
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft
File: bjdXKUWj6XupZFmfpVXE20JjwOQ.mft (raw, json)
Hash identifier: URsUgU0rPGNlmbJW196V7+HbQXdiA+Gw7MyW6NLLedQ=
Subject key identifier: 10:97:D2:3A:5E:64:0F:AD:7D:43:3C:33:11:25:00:39:EB:88:02:14
Authority key identifier: 6E:37:57:29:45:A3:E9:7B:A9:64:59:9F:A5:55:C4:DB:42:63:C0:E4
Certificate issuer: /CN=A9176302/serialNumber=6E37572945A3E97BA964599FA555C4DB4263C0E4
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft
Manifest number: E2
Signing time: Thu 23 Jul 2026 05:59:09 +0000
Manifest this update: Thu 23 Jul 2026 05:59:08 +0000
Manifest next update: Thu 30 Jul 2026 05:59:08 +0000
Files and hashes: 1: bjdXKUWj6XupZFmfpVXE20JjwOQ.crl (hash: DGMkOyo3x0Cylj3qy3dyOGyW8gyf1kb5r6uIBxRnwIA=)
2: CF8B8B1213F611F198102FE6173D8C67.roa (hash: iNP0mINm72fjKibmdjNK8gcDlvjx30Q6m7xpbvLIfrU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.crl
rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:59:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176302, serialNumber=6E37572945A3E97BA964599FA555C4DB4263C0E4
Validity
Not Before: Jul 23 05:59:08 2026 GMT
Not After : Jul 30 05:59:08 2026 GMT
Subject: CN=6a61adad-11b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:ee:cb:cc:18:5a:7f:df:a0:6c:16:74:b9:
72:a8:de:33:fd:e3:23:e6:d0:55:65:6f:fe:a7:93:
01:e4:1b:fc:5c:17:8e:56:27:a8:54:77:d1:f0:69:
20:9f:80:10:a1:f1:22:c3:d5:cf:d9:3c:f8:d2:2b:
4f:02:51:39:f0:e1:28:24:0a:36:83:3a:8d:ae:b9:
81:5b:27:be:0b:4c:00:44:7c:3b:8c:51:b7:f8:0d:
61:71:aa:f3:41:e3:3b:bf:e9:02:b5:7b:30:24:32:
ee:bd:71:d1:bc:2c:cc:04:59:7a:3a:55:9b:2c:42:
26:1d:d2:49:7b:8a:64:03:34:60:d2:53:8f:24:99:
b7:a6:a7:f4:67:48:48:d6:59:4a:d5:74:e8:25:5c:
a8:25:d5:c7:fc:ad:4b:ca:89:fa:c3:ec:8f:cc:2c:
43:9e:fb:d1:cc:7c:79:ed:55:96:97:f5:81:70:f5:
fb:e6:47:13:21:5a:c1:ec:de:08:93:1e:c2:51:bd:
24:a2:7f:95:81:70:91:d5:db:e3:bb:c3:13:85:ea:
01:c7:79:f2:4c:f1:94:13:be:e7:58:f6:9c:0a:8f:
ff:d7:2b:85:75:44:41:98:5e:fd:12:ab:46:c7:7f:
82:bb:47:9b:df:83:d8:1d:e4:a0:f7:95:fe:00:0e:
54:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:97:D2:3A:5E:64:0F:AD:7D:43:3C:33:11:25:00:39:EB:88:02:14
X509v3 Authority Key Identifier:
keyid:6E:37:57:29:45:A3:E9:7B:A9:64:59:9F:A5:55:C4:DB:42:63:C0:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8c:9a:c3:0e:f0:ff:d9:11:4a:99:8f:9f:78:eb:d6:13:0d:
