
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.mft
File: BND4Sxq24xMZsDO-y8BTRf7P8Ek.mft (raw, json)
Hash identifier: 9e5j3q5M3iM4GdyTVCqE21leJygGD8TIChXrYkOMfGs=
Subject key identifier: A8:68:6B:7C:61:82:21:9F:9F:75:00:9D:A8:8E:B2:D1:C3:9E:F0:3A
Authority key identifier: 04:D0:F8:4B:1A:B6:E3:13:19:B0:33:BE:CB:C0:53:45:FE:CF:F0:49
Certificate issuer: /CN=A919AF98/serialNumber=04D0F84B1AB6E31319B033BECBC05345FECFF049
Certificate serial: 1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BND4Sxq24xMZsDO-y8BTRf7P8Ek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.mft
Manifest number: 19
Signing time: Sun 27 Sep 2026 09:37:24 +0000
Manifest this update: Sun 27 Sep 2026 09:37:23 +0000
Manifest next update: Sun 04 Oct 2026 09:37:23 +0000
Files and hashes: 1: BND4Sxq24xMZsDO-y8BTRf7P8Ek.crl (hash: xCwGUMbgw7yVCcPWF05C/A0zrN7XE/Q7a0dtpPuwY/Q=)
2: C00714349B8411F18334ED1A4411F970.roa (hash: WvayS8kOXeERf8gs4145wljiF/5B9WMa83/H0yClaxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.crl
rsync://rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BND4Sxq24xMZsDO-y8BTRf7P8Ek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 09:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AF98, serialNumber=04D0F84B1AB6E31319B033BECBC05345FECFF049
Validity
Not Before: Sep 27 09:37:23 2026 GMT
Not After : Oct 4 09:37:23 2026 GMT
Subject: CN=6ab8e3d4-f1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:06:8d:1c:7e:18:7c:30:06:aa:05:83:dc:
ae:89:31:19:98:c6:26:cb:e4:0e:6d:a8:55:30:d7:
62:62:7c:98:72:2c:41:72:95:f7:52:77:4e:db:3d:
20:99:3c:f1:3e:fd:49:1d:78:29:54:b6:d3:2a:98:
8e:f8:70:6d:c3:57:39:8d:8a:a9:3e:53:02:c3:0a:
93:2a:bb:cd:4b:94:71:29:d7:b0:f7:62:df:bd:8d:
7f:7c:cf:4f:28:10:25:50:7c:b0:b4:c7:b4:65:bb:
6b:32:1f:c7:5e:e8:4c:05:0f:07:04:93:ee:ca:ae:
ef:d9:e3:79:6f:a2:b9:77:c5:24:0d:bd:74:9c:34:
76:a5:50:b8:41:9a:e7:26:9f:cc:ed:1d:19:31:66:
8c:ba:3b:da:6d:2d:e3:15:11:90:11:47:c1:4c:a8:
07:c0:2f:54:de:fb:fe:62:84:18:62:58:81:4e:78:
65:ca:ab:b7:2d:9f:42:19:b2:ed:fc:ca:82:43:75:
84:6e:43:d5:d3:65:f2:40:5e:a6:80:08:93:97:ac:
03:07:50:15:f8:31:95:7e:a6:aa:05:8a:9a:de:e1:
29:87:ea:9d:31:99:cd:6b:24:dd:84:75:27:8f:55:
2c:33:5b:cb:e7:2c:37:df:99:b5:ce:91:bf:19:20:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:68:6B:7C:61:82:21:9F:9F:75:00:9D:A8:8E:B2:D1:C3:9E:F0:3A
X509v3 Authority Key Identifier:
keyid:04:D0:F8:4B:1A:B6:E3:13:19:B0:33:BE:CB:C0:53:45:FE:CF:F0:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BND4Sxq24xMZsDO-y8BTRf7P8Ek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AF98/2143469C9B8411F185EA4DE54211F970/BND4Sxq24xMZsDO-y8BTRf7P8Ek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:07:9c:5c:b5:19:17:66:1b:e1:11:4f:f1:b6:94:ee:5c:50:
c0:00:a0:ed:49:3b:f4:22:77:d6:e0:b2:ee:3d:1d:bd:b7:72:
b6:4e:59:5b:95:d7:c0:a6:47:4f:47:52:c5:63:0b:f4:b5:94:
ec:24:82:8f:51:0a:92:9f:e3:2c:e0:01:3a:aa:c9:ca:62:a3:
3f:60:c6:a5:ec:69:01:41:1d:52:3a:e3:e4:64:94:f2:e3:9a:
84:5b:f5:6e:e3:44:ba:42:72:cd:f5:e6:cf:2b:69:4f:c4:73:
17:4f:64:cc:ce:82:e0:25:ff:ce:4d:f1:a6:96:55:d8:17:a1:
60:3e:6f:a4:82:d4:ce:da:5e:89:30:74:03:56:ba:f3:38:4d:
8a:42:73:d0:6f:6c:3e:f5:e5:94:87:0d:d2:0e:a5:9d:b4:07:
7a:88:fb:7c:3b:46:1c:73:22:0d:bd:40:62:94:57:29:0b:fe:
f2:fd:72:75:12:1e:12:f1:6d:67:bb:db:08:11:cc:1a:e2:6b:
80:93:14:d7:f4:c3:c3:bc:39:f1:29:06:4a:bd:bd:50:35:c8:
00:69:6b:b7:55:fb:74:3a:85:f9:27:7b:f4:4c:bb:8e:e3:5c:
19:e1:5c:d2:36:e3:90:02:75:32:ad:30:65:55:0d:5f:7e:1e:
9a:a3:77:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:07:14 2026 by rpki-client