
$ rpki-client -vvf rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
File: bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft (raw, json)
Hash identifier: 87Wur7J2bPr1wMIYrXG78rOBK0H0Blbm0rp+pB67m/Q=
Subject key identifier: 19:9C:44:A2:ED:C4:8A:DD:73:C5:F7:67:30:3E:17:9F:79:91:87:F4
Authority key identifier: 6E:1F:12:40:9C:F3:9B:F9:13:C4:32:B5:87:6F:FA:FD:9F:D0:61:95
Certificate issuer: /CN=A919243F/serialNumber=6E1F12409CF39BF913C432B5876FFAFD9FD06195
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
Manifest number: 8B
Signing time: Thu 23 Jul 2026 09:25:42 +0000
Manifest this update: Thu 23 Jul 2026 09:25:41 +0000
Manifest next update: Thu 30 Jul 2026 09:25:41 +0000
Files and hashes: 1: bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl (hash: x4tWPm8efTtoLM5VnRkAwPopy+QmzcAwNqbQ/owopMQ=)
2: 384B24AAB65511F0AE39E37FC4F9AE02.roa (hash: 5Y743cqmfS64WE3oNhO7FpcyGYqVQg0KBej2FkM8DC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl
rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919243F, serialNumber=6E1F12409CF39BF913C432B5876FFAFD9FD06195
Validity
Not Before: Jul 23 09:25:41 2026 GMT
Not After : Jul 30 09:25:41 2026 GMT
Subject: CN=6a61de16-c38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:36:af:fe:ce:f2:68:36:ca:87:96:49:84:d5:
fb:ac:59:0e:b0:51:26:fd:e1:d0:68:b6:c5:51:92:
d0:e6:f0:1c:97:43:73:4d:17:cc:56:79:70:64:26:
05:fe:09:d6:19:04:df:cb:08:d5:e9:17:e2:53:7c:
0b:bb:4a:2d:82:34:b5:9d:75:19:a9:f8:f2:8f:1e:
75:3a:f9:5f:7d:b7:2f:37:f7:26:ac:9b:d9:86:4f:
6f:55:bb:a2:ab:01:50:96:3f:5f:30:fa:e7:9f:fe:
fc:e5:73:11:ef:61:7d:a1:e1:cf:94:16:15:6f:49:
87:a1:32:a3:2c:6f:61:13:b5:c6:c3:37:c6:e2:55:
c3:b1:1b:10:66:8c:89:08:57:cb:c0:e1:b7:16:38:
8a:ab:5b:a0:a8:28:ef:40:89:86:78:44:8b:32:be:
17:11:d8:48:e5:7b:66:35:ac:e8:1f:6f:bc:3a:2f:
69:e9:e5:9e:3d:4c:ce:fc:3e:19:bf:01:f9:6b:31:
3f:68:39:66:58:98:83:31:48:4a:48:ca:c1:8a:e3:
71:ca:48:27:ce:b4:eb:d4:24:06:ac:e0:13:59:b4:
6c:75:c9:9e:ed:cb:bf:5b:03:9c:0b:76:38:80:fe:
dc:6b:4b:1a:cc:ad:d1:27:01:43:f6:59:23:bf:38:
9b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9C:44:A2:ED:C4:8A:DD:73:C5:F7:67:30:3E:17:9F:79:91:87:F4
X509v3 Authority Key Identifier:
keyid:6E:1F:12:40:9C:F3:9B:F9:13:C4:32:B5:87:6F:FA:FD:9F:D0:61:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c1:a0:69:65:01:66:72:6e:c8:a3:3c:af:bc:f7:c7:f8:0d:
