
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft
File: bBH4O5qMvdIVMt3w6mHek4jRPGs.mft (raw, json)
Hash identifier: MPE2q8kfMJiVeQWZL6OCDbu72iyYgGG0dRIDCkdu6vc=
Subject key identifier: 6F:77:5D:AF:61:9C:FC:22:0D:49:76:AC:AD:F1:7B:B0:EE:64:AA:AA
Authority key identifier: 6C:11:F8:3B:9A:8C:BD:D2:15:32:DD:F0:EA:61:DE:93:88:D1:3C:6B
Certificate issuer: /CN=A917D958/serialNumber=6C11F83B9A8CBDD21532DDF0EA61DE9388D13C6B
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft
Manifest number: 0156
Signing time: Fri 25 Sep 2026 05:17:21 +0000
Manifest this update: Fri 25 Sep 2026 05:17:20 +0000
Manifest next update: Fri 02 Oct 2026 05:17:20 +0000
Files and hashes: 1: bBH4O5qMvdIVMt3w6mHek4jRPGs.crl (hash: gNjbi5hgen8DoctC23e7rygYBm7pi2DzX2gUabI2z1s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.crl
rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D958, serialNumber=6C11F83B9A8CBDD21532DDF0EA61DE9388D13C6B
Validity
Not Before: Sep 25 05:17:20 2026 GMT
Not After : Oct 2 05:17:20 2026 GMT
Subject: CN=6ab603e1-2438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:06:12:d9:9e:55:13:17:ea:06:e9:cb:42:df:
08:bb:f4:1b:7f:63:db:c5:22:a9:fd:f1:82:12:33:
9b:0d:8f:3f:18:0b:8f:f6:73:d4:a6:27:6d:16:d6:
86:aa:43:47:48:ab:37:63:4f:2c:ca:8b:fc:77:50:
36:4f:c3:ff:cf:66:3a:b8:80:7d:5f:fc:5c:d4:49:
fb:ad:4a:0b:f3:17:db:d8:31:8c:9c:2a:5d:5c:fb:
d2:05:79:36:0c:65:18:3f:b6:29:ef:09:9a:22:be:
6f:d5:47:d7:71:e5:e1:9f:49:aa:95:84:f0:0e:88:
fd:fa:f6:f6:bb:0c:48:be:6e:47:63:78:bd:3b:7f:
6b:dd:5f:7a:83:de:2e:d6:e9:a6:ef:4d:33:41:75:
7c:73:9a:1d:26:e0:7b:31:7a:94:29:25:1b:60:ea:
5e:cc:3f:2a:a6:c0:b0:a3:b1:c6:f3:74:d7:6e:6c:
ce:cb:90:9d:6e:c9:11:0d:df:a6:62:f1:3a:b3:ff:
d7:3c:e2:99:f1:ce:ab:cc:9a:79:db:1f:c5:9e:77:
d4:0c:39:9d:84:9c:62:ad:3c:42:c1:87:a5:8c:aa:
cb:52:c7:82:3f:47:31:3e:68:68:f1:8b:17:5a:b0:
f4:11:67:68:b5:3a:07:59:6a:1c:7b:6f:48:05:90:
7e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:77:5D:AF:61:9C:FC:22:0D:49:76:AC:AD:F1:7B:B0:EE:64:AA:AA
X509v3 Authority Key Identifier:
keyid:6C:11:F8:3B:9A:8C:BD:D2:15:32:DD:F0:EA:61:DE:93:88:D1:3C:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f2:70:f7:50:ce:ff:81:bf:3a:65:38:52:b3:20:19:2f:d8:
f7:d7:8c:af:b3:dd:72:3b:ce:fe:63:3d:0c:71:1e:a3:4f:5c:
05:83:6a:d7:f3:38:f3:4c:8d:47:d3:26:ae:50:65:31:87:70:
47:cb:d0:b7:b3:ae:c7:1b:8b:6e:37:31:9e:fc:8d:e2:92:04:
1e:4d:f4:95:16:30:ca:ec:7f:37:6d:c9:8f:dd:68:91:1f:70:
fc:be:fb:c4:91:e0:65:cb:74:60:9c:e6:20:9b:0f:eb:aa:e8:
c8:10:6b:93:4e:af:59:3c:5a:bb:62:bd:75:64:ba:c5:b0:7d:
1a:eb:c2:1c:6f:78:b4:45:e5:28:1a:92:10:a8:b4:b4:5e:14:
f1:9f:97:16:3e:65:56:86:ae:a6:ae:89:bc:3b:33:c5:09:db:
91:ad:dd:50:1c:f9:74:fb:a2:5f:9f:b4:6f:17:98:6b:da:7b:
9c:b6:3c:bf:d4:0e:de:c1:76:f3:2c:68:2f:6a:eb:65:a9:b5:
7e:b3:e0:2b:4a:3b:01:2e:42:f9:15:5e:fc:f1:33:c2:f3:d1:
57:13:9f:ff:87:f6:2d:1b:37:46:43:e9:96:02:1f:39:e3:78:
4c:df:ac:7f:82:57:25:ce:b6:f7:44:8e:57:75:f3:05:c9:d0:
f5:aa:ff:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:18:45 2026 by rpki-client