
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
File: 9bzqkIXorbqorCGgTlPb_sMgvOI.mft (raw, json)
Hash identifier: Fi39IWgP+IUqjZg9mDgg+lGrKQLc7LXWsiecadd4RLc=
Subject key identifier: 5C:A3:6F:5B:5B:07:22:B3:8C:D7:F1:E4:6B:F3:C5:78:1D:BE:E2:D2
Authority key identifier: F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2
Certificate issuer: /CN=A916B6AA/serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2
Certificate serial: 024B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
Manifest number: 024B
Signing time: Tue 22 Sep 2026 15:42:19 +0000
Manifest this update: Tue 22 Sep 2026 15:42:19 +0000
Manifest next update: Tue 29 Sep 2026 15:42:19 +0000
Files and hashes: 1: 9bzqkIXorbqorCGgTlPb_sMgvOI.crl (hash: fMM0XGm7SBNhS4GAw8VUbzF5FNvEpNTsbtVpOZvmgUo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl
rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 587 (0x24b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B6AA, serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2
Validity
Not Before: Sep 22 15:42:19 2026 GMT
Not After : Sep 29 15:42:19 2026 GMT
Subject: CN=6ab2a1db-a870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:19:33:60:da:6d:f1:17:fe:4a:80:70:1f:b3:
ee:70:88:1a:71:86:65:40:03:51:52:3f:df:52:8a:
ce:44:81:86:09:47:c1:4d:69:9e:cb:96:c9:97:84:
05:8d:c7:ca:d0:e8:e3:48:1b:12:60:81:8b:61:34:
97:98:b4:7a:08:7a:3c:31:3f:43:02:63:81:cd:53:
8d:10:56:8a:92:d4:9c:04:eb:8e:9a:a2:4e:ca:56:
96:3f:56:81:0c:39:df:eb:a8:5e:cd:30:d9:37:c8:
d6:d3:8c:61:69:06:48:db:03:9c:76:84:d3:69:1c:
0f:db:ee:41:5c:48:10:9e:aa:3a:a9:f4:54:f8:b7:
6b:22:56:76:bc:19:a2:56:19:9f:98:b0:13:b1:7b:
63:b0:7d:28:28:2d:e7:cf:f0:97:4e:2b:ea:8f:f8:
0b:c4:1f:de:6f:cd:95:f5:ff:72:6a:43:8d:ae:45:
6a:aa:67:4d:da:a1:87:96:35:4b:f4:43:44:46:a7:
a9:b0:d1:33:f4:8b:32:5f:91:9e:4f:ae:6d:4d:e1:
f1:a2:b9:01:09:30:dc:5e:bf:aa:4a:59:5c:85:fd:
cb:0e:1c:f8:b5:3c:13:a2:28:27:c8:8e:9c:ba:f7:
af:f5:bd:a4:0c:24:a2:c1:bd:f1:54:5e:8a:72:39:
af:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A3:6F:5B:5B:07:22:B3:8C:D7:F1:E4:6B:F3:C5:78:1D:BE:E2:D2
X509v3 Authority Key Identifier:
keyid:F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:25:00:72:b3:69:47:9a:9c:22:f1:fa:47:18:71:56:80:d8:
f6:44:f7:ca:95:a0:e7:da:05:58:51:91:59:38:86:5a:b4:83:
d8:80:fb:27:69:02:66:57:8c:57:2d:23:58:27:b5:ab:1e:f1:
e9:7e:ca:f6:81:57:70:c5:3a:76:58:32:22:22:62:8d:30:2b:
ff:d8:fc:e9:28:7c:0d:94:0f:c0:d4:fc:4e:6f:8c:e3:09:91:
82:75:24:e8:27:2e:95:0a:83:aa:24:c0:c7:8d:a2:3f:14:33:
ca:de:03:6a:7b:c0:d8:77:0a:66:90:91:59:ff:ec:2a:ac:73:
15:ed:fa:6a:0b:92:b3:76:22:32:51:e1:43:3e:a1:4b:33:ef:
d5:17:20:1a:ff:c1:3c:7a:ad:74:a1:bd:5e:45:57:6d:d4:61:
5e:3b:37:b6:bf:8d:d6:59:44:fb:2f:98:a7:b4:b4:65:18:0a:
d5:21:7f:41:77:c9:03:ff:1c:f4:ab:64:72:3a:80:fe:3a:35:
26:7a:ad:a2:59:ee:d0:e8:a9:d6:64:59:b3:9f:3e:d3:17:20:
10:43:e9:66:2e:88:80:97:af:8b:62:50:b4:11:62:6f:a2:4d:
f1:98:88:fe:d3:ee:b6:db:fc:21:6a:b8:a0:99:87:d5:67:7c:
2d:d4:bc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:11:18 2026 by rpki-client