ed:fb:b4:f4:c3:28:37:58:5f:d7:77:fc:88:ae:3e:65:f3:97:
6b:0f:30:a8:9b:ae:86:36:19:98:a7:8d:29:f2:aa:0d:51:1d:
a1:c2:32:7e:9c:a7:f7:af:78:76:17:38:8d:6a:1c:4b:9a:78:
ce:e2:f0:91:c2:83:73:d3:17:03:6c:f6:52:1b:a5:cd:59:b3:
ce:59:b2:16:63:91:28:b4:63:db:a9:18:01:8a:bd:ac:6e:8c:
a6:a9:4b:35:d7:6e:b1:7c:bf:07:b5:cd:27:79:63:4e:77:66:
ef:01:fa:c4:2c:23:b5:64:c2:4c:42:7f:67:ec:d2:cd:df:d3:
4e:e0:6b:04:a1:3a:c0:28:84:86:c3:90:92:f2:32:5c:98:62:
6c:62:12:5d:21:6f:56:8e:ce:28:b8:fc:13:78:50:77:43:34:
f5:cf:06:bf:ad:18:7e:fc:11:e6:2e:33:63:52:30:1a:44:6c:
32:45:d3:90:29:70:c1:cd:9c:c1:4d:4a:61:6c:70:0b:c4:83:
a4:da:d0:1d:04:6d:c3:2f:64:24:ac:90:60:86:f8:9b:0e:28:
ec:a8:f9:4d:9b:60:81:b6:87:f7:f8:37:85:12:c4:31:a1:bb:
2d:fb:0f:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTI0M0YxMTAvBgNVBAUTKDZFMUYxMjQwOUNGMzlCRjkxM0M0MzJCNTg3NkZGQUZE
OUZEMDYxOTUwHhcNMjYwNzIzMDkyNTQxWhcNMjYwNzMwMDkyNTQxWjAYMRYwFAYD
VQQDEw02YTYxZGUxNi1jMzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0zav/s7yaDbKh5ZJhNX7rFkOsFEm/eHQaLbFUZLQ5vAcl0NzTRfMVnlwZCYF
/gnWGQTfywjV6RfiU3wLu0otgjS1nXUZqfjyjx51OvlffbcvN/cmrJvZhk9vVbui
qwFQlj9fMPrnn/785XMR72F9oeHPlBYVb0mHoTKjLG9hE7XGwzfG4lXDsRsQZoyJ
CFfLwOG3FjiKq1ugqCjvQImGeESLMr4XEdhI5XtmNazoH2+8Oi9p6eWePUzO/D4Z
vwH5azE/aDlmWJiDMUhKSMrBiuNxykgnzrTr1CQGrOATWbRsdcme7cu/WwOcC3Y4
gP7ca0sazK3RJwFD9lkjvzibJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBmcRKLt
xIrdc8X3ZzA+F595kYf0MB8GA1UdIwQYMBaAFG4fEkCc85v5E8QytYdv+v2f0GGV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjQzRi9FOERDQTYzMkI2
NTQxMUYwOUVDRjRCN0ZDNEY5QUUwMi9iaDhTUUp6em1fa1R4REsxaDJfNl9aX1FZ
WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JoOFNRSnp6bV9rVHhESzFoMl82X1pfUVlaVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjQzRi9FOERDQTYzMkI2NTQxMUYwOUVDRjRCN0ZDNEY5QUUwMi9iaDhTUUp6em1f
a1R4REsxaDJfNl9aX1FZWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnMGgaWUBZnJuyKM8r7z3x/gN7fu09MMoN1hf13f8iK4+ZfOXaw8wqJuuhjYZ
mKeNKfKqDVEdocIyfpyn9694dhc4jWocS5p4zuLwkcKDc9MXA2z2UhulzVmzzlmy
FmORKLRj26kYAYq9rG6MpqlLNddusXy/B7XNJ3ljTndm7wH6xCwjtWTCTEJ/Z+zS
zd/TTuBrBKE6wCiEhsOQkvIyXJhibGISXSFvVo7OKLj8E3hQd0M09c8Gv60YfvwR
5i4zY1IwGkRsMkXTkClwwc2cwU1KYWxwC8SDpNrQHQRtwy9kJKyQYIb4mw4o7Kj5
TZtggbaH9/g3hRLEMaG7LfsPWw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:48:46 2026 by rpki-client