
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
File: B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json)
Hash identifier: vyRCGs2a4SMvQglaxtXMPz4yqYAIkvuGl2x2/xq3Mpk=
Subject key identifier: 68:BD:1C:32:97:E9:7E:C6:DD:36:94:7A:8A:93:69:95:DB:C2:20:48
Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
Certificate issuer: /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Certificate serial: 0CDA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
Manifest number: 0CAA
Signing time: Fri 02 Oct 2026 18:51:18 +0000
Manifest this update: Fri 02 Oct 2026 18:51:18 +0000
Manifest next update: Fri 09 Oct 2026 18:51:18 +0000
Files and hashes: 1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: +IuXfvZtZfOX5DxCEO4mSzOlsxMyWmEfQmoVYfUz0Xo=)
2: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: 2kqZ2ax/As32o8RRs0PQNYd+3fd0DLwwDpGPzi6gp20=)
3: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: ysJpjq4GZRT81ypvyps70Xs2FSrmpAOh+0WROxWsBRE=)
4: DAFD055806F811EC9558C827C4F9AE02.roa (hash: SIPUDEhwO81LNv9dhcibvLJQkdYFv/PIhTjKFY7R3oc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 18:51:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3290 (0xcda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Validity
Not Before: Oct 2 18:51:18 2026 GMT
Not After : Oct 9 18:51:18 2026 GMT
Subject: CN=6abffd26-ba30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:d0:2f:67:0b:b0:22:54:30:47:47:63:aa:
58:a3:97:64:af:39:d7:74:9f:c5:54:3d:b7:4e:9a:
57:78:56:3a:8b:87:59:b6:90:65:01:56:a4:19:94:
dd:a7:d0:ee:96:02:c9:79:26:b8:b5:3a:46:8c:0a:
47:d9:64:e2:fe:bd:5b:54:cf:94:8c:83:eb:7c:26:
d1:2e:47:fc:fd:e7:c4:c1:fc:84:7a:f2:29:a7:b5:
71:ca:a0:11:fb:5b:01:97:0e:73:59:09:df:14:a0:
75:72:de:29:94:2b:e2:83:8f:82:88:ab:70:4f:0c:
e4:d2:95:34:20:48:a3:11:59:ab:8a:c6:3c:88:a1:
0e:49:e0:86:42:f5:83:6b:0c:6f:bf:24:5c:3f:04:
d1:a4:39:cc:3f:74:e9:f4:81:f9:11:03:a8:c7:02:
6b:12:7f:e6:36:9f:7c:31:ec:27:a4:1d:58:6c:ce:
0f:8e:c3:5e:51:b3:7f:46:93:bb:1b:65:2c:fb:aa:
71:eb:84:fa:00:49:d9:b5:59:a3:f6:27:0b:2a:40:
66:62:71:7e:d2:d6:28:71:2f:23:24:87:31:a3:7e:
7a:11:f2:34:65:b6:4f:f6:f6:e5:24:61:ba:8a:3f:
24:00:36:c6:02:a8:d7:fa:75:f3:13:d1:6c:e7:6a:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BD:1C:32:97:E9:7E:C6:DD:36:94:7A:8A:93:69:95:DB:C2:20:48
X509v3 Authority Key Identifier:
keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c6:49:ad:08:15:70:57:9d:d6:88:59:e8:4e:0c:f0:18:00:
1f:62:95:16:e9:eb:a2:fc:1b:10:24:f8:dc:eb:63:3d:d2:ff:
da:ee:34:a9:be:12:14:01:33:af:7f:09:d6:89:fb:ce:ce:57:
1e:fe:ab:a7:59:1e:f2:b5:12:61:2b:d2:6b:bc:e5:c2:ae:27:
a1:f9:1e:b3:5d:da:e3:1b:4d:4e:16:c2:fd:17:29:da:06:e4:
09:87:ec:50:12:e0:5c:db:9f:68:da:d5:e8:9d:06:41:35:82:
90:0e:a8:2e:fd:f5:c7:6a:0a:ca:66:14:cb:07:b9:a4:c7:f2:
55:57:66:2a:82:61:b1:83:80:0f:63:3a:fa:44:b7:6c:73:6c:
06:88:b3:45:ba:b8:1c:29:17:f0:0d:13:7a:73:07:e9:81:12:
44:4c:6e:0c:cb:fb:c3:3b:dd:9d:53:72:79:b7:d3:0d:3c:ce:
d4:ef:f5:8f:7a:44:ef:5a:36:11:0a:15:bf:de:f3:73:26:5e:
2b:f5:56:34:a3:e2:e3:ac:34:b3:c2:b8:97:9b:9a:38:e6:a8:
c4:02:ab:01:da:7b:73:42:8b:a2:c2:66:93:c2:9c:3a:c2:20:
06:eb:16:05:d3:f9:6f:17:7c:82:81:dd:50:30:db:06:2f:eb:
b8:03:87:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA1N0IxMTAvBgNVBAUTKDA3Njk1NzYxMzM1ODZFNUFCNEY5QkY0REE1MkI2RDVD
QTE2RDlDRDUwHhcNMjYxMDAyMTg1MTE4WhcNMjYxMDA5MTg1MTE4WjAYMRYwFAYD
VQQDEw02YWJmZmQyNi1iYTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0NLQL2cLsCJUMEdHY6pYo5dkrznXdJ/FVD23TppXeFY6i4dZtpBlAVakGZTd
p9DulgLJeSa4tTpGjApH2WTi/r1bVM+UjIPrfCbRLkf8/efEwfyEevIpp7VxyqAR
+1sBlw5zWQnfFKB1ct4plCvig4+CiKtwTwzk0pU0IEijEVmrisY8iKEOSeCGQvWD
awxvvyRcPwTRpDnMP3Tp9IH5EQOoxwJrEn/mNp98MewnpB1YbM4PjsNeUbN/RpO7
G2Us+6px64T6AEnZtVmj9icLKkBmYnF+0tYocS8jJIcxo356EfI0ZbZP9vblJGG6
ij8kADbGAqjX+nXzE9Fs52oBKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGi9HDKX
6X7G3TaUeoqTaZXbwiBIMB8GA1UdIwQYMBaAFAdpV2EzWG5atPm/TaUrbVyhbZzV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU3Qi9BOTE3RTc1NDI2
MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJscTAtYjlOcFN0dFhLRnRu
TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0IybFhZVE5ZYmxxMC1iOU5wU3R0WEtGdG5OVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDU3Qi9BOTE3RTc1NDI2MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJs
cTAtYjlOcFN0dFhLRnRuTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnsZJrQgVcFed1ohZ6E4M8BgAH2KVFunrovwbECT43OtjPdL/2u40qb4SFAEz
r38J1on7zs5XHv6rp1ke8rUSYSvSa7zlwq4nofkes13a4xtNThbC/Rcp2gbkCYfs
UBLgXNufaNrV6J0GQTWCkA6oLv31x2oKymYUywe5pMfyVVdmKoJhsYOAD2M6+kS3
bHNsBoizRbq4HCkX8A0TenMH6YESRExuDMv7wzvdnVNyebfTDTzO1O/1j3pE71o2
EQoVv97zcyZeK/VWNKPi46w0s8K4l5uaOOaoxAKrAdp7c0KLosJmk8KcOsIgBusW
BdP5bxd8goHdUDDbBi/ruAOHPg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 15:33:30 2026 by rpki-client