5e:48:60:1f:f6:0b:16:18:37:ae:ef:c7:7e:14:53:95:2e:d0:
ff:56:91:f4:24:7d:d5:d7:ad:b1:a7:95:52:00:8a:6c:5a:5f:
eb:81:18:0a:69:5d:4f:ed:47:5f:5f:47:ab:14:6b:d9:4d:fc:
17:85:7f:04:3b:64:f5:0a:c7:f3:23:42:aa:c6:50:87:cf:27:
52:0a:4a:91:26:25:63:aa:fb:e9:5a:3e:97:04:6a:47:97:bc:
d2:1b:28:1e:5e:b4:a4:c3:e7:f0:e2:37:26:15:f3:77:ef:da:
80:5c:21:8a:ec:82:6c:79:4c:5f:a7:6d:e3:df:29:6f:1f:a9:
9b:b4:e9:d6:b7:be:c0:96:e8:9b:f9:7e:bb:e5:6f:a4:dc:51:
08:5c:ac:99:ef:4c:fc:92:10:7b:fa:4b:c1:83:6b:a3:29:50:
78:34:21:9f:cc:d6:b6:b4:c6:50:e4:02:e5:05:ec:0b:09:59:
ec:80:98:a2:24:3f:de:dd:be:6a:fe:74:1c:a9:44:31:03:86:
bf:be:4a:c5:6c:3c:60:c7:73:88:eb:a7:ec:67:a1:f3:5e:55:
44:8a:24:9f:2d:40:50:87:de:94:51:d3:0e:8c:d3:93:a1:18:
59:79:44:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzYzMDIxMTAvBgNVBAUTKDZFMzc1NzI5NDVBM0U5N0JBOTY0NTk5RkE1NTVDNERC
NDI2M0MwRTQwHhcNMjYwNzIzMDU1OTA4WhcNMjYwNzMwMDU1OTA4WjAYMRYwFAYD
VQQDEw02YTYxYWRhZC0xMWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArkzuy8wYWn/foGwWdLlyqN4z/eMj5tBVZW/+p5MB5Bv8XBeOVieoVHfR8Gkg
n4AQofEiw9XP2Tz40itPAlE58OEoJAo2gzqNrrmBWye+C0wARHw7jFG3+A1hcarz
QeM7v+kCtXswJDLuvXHRvCzMBFl6OlWbLEImHdJJe4pkAzRg0lOPJJm3pqf0Z0hI
1llK1XToJVyoJdXH/K1Lyon6w+yPzCxDnvvRzHx57VWWl/WBcPX75kcTIVrB7N4I
kx7CUb0kon+VgXCR1dvju8MTheoBx3nyTPGUE77nWPacCo//1yuFdURBmF79EqtG
x3+Cu0eb34PYHeSg95X+AA5UTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBCX0jpe
ZA+tfUM8MxElADnriAIUMB8GA1UdIwQYMBaAFG43VylFo+l7qWRZn6VVxNtCY8Dk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjMwMi8zNjI3MkRFODMw
NjUxMUYwOEU4MkEyMTRDNEY5QUUwMi9iamRYS1VXajZYdXBaRm1mcFZYRTIwSmp3
T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2JqZFhLVVdqNlh1cFpGbWZwVlhFMjBKandPUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjMwMi8zNjI3MkRFODMwNjUxMUYwOEU4MkEyMTRDNEY5QUUwMi9iamRYS1VXajZY
dXBaRm1mcFZYRTIwSmp3T1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADIyaww7w/9kRSpmPn3jr1hMNXkhgH/YLFhg3ru/HfhRTlS7Q/1aR9CR91det
saeVUgCKbFpf64EYCmldT+1HX19HqxRr2U38F4V/BDtk9QrH8yNCqsZQh88nUgpK
kSYlY6r76Vo+lwRqR5e80hsoHl60pMPn8OI3JhXzd+/agFwhiuyCbHlMX6dt498p
bx+pm7Tp1re+wJbom/l+u+VvpNxRCFysme9M/JIQe/pLwYNroylQeDQhn8zWtrTG
UOQC5QXsCwlZ7ICYoiQ/3t2+av50HKlEMQOGv75KxWw8YMdziOun7Geh815VRIok
ny1AUIfelFHTDozTk6EYWXlE9w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:37:49 2026 by rpki-client