
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
File: bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft (raw, json)
Hash identifier: UPpymHn24Sq6Dyl5ObEhwZYWtMq7maflgJh5QbKMu6s=
Subject key identifier: 63:9D:0E:3F:8F:AB:48:1F:61:FD:96:2E:8E:9C:20:15:2D:3B:12:7A
Authority key identifier: 6D:DE:C6:A1:71:29:23:0E:EE:FE:50:8A:F1:19:62:FB:4C:0F:6F:C2
Certificate issuer: /CN=A9167C9C/serialNumber=6DDEC6A17129230EEEFE508AF11962FB4C0F6FC2
Certificate serial: 065D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
Manifest number: 0656
Signing time: Wed 22 Jul 2026 23:23:18 +0000
Manifest this update: Wed 22 Jul 2026 23:23:17 +0000
Manifest next update: Wed 29 Jul 2026 23:23:17 +0000
Files and hashes: 1: bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl (hash: H+cEjRd5qDFRx9ZR/ukiyVCx/WhhC7xKdEi6r0B7Jn0=)
2: BF811486DC1E11EBB2C72F52C4F9AE02.roa (hash: 3RyEfrC1/+oLdtWYjCCiGJj81mtXCEJfqPIsFdcM1I0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl
rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1629 (0x65d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167C9C, serialNumber=6DDEC6A17129230EEEFE508AF11962FB4C0F6FC2
Validity
Not Before: Jul 22 23:23:17 2026 GMT
Not After : Jul 29 23:23:17 2026 GMT
Subject: CN=6a6150e6-afe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e8:cf:14:05:03:5f:2a:94:05:99:fa:c3:4c:
18:f9:79:ee:07:52:c9:8f:ac:a3:d2:ab:68:db:08:
1a:c0:18:f8:05:7b:b9:f8:cf:d5:4c:e4:69:c8:c8:
fd:a6:79:dd:10:c8:99:44:dc:db:1e:08:22:2b:b4:
fc:ef:c1:fb:7d:40:c1:08:f8:75:5d:90:d8:92:ec:
36:b3:be:07:61:ef:cd:de:ec:84:42:0f:70:50:c0:
d6:e0:ad:94:61:58:fe:42:fc:0d:56:f0:77:45:db:
97:ca:19:32:85:84:b8:00:29:04:20:5c:92:17:b4:
13:51:f0:ac:57:67:79:2a:20:de:85:58:d6:33:91:
92:32:dc:c9:f3:9f:4f:71:01:28:9e:5e:49:80:3e:
ab:06:0e:fc:1c:b2:52:9e:8b:22:be:60:c6:b1:ef:
6d:79:47:65:85:02:6c:d3:3f:13:76:4d:d1:ac:b1:
47:7a:d4:39:06:c5:10:f2:a1:b1:3d:f1:44:36:a7:
d2:6b:d6:6a:90:13:48:1b:59:e3:18:8e:e6:7d:dc:
e4:87:0b:b0:21:ff:11:53:87:66:ad:0f:3b:ce:1c:
2f:68:76:c8:85:72:3d:1a:d0:d5:b8:7c:dd:90:48:
30:b7:c6:62:b7:30:fb:42:f5:45:e2:a8:92:83:71:
cb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9D:0E:3F:8F:AB:48:1F:61:FD:96:2E:8E:9C:20:15:2D:3B:12:7A
X509v3 Authority Key Identifier:
keyid:6D:DE:C6:A1:71:29:23:0E:EE:FE:50:8A:F1:19:62:FB:4C:0F:6F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:5e:1e:db:e5:38:11:8c:b1:fe:fc:48:e2:b3:2f:5e:1f:42:
ca:77:ed:de:50:85:e2:30:0e:d5:e4:f1:dc:b4:65:39:96:ab:
15:19:26:52:10:f8:f6:bc:d4:a8:d1:16:bc:db:e3:74:3c:b6:
40:5c:40:3a:9b:6f:d0:9d:51:e1:1e:21:77:f5:2d:54:cc:f4:
c6:04:bc:5c:25:8b:7e:bb:12:09:89:61:d5:7e:84:df:aa:c9:
cb:3c:68:12:62:a8:0f:0e:09:aa:45:84:dd:1c:89:61:f8:2f:
4a:99:29:cf:d6:49:67:e6:ea:c0:89:ad:fe:b4:93:e1:00:d4:
48:f8:ac:57:5a:02:c2:14:57:01:c2:2d:1c:c9:f4:ff:d5:44:
e8:7d:4a:30:f0:60:34:d0:28:5c:1b:9b:cd:77:8c:e9:81:23:
8f:cb:27:78:fa:34:f2:8f:69:17:d4:3f:d8:03:53:2d:b6:cf:
80:c4:d6:12:4d:dc:21:36:21:d8:fd:1e:4c:b8:38:3b:cf:43:
be:5d:e5:c5:21:7e:d2:2c:1e:74:c0:53:e8:a8:9b:b9:c2:72:
b8:a7:9a:81:5f:66:a2:75:be:de:63:3c:7d:04:46:9b:7d:b1:
0e:b5:00:62:f3:3c:51:ef:e1:aa:ac:57:d3:49:81:73:32:20:
3c:2f:e1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:00 2026 by rpki-client