
$ rpki-client -vvf rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/BdWrUxqhFu1SmE_0vUXQ0thDi2g.mft
File: BdWrUxqhFu1SmE_0vUXQ0thDi2g.mft (raw, json)
Hash identifier: sYiVyBilwllBGJt8wSEL76k3DqpLlhejonLrExHV9uE=
Subject key identifier: 6C:68:00:E8:51:D8:13:89:3F:17:99:B7:D5:DC:53:DB:F9:6B:16:DC
Authority key identifier: 05:D5:AB:53:1A:A1:16:ED:52:98:4F:F4:BD:45:D0:D2:D8:43:8B:68
Certificate issuer: /CN=A91799DA/serialNumber=05D5AB531AA116ED52984FF4BD45D0D2D8438B68
Certificate serial: 18
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdWrUxqhFu1SmE_0vUXQ0thDi2g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/BdWrUxqhFu1SmE_0vUXQ0thDi2g.mft
Manifest number: 17
Signing time: Thu 23 Jul 2026 11:03:22 +0000
Manifest this update: Thu 23 Jul 2026 11:03:22 +0000
Manifest next update: Thu 30 Jul 2026 11:03:22 +0000
Files and hashes: 1: BdWrUxqhFu1SmE_0vUXQ0thDi2g.crl (hash: bnrfA2U4mvROGh75cT5WSTtXElu/LIGZ/p5+USQzMbs=)
2: 010F5BB8638A11F1A70F2DF16B47A888.roa (hash: AJA3j4Sapw820tITzgJm8anzppqi5qFKdDdco1bm2o0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/BdWrUxqhFu1SmE_0vUXQ0thDi2g.crl
rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/BdWrUxqhFu1SmE_0vUXQ0thDi2g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdWrUxqhFu1SmE_0vUXQ0thDi2g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91799DA, serialNumber=05D5AB531AA116ED52984FF4BD45D0D2D8438B68
Validity
Not Before: Jul 23 11:03:22 2026 GMT
Not After : Jul 30 11:03:22 2026 GMT
Subject: CN=6a61f4fa-3627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:83:51:b5:c1:10:57:ed:2a:f8:8f:09:70:
d1:13:19:9a:7c:14:3e:b8:8a:84:2f:18:c8:88:24:
e0:12:c4:b1:e3:62:c9:e4:e0:a9:92:f3:b2:55:f6:
2a:62:68:c1:ec:6c:56:3c:39:4c:21:3c:dc:4e:6c:
a8:db:44:6b:ee:0b:d6:8b:19:d3:49:ce:7f:d6:09:
b8:eb:a8:fb:05:5b:d8:b2:bf:da:81:f8:aa:3d:f9:
e0:17:3b:2a:73:43:6a:e1:02:95:b3:2d:09:28:eb:
82:41:38:78:ed:7e:22:d1:f7:b6:e8:5a:76:ad:e9:
95:5a:c7:55:fb:58:34:c0:7a:da:e9:14:d2:43:ef:
40:20:75:90:81:41:5d:78:61:bf:c4:48:a4:fd:f1:
5d:fb:42:53:f3:08:a1:b1:be:30:33:2d:a2:2b:fd:
11:90:d6:96:6c:71:e8:27:c3:d4:9b:85:ca:bf:ad:
85:18:5d:12:72:64:04:4a:b0:67:ac:f2:1d:3c:86:
7d:c8:c9:f4:f9:57:49:66:78:5b:2c:98:3a:a6:00:
a7:1f:1a:0a:cf:3d:a2:6d:c8:df:1e:09:ca:ca:de:
bf:96:16:7b:3b:14:c5:8f:e2:8e:8a:19:64:d6:e4:
d4:05:92:d3:62:79:a8:db:9b:b3:9d:33:c2:aa:ee:
42:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:68:00:E8:51:D8:13:89:3F:17:99:B7:D5:DC:53:DB:F9:6B:16:DC
X509v3 Authority Key Identifier:
keyid:05:D5:AB:53:1A:A1:16:ED:52:98:4F:F4:BD:45:D0:D2:D8:43:8B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/BdWrUxqhFu1SmE_0vUXQ0thDi2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdWrUxqhFu1SmE_0vUXQ0thDi2g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/BdWrUxqhFu1SmE_0vUXQ0thDi2g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:11:65:01:6c:63:2f:5b:f4:3f:ba:5a:7b:a2:88:2c:c9:ec:
04:69:1a:6e:ff:94:ef:41:38:bd:20:19:18:9b:57:dd:3b:95:
05:a0:27:b2:d4:95:e0:d1:d5:84:b8:55:b9:e9:3b:50:11:22:
be:60:3d:1f:a7:e0:1a:95:e8:4c:e6:d2:f5:9f:d5:39:7d:06:
cc:27:8e:43:01:3e:39:47:60:6e:ad:87:96:34:a9:ab:3c:f1:
2e:9d:90:7e:d9:12:2f:b4:e6:83:b1:76:ea:81:e8:a0:28:29:
3d:bf:e2:b2:6e:f0:08:b0:7c:37:f2:57:04:59:44:ec:9b:57:
52:b0:51:b3:b7:bf:8b:2c:3b:ff:fe:db:98:32:7c:c9:56:68:
ce:07:d9:e9:f0:1b:dc:73:6e:8e:2c:47:5f:08:77:99:81:d0:
ff:d2:87:29:75:a4:25:8b:ec:11:ff:b3:cc:7e:41:03:d1:92:
26:fd:03:94:47:63:9d:ce:f2:fd:64:e9:64:5a:4a:7e:13:74:
1c:4d:f4:1e:06:9c:fa:65:57:11:b7:88:7c:10:80:ad:b1:95:
cb:89:cf:c1:63:5d:2b:fa:14:e5:a4:ed:f2:37:4c:9e:a9:28:
f5:a2:eb:79:fd:5c:b0:a9:0a:7d:77:8d:67:f8:fd:ba:2d:36:
e8:8f:ca:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:12 2026 by rpki-client