
$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
File: B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json)
Hash identifier: pk0A7EUhFPA4YUCkvChJk/N1ISfvhvBFWXkb/Pl09os=
Subject key identifier: 60:73:24:4D:43:44:13:23:4A:E2:CF:A8:E1:ED:21:0E:AF:1A:1F:6C
Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
Certificate issuer: /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Certificate serial: 0CC0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
Manifest number: 0C91
Signing time: Tue 18 Aug 2026 18:54:40 +0000
Manifest this update: Tue 18 Aug 2026 18:54:40 +0000
Manifest next update: Tue 25 Aug 2026 18:54:40 +0000
Files and hashes: 1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: yd5UT1J49/cEczwoWvKU3R6C8hpt3vd5E1lXCNLxruU=)
2: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: s0qB2iNNIUGZAV7Qs3yGnrF3Wpc6qo9NyC9+Hue+JMc=)
3: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: 2kqZ2ax/As32o8RRs0PQNYd+3fd0DLwwDpGPzi6gp20=)
4: DAFD055806F811EC9558C827C4F9AE02.roa (hash: SIPUDEhwO81LNv9dhcibvLJQkdYFv/PIhTjKFY7R3oc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:54:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3264 (0xcc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Validity
Not Before: Aug 18 18:54:40 2026 GMT
Not After : Aug 25 18:54:40 2026 GMT
Subject: CN=6a84aa70-e866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:36:a3:50:32:9f:a4:1a:57:30:f7:c0:e1:
ff:06:e7:25:09:76:cf:76:09:ab:a5:c2:1f:a3:7d:
ec:64:8e:ee:35:e3:28:e8:d0:b0:09:b9:c7:52:ff:
4c:e2:05:c6:c6:4e:02:1e:93:91:5c:b2:41:ba:ae:
fc:88:8a:7c:7f:f6:96:76:5a:fb:ea:19:c4:60:c0:
74:69:20:f0:ad:76:97:e8:ed:90:6e:fd:4a:35:a2:
96:ba:e6:70:39:90:46:f9:26:f5:aa:6a:39:56:57:
e7:ce:67:a6:42:c3:25:b5:66:32:33:b7:fb:4b:21:
4e:75:74:e0:d4:bd:4d:f8:6e:b6:08:6a:75:e9:23:
c8:be:f1:e3:da:9c:2d:43:7a:04:c6:9e:78:90:44:
c3:25:df:11:d7:f2:36:9b:9a:f6:7b:0a:b2:95:3d:
4a:26:76:84:e7:1c:ef:1b:08:e8:64:92:d2:91:69:
81:27:24:57:9b:21:ae:98:41:38:4c:46:1d:d4:c0:
35:71:f2:ee:ee:44:72:5c:57:1a:e5:74:b8:94:c1:
32:6a:8d:83:c9:f9:bd:7d:48:6b:bf:98:6b:a7:c1:
ae:75:86:3c:7b:f6:5a:70:2c:04:a5:ed:d3:20:8a:
ef:e0:8d:45:6b:47:9a:75:c8:70:89:e7:01:03:3a:
be:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:73:24:4D:43:44:13:23:4A:E2:CF:A8:E1:ED:21:0E:AF:1A:1F:6C
X509v3 Authority Key Identifier:
keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:18:1a:64:62:df:e7:78:21:87:63:72:59:a5:ac:57:55:6c:
3d:36:2d:59:a6:43:3f:9e:c7:29:b8:c4:e0:02:cc:fc:66:d8:
ad:91:13:6b:c8:3a:62:9a:69:83:d5:d5:e5:2c:93:73:31:9b:
d3:15:73:3d:68:dc:7a:49:be:81:b0:ce:ac:46:d2:69:6e:8a:
7c:5d:aa:2e:96:2d:7e:9d:6f:c9:6f:58:f0:eb:54:58:de:4c:
5c:28:3b:a9:b8:cd:5c:76:4c:a3:65:4f:f6:52:39:f2:50:ab:
02:1d:8d:2d:f0:9f:cb:1f:24:d6:ad:5c:31:dc:b3:8b:88:8f:
8b:0e:1e:63:b1:8c:b5:24:e6:2a:98:8c:f5:c2:81:fa:42:09:
d9:c1:63:9f:e6:ab:6f:c2:d3:bd:c1:a7:00:86:f8:13:32:01:
38:5d:d6:72:a8:a3:2f:31:b8:55:e2:7b:71:37:cc:2a:f8:e0:
a2:97:dc:68:74:d1:3f:95:8a:37:cd:64:cc:63:ca:64:2b:fb:
19:84:8d:cf:2b:b7:91:63:51:76:22:cd:1f:50:5e:50:bf:0f:
4c:ae:71:cc:26:2d:2a:10:a4:a9:03:a1:2f:46:5a:31:aa:c0:
87:55:2c:d2:fe:da:84:1e:57:2e:e9:88:75:cd:98:09:a7:2f:
51:fa:af:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:40 2026 by rpki-client