
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E0B3/24632E9C745511F193088CA56FA30FBC/BEABAtdWe9ATEcJwCXEr2_Mv7gk.mft
File: BEABAtdWe9ATEcJwCXEr2_Mv7gk.mft (raw, json)
Hash identifier: p49GRLih/D3amX9Bspv1Y+hj7fuqsJXdPtxH+UC8Sno=
Subject key identifier: 16:2C:29:6B:6E:19:05:EC:2C:A5:77:9B:25:BE:7F:48:E3:2D:97:7B
Authority key identifier: 04:40:01:02:D7:56:7B:D0:13:11:C2:70:09:71:2B:DB:F3:2F:EE:09
Certificate issuer: /CN=A915E0B3/serialNumber=04400102D7567BD01311C27009712BDBF32FEE09
Certificate serial: 31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BEABAtdWe9ATEcJwCXEr2_Mv7gk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E0B3/24632E9C745511F193088CA56FA30FBC/BEABAtdWe9ATEcJwCXEr2_Mv7gk.mft
Manifest number: 2F
Signing time: Wed 23 Sep 2026 08:27:53 +0000
Manifest this update: Wed 23 Sep 2026 08:27:52 +0000
Manifest next update: Wed 30 Sep 2026 08:27:52 +0000
Files and hashes: 1: BEABAtdWe9ATEcJwCXEr2_Mv7gk.crl (hash: hwRhQuXr59EQn6oxVCoEXDlxJnX04CPO+so2ZL+eSv0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E0B3/24632E9C745511F193088CA56FA30FBC/BEABAtdWe9ATEcJwCXEr2_Mv7gk.crl
rsync://rpki.apnic.net/member_repository/A915E0B3/24632E9C745511F193088CA56FA30FBC/BEABAtdWe9ATEcJwCXEr2_Mv7gk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BEABAtdWe9ATEcJwCXEr2_Mv7gk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:27:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E0B3, serialNumber=04400102D7567BD01311C27009712BDBF32FEE09
Validity
Not Before: Sep 23 08:27:52 2026 GMT
Not After : Sep 30 08:27:52 2026 GMT
Subject: CN=6ab38d89-6893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2b:74:15:91:9f:08:5e:c1:f8:aa:12:7c:6a:
e3:b8:ff:03:e8:e7:4b:3c:52:3f:36:19:bc:7e:e4:
55:33:c1:d3:17:6b:db:7e:13:fe:91:c4:55:2b:e2:
e0:c1:3c:7c:76:f1:e4:86:3e:34:7e:7b:d8:68:2a:
98:30:ef:ae:fd:bd:7e:22:5f:25:65:90:9f:08:51:
b0:0b:6e:20:7c:76:d2:d0:85:10:54:ae:3c:6c:3f:
87:b2:7b:fe:a6:86:62:7d:1c:85:ef:7e:82:09:b0:
58:29:89:87:cf:30:5b:54:a0:f3:3c:25:be:3d:6f:
c7:9f:db:61:b5:58:6a:47:d7:89:1b:5c:9c:69:5b:
c6:41:aa:48:6c:a7:c1:af:46:4d:7b:34:0a:86:1a:
ba:10:96:07:c7:14:88:11:cd:f0:f3:8a:a0:97:e7:
2c:40:c8:c2:ce:30:83:86:e1:12:b8:dd:0c:53:ab:
ea:00:64:53:5d:65:b2:8b:56:0a:c4:15:8c:62:cf:
39:c3:07:49:48:8e:e1:be:8d:b8:a4:c2:54:65:59:
42:a4:41:2b:8f:24:ed:04:23:e4:74:a4:33:29:37:
1c:c1:9b:55:85:17:38:e3:8e:99:fa:51:8f:41:1f:
6a:d2:41:43:e7:c4:36:13:4a:6c:f3:07:1d:60:e4:
ca:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2C:29:6B:6E:19:05:EC:2C:A5:77:9B:25:BE:7F:48:E3:2D:97:7B
X509v3 Authority Key Identifier:
keyid:04:40:01:02:D7:56:7B:D0:13:11:C2:70:09:71:2B:DB:F3:2F:EE:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E0B3/24632E9C745511F193088CA56FA30FBC/BEABAtdWe9ATEcJwCXEr2_Mv7gk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BEABAtdWe9ATEcJwCXEr2_Mv7gk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E0B3/24632E9C745511F193088CA56FA30FBC/BEABAtdWe9ATEcJwCXEr2_Mv7gk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:52:b2:6f:93:be:51:65:f3:d8:58:1c:4d:4c:bd:75:1a:9f:
7b:75:e5:67:eb:9b:5c:0c:3c:63:60:5b:93:b9:ad:7a:b3:15:
72:53:10:17:29:65:5d:6f:df:f1:ca:55:0e:cb:bd:5d:e8:32:
78:a5:c5:24:0b:a2:68:11:c0:f7:0a:c2:ea:96:e0:c2:3f:c6:
e5:fa:f3:18:91:94:6c:bb:3a:ba:88:52:76:1f:3e:cd:91:5a:
98:8c:bd:7e:63:e3:c9:55:fe:c1:79:93:f5:a0:d5:39:4a:b3:
d7:37:b2:80:24:00:b2:8e:bc:2c:d7:9c:d6:49:bb:97:68:f4:
3f:3e:5a:79:c4:5f:ee:09:10:41:2a:0f:de:90:65:be:90:45:
06:0a:10:99:b7:c5:2d:0c:52:6d:e2:02:06:2d:e2:65:20:54:
7e:03:ba:b6:be:e8:4d:34:71:97:53:96:a2:bb:04:7f:dd:8f:
e2:0d:82:23:34:4c:4b:5c:ac:9d:da:41:b7:63:1a:06:34:8d:
9d:00:ec:b0:7c:33:49:c2:3f:24:66:6b:39:4e:5d:6a:38:5f:
da:77:6d:82:ea:2d:e4:e4:dd:02:f3:91:6b:7a:6f:23:d3:81:
e0:2b:57:df:a5:51:ef:27:3a:ac:40:c9:1a:e9:ed:1d:97:73:
e5:ce:e5:a4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
RTBCMzExMC8GA1UEBRMoMDQ0MDAxMDJENzU2N0JEMDEzMTFDMjcwMDk3MTJCREJG
MzJGRUUwOTAeFw0yNjA5MjMwODI3NTJaFw0yNjA5MzAwODI3NTJaMBgxFjAUBgNV
BAMTDTZhYjM4ZDg5LTY4OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDRK3QVkZ8IXsH4qhJ8auO4/wPo50s8Uj82Gbx+5FUzwdMXa9t+E/6RxFUr4uDB
PHx28eSGPjR+e9hoKpgw7679vX4iXyVlkJ8IUbALbiB8dtLQhRBUrjxsP4eye/6m
hmJ9HIXvfoIJsFgpiYfPMFtUoPM8Jb49b8ef22G1WGpH14kbXJxpW8ZBqkhsp8Gv
Rk17NAqGGroQlgfHFIgRzfDziqCX5yxAyMLOMIOG4RK43QxTq+oAZFNdZbKLVgrE
FYxizznDB0lIjuG+jbikwlRlWUKkQSuPJO0EI+R0pDMpNxzBm1WFFzjjjpn6UY9B
H2rSQUPnxDYTSmzzBx1g5Mo9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFiwpa24Z
BewspXebJb5/SOMtl3swHwYDVR0jBBgwFoAUBEABAtdWe9ATEcJwCXEr2/Mv7gkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMEIzLzI0NjMyRTlDNzQ1
NTExRjE5MzA4OENBNTZGQTMwRkJDL0JFQUJBdGRXZTlBVEVjSndDWEVyMl9Ndjdn
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQkVBQkF0ZFdlOUFURWNKd0NYRXIyX012N2drLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF
MEIzLzI0NjMyRTlDNzQ1NTExRjE5MzA4OENBNTZGQTMwRkJDL0JFQUJBdGRXZTlB
VEVjSndDWEVyMl9Ndjdnay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCDUrJvk75RZfPYWBxNTL11Gp97deVn65tcDDxjYFuTua16sxVyUxAXKWVdb9/x
ylUOy71d6DJ4pcUkC6JoEcD3CsLqluDCP8bl+vMYkZRsuzq6iFJ2Hz7NkVqYjL1+
Y+PJVf7BeZP1oNU5SrPXN7KAJACyjrws15zWSbuXaPQ/Plp5xF/uCRBBKg/ekGW+
kEUGChCZt8UtDFJt4gIGLeJlIFR+A7q2vuhNNHGXU5aiuwR/3Y/iDYIjNExLXKyd
2kG3YxoGNI2dAOywfDNJwj8kZms5Tl1qOF/ad22C6i3k5N0C85Frem8j04HgK1ff
pVHvJzqsQMka6e0dl3PlzuWk
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:31:21 2026 by rpki-client