pl48XlbJU3/psaQJgr4su3Kst47/vQBW/hJcoaYCvZ//zx7o+l1lc
KHuQCeIkfoXmvLuajN6YVsu1dN5gLgQzq+lwj1trpxZHRg/2mAXYU2BR+es/rIZv
fIV0CDtnA9qD/Jp74qcXkUoi2TULfxRMtkeByCFFjeEg1Q+NpljTUop6A4FFSwLC
U9sfNaLKfzvqE09bA7XXdfkYSMTDscGEnsQHXqBUkDieVyMSySgEkvXVzEDntKGP
Ztzlco0S9R11Z1PfkWWQCdyv
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:24 2026 by rpki-client