
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
File: bP1Wp36tnhWbyxjrbehic1CRtUo.mft (raw, json)
Hash identifier: y3keIx70eUZT/EM8OmGkXmyAb6LTjpFgQjO9lQ+FhIU=
Subject key identifier: BA:CF:60:0B:66:60:BA:3D:B8:78:0B:A0:79:4B:47:93:4C:68:E8:44
Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
Certificate issuer: /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Certificate serial: 1ACF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
Manifest number: 1A1E
Signing time: Sat 26 Sep 2026 16:25:45 +0000
Manifest this update: Sat 26 Sep 2026 16:25:44 +0000
Manifest next update: Sat 03 Oct 2026 16:25:44 +0000
Files and hashes: 1: bP1Wp36tnhWbyxjrbehic1CRtUo.crl (hash: zcw/nfnKSvvEWTPXL7qy4HUZbdUphyWOPbNd4WTAzx0=)
2: 7AF2C29C50C811F09EF54B31C4F9AE02.roa (hash: Sta5WGK3SLfZNqv60mjDXNcBJ4MqqUXVVGVFSVrI1q4=)
3: 682214D6505711F08AA6EA60C4F9AE02.roa (hash: CYn5FbDQJwvgrpDM96NCRvn3NqNQHPz+9lH49qoII28=)
4: 4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa (hash: nrJDd2QA1UNVG+vt7JNddT/n01oYQdaHjEbfsoIybfQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 16:25:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6863 (0x1acf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Validity
Not Before: Sep 26 16:25:44 2026 GMT
Not After : Oct 3 16:25:44 2026 GMT
Subject: CN=6ab7f208-61c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:27:ba:8c:40:1d:8e:11:6d:35:f1:b3:d2:40:
f2:68:4a:de:7d:dc:1c:1c:99:0a:4e:31:84:b8:91:
fc:7e:0f:b8:97:95:ed:b7:2e:d6:1c:e2:25:4f:ec:
16:50:70:16:42:f3:c9:ae:83:8c:f0:6e:b3:8a:28:
69:b7:fc:9f:32:fd:f8:10:36:48:6c:5f:f6:0a:67:
7f:5f:1d:fe:89:cd:7c:ce:b1:d0:1d:7b:ef:42:45:
ed:01:ee:d0:73:2c:e8:51:46:72:cb:ba:83:35:2c:
f5:12:0e:b1:fe:2c:0b:3b:09:56:6d:99:06:b4:3d:
15:76:27:68:39:bb:3a:79:f2:98:27:79:b5:98:cd:
b2:19:10:96:04:a8:62:a9:e9:dd:b2:4c:10:d6:af:
cc:1f:ee:c5:4f:e6:48:52:36:aa:e1:4a:0c:4b:e7:
fa:37:52:90:b9:d7:66:13:b1:81:5f:0e:45:e1:11:
0b:1a:1a:10:b9:48:2c:eb:63:74:a1:e4:cf:12:b1:
66:e0:e3:7e:cf:8d:d8:db:94:80:3b:86:65:41:6e:
7f:c6:a2:f7:10:9d:62:94:30:fa:4a:b3:92:04:9d:
bf:96:55:a5:24:d0:ad:fc:8b:29:4b:b8:e4:ed:91:
d8:bb:bc:c3:47:30:a6:88:24:0e:95:62:60:ae:60:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CF:60:0B:66:60:BA:3D:B8:78:0B:A0:79:4B:47:93:4C:68:E8:44
X509v3 Authority Key Identifier:
keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:da:60:3e:d7:a0:12:c6:87:82:8c:a0:31:a9:72:c6:72:ac:
3a:2a:8f:5a:93:30:1e:b8:ae:28:31:6d:97:03:d3:94:c2:09:
9f:4a:91:51:ce:1a:5a:fb:2a:79:3c:02:36:ec:35:30:2c:62:
7c:b5:f5:d7:12:ed:9d:8f:01:05:73:5f:86:f9:9f:9c:cb:99:
af:51:4d:ab:4b:26:da:f4:53:ad:5c:1a:c3:71:1f:54:3e:95:
08:4d:18:7a:a0:52:dd:f8:ba:79:26:79:1c:11:b1:e4:49:42:
a7:24:a7:34:12:91:08:9e:54:da:6f:f3:80:19:b5:b7:66:09:
24:53:98:7c:20:d6:b2:dd:6a:66:f0:88:f8:74:de:21:64:6d:
ac:13:c0:d8:36:80:0e:e7:78:b9:43:f9:a5:04:25:23:8a:38:
65:ed:6d:37:20:06:72:71:20:ad:b7:07:ae:6a:f3:f0:c6:4a:
54:b6:3e:ad:50:2d:73:84:c0:f8:09:f0:26:ac:ee:87:a6:b8:
e7:cf:1a:34:62:5d:1a:78:f1:1c:fe:c4:20:8d:fa:9c:4f:5e:
51:e9:ab:f3:89:a9:43:0d:79:2b:17:b1:c7:77:5f:80:65:e6:
1e:a2:d5:63:d0:30:24:ad:13:36:2d:d8:d1:a2:bb:1d:2d:b3:
d5:6a:1c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:58:50 2026 by rpki-client