
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
File: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft (raw, json)
Hash identifier: g6lKAFihl39bSB2L5IPKY11vkcNabOmGpd8/ToY6pws=
Subject key identifier: 52:72:78:65:5A:4C:FE:3E:08:35:0D:46:2C:B5:D8:85:EE:F3:41:A4
Authority key identifier: 05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
Certificate issuer: /CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Certificate serial: 021E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
Manifest number: 0215
Signing time: Fri 25 Sep 2026 03:05:46 +0000
Manifest this update: Fri 25 Sep 2026 03:05:46 +0000
Manifest next update: Fri 02 Oct 2026 03:05:46 +0000
Files and hashes: 1: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl (hash: uqmVhNQ/Q7mPYvyJTSR9YffxaToS5C6JybseJzU5JL0=)
2: 6063C75CB6E411EE94471D14C4F9AE02.roa (hash: 5Gtf7oujjTH1/9TpM6Po8VolgFiUghsVEkgZJ7GcJcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157724, serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Validity
Not Before: Sep 25 03:05:46 2026 GMT
Not After : Oct 2 03:05:46 2026 GMT
Subject: CN=6ab5e50a-2e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:23:b5:5d:bb:cc:94:0e:a6:14:a4:98:d6:
89:b6:7b:43:c2:13:13:9a:33:96:1a:82:7b:f0:bf:
13:5d:6c:10:86:8d:c0:63:bf:ea:dc:7c:c7:3e:64:
e0:24:c2:14:6f:68:3e:61:45:d7:64:26:44:63:be:
20:8f:6f:fb:a8:22:25:e7:db:60:6a:f0:bf:7f:ef:
d4:ba:52:e0:90:7c:6b:bc:79:f3:42:a4:72:4a:5a:
33:15:c3:0a:02:f0:10:75:01:b1:79:83:6d:9e:1e:
e5:60:2f:41:a2:0e:34:d3:1c:3b:a5:19:71:c3:a2:
b6:97:4c:07:98:3d:e9:b3:30:7c:41:7e:41:0d:30:
18:bb:76:cc:c0:be:97:89:02:3e:2e:69:8d:42:ae:
48:df:1e:77:d6:5e:0e:a9:00:92:41:33:7e:e6:bf:
78:5e:57:b1:62:66:cf:7b:1d:a0:26:39:bf:3d:1d:
2a:d0:2e:69:0e:49:91:70:4b:61:8f:3b:f3:8f:df:
e3:a1:40:c3:4b:43:a5:a1:19:70:3f:94:66:65:9e:
48:ed:de:d2:2a:b6:e2:41:d0:90:a4:97:e8:b9:f1:
87:3a:4e:f2:f5:f8:60:a5:4b:f0:16:be:4b:b4:73:
44:5a:58:d9:56:fe:70:54:ae:50:6a:06:96:c4:30:
c9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:72:78:65:5A:4C:FE:3E:08:35:0D:46:2C:B5:D8:85:EE:F3:41:A4
X509v3 Authority Key Identifier:
keyid:05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:19:64:db:f1:77:74:f6:2c:1e:a7:34:95:53:f4:30:c0:ea:
26:5d:57:68:a4:ad:d5:eb:8f:5d:5e:dc:cc:97:f8:8b:73:fe:
12:2a:05:20:d5:17:4c:d5:7f:a2:be:89:b5:bb:2f:65:98:6d:
43:6d:dc:77:a2:09:fe:e5:68:59:73:ad:85:c7:b7:2e:81:e1:
db:65:37:b8:2c:ba:39:de:10:ae:47:58:55:c5:7d:6d:4f:88:
c1:5b:bc:a9:b7:6c:8e:e5:68:34:4b:32:dd:f5:df:08:bb:17:
12:b8:ca:cf:84:f3:c4:06:cc:16:46:0b:d8:db:d8:6c:00:33:
7d:a4:3d:60:3a:6e:92:01:6a:19:c4:ec:b3:d1:a7:b3:e6:f6:
ea:1f:64:43:28:6f:8c:cf:6f:6d:ba:6d:a7:4a:ca:2d:4f:c3:
34:3c:e3:e5:4e:91:f1:40:ae:5f:fd:50:74:3d:f9:0c:25:45:
36:8e:09:a5:75:9f:ec:fa:32:e5:1f:e0:d5:cd:64:b1:17:5d:
66:06:8b:81:fe:b4:f2:8a:5e:04:72:a9:cb:46:cd:b6:bd:94:
8c:00:71:58:ee:94:42:b3:b4:d0:67:08:8a:f6:6f:07:76:d0:
af:5b:7e:4d:cd:78:e6:60:b6:c3:f0:20:9b:eb:8c:6d:fd:45:
eb:4c:76:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:21:15 2026 by rpki-client