
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft
File: BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft (raw, json)
Hash identifier: 9JXx8YTEb8S5osCsQ2re1CMJb1KHWOR92ca5hkuFEtI=
Subject key identifier: 6B:A7:DC:FE:B3:51:A5:8B:8B:37:74:91:E1:E6:C0:05:FF:7F:A2:58
Authority key identifier: 05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29
Certificate issuer: /CN=A9199B85/serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29
Certificate serial: 01CE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft
Manifest number: 01CE
Signing time: Thu 23 Jul 2026 01:40:48 +0000
Manifest this update: Thu 23 Jul 2026 01:40:48 +0000
Manifest next update: Thu 30 Jul 2026 01:40:48 +0000
Files and hashes: 1: BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl (hash: GA+9wxb10maLl7jzLn0ycbmVY7WQfQknUpK3aGYXVKo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl
rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:40:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199B85, serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29
Validity
Not Before: Jul 23 01:40:48 2026 GMT
Not After : Jul 30 01:40:48 2026 GMT
Subject: CN=6a617120-ecd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5a:a3:0f:19:4f:5b:e4:ec:8c:3a:ce:e9:ff:
6d:76:87:d0:57:c1:88:e8:18:3e:99:b7:10:8d:6a:
ee:fb:b2:92:44:1a:db:2e:c0:e9:2f:15:e5:cd:13:
e6:f0:3c:35:fa:1e:b7:53:71:6f:2f:2a:48:58:17:
bc:e5:8e:cc:fe:6a:f6:7e:d7:1c:bf:a9:35:3c:66:
c8:61:c7:83:fe:10:94:b5:8e:20:d0:47:65:12:e4:
7f:da:3a:bd:cc:ba:29:0f:2e:ed:66:66:f2:f8:9a:
7a:47:88:b1:3f:d1:d4:3a:4a:e3:18:b1:0b:21:e1:
e8:d6:fe:02:e8:b6:2b:13:d7:33:1c:a6:3c:1d:2b:
cf:d1:f8:2b:23:57:8e:c0:0a:fb:18:47:ef:9a:9a:
3b:7b:dd:63:a9:66:9a:31:bb:82:60:12:b7:1d:09:
08:73:45:f9:43:a8:fb:95:2c:d0:99:22:31:3b:55:
ac:25:87:d4:96:58:3a:c2:f6:33:2f:47:8e:52:64:
c1:b6:c9:88:9a:bb:ce:1d:1a:9e:48:0b:6d:c9:25:
36:bd:d2:28:22:dd:4f:5b:93:00:18:83:2e:b8:cf:
e3:93:73:0f:bc:1e:2c:de:d7:56:63:a1:9d:d8:b6:
33:d8:12:05:0a:a0:62:7f:c5:72:d1:ff:ab:d8:a3:
02:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A7:DC:FE:B3:51:A5:8B:8B:37:74:91:E1:E6:C0:05:FF:7F:A2:58
X509v3 Authority Key Identifier:
keyid:05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:35:41:4e:3c:f4:14:e6:de:12:ff:31:a3:ae:6f:a5:15:2d:
5a:2c:a8:b5:bd:f5:9f:bd:d0:fc:19:93:b7:93:7f:3a:3f:02:
99:d0:00:89:f8:a5:1d:c6:3b:69:bc:9c:bf:5d:9e:60:e5:11:
85:22:c9:2f:47:b2:4c:5c:8c:84:98:97:74:da:e7:c5:d7:5d:
20:d8:fc:fe:c7:0e:ea:c7:35:3c:0e:88:a2:be:e5:f9:1b:aa:
2d:23:ef:c7:56:a5:d7:54:f1:54:f2:23:2f:12:19:84:76:22:
0d:14:4b:ee:47:e8:23:0c:83:90:1f:9c:17:1f:65:c0:2b:22:
46:30:4b:e1:fd:4b:f6:65:86:25:f2:ed:8c:59:6e:3d:7c:7d:
f9:d9:23:c6:13:3d:1c:2e:eb:14:19:d6:4a:3b:7c:09:3a:5d:
ed:f3:99:4a:08:4e:ca:9d:14:ed:92:c4:3b:d1:64:81:90:ec:
47:e4:ee:c9:31:22:9f:56:46:a7:0f:ab:84:11:bb:6e:6f:2f:
98:d1:99:e3:48:fc:ca:5d:4e:3f:ce:d0:95:db:19:81:4d:4e:
84:68:66:b0:f6:7f:6e:92:48:68:fd:65:ae:f6:9c:a0:c8:d7:
d6:90:2c:5e:90:5f:7e:91:a6:32:ed:14:8a:9c:2c:56:02:83:
63:6a:95:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlCODUxMTAvBgNVBAUTKDA1QTMzNkY2NDZDNjgzMzc4OUI2QUU3QzkyMDcyQjdG
OTREOURDMjkwHhcNMjYwNzIzMDE0MDQ4WhcNMjYwNzMwMDE0MDQ4WjAYMRYwFAYD
VQQDEw02YTYxNzEyMC1lY2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqlqjDxlPW+TsjDrO6f9tdofQV8GI6Bg+mbcQjWru+7KSRBrbLsDpLxXlzRPm
8Dw1+h63U3FvLypIWBe85Y7M/mr2ftccv6k1PGbIYceD/hCUtY4g0EdlEuR/2jq9
zLopDy7tZmby+Jp6R4ixP9HUOkrjGLELIeHo1v4C6LYrE9czHKY8HSvP0fgrI1eO
wAr7GEfvmpo7e91jqWaaMbuCYBK3HQkIc0X5Q6j7lSzQmSIxO1WsJYfUllg6wvYz
L0eOUmTBtsmImrvOHRqeSAttySU2vdIoIt1PW5MAGIMuuM/jk3MPvB4s3tdWY6Gd
2LYz2BIFCqBif8Vy0f+r2KMCJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGun3P6z
UaWLizd0keHmwAX/f6JYMB8GA1UdIwQYMBaAFAWjNvZGxoM3ibaufJIHK3+U2dwp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS83RDg2QTIzOEM2
MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6ZUp0cTU4a2djcmY1VFoz
Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0JhTTI5a2JHZ3plSnRxNThrZ2NyZjVUWjNDay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUI4NS83RDg2QTIzOEM2MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6
ZUp0cTU4a2djcmY1VFozQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALTVBTjz0FObeEv8xo65vpRUtWiyotb31n73Q/BmTt5N/Oj8CmdAAifilHcY7
abycv12eYOURhSLJL0eyTFyMhJiXdNrnxdddINj8/scO6sc1PA6Ior7l+RuqLSPv
x1al11TxVPIjLxIZhHYiDRRL7kfoIwyDkB+cFx9lwCsiRjBL4f1L9mWGJfLtjFlu
PXx9+dkjxhM9HC7rFBnWSjt8CTpd7fOZSghOyp0U7ZLEO9FkgZDsR+TuyTEin1ZG
pw+rhBG7bm8vmNGZ40j8yl1OP87QldsZgU1OhGhmsPZ/bpJIaP1lrvacoMjX1pAs
XpBffpGmMu0UipwsVgKDY2qVIg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:07:17 2026 by rpki-client