
$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
File: B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json)
Hash identifier: 7ne7KuIG3DE+8SZjNhNmBuBeqJqHy9WODQn9Zaxo3Yk=
Subject key identifier: 60:16:B1:5E:E9:8F:05:91:8F:9A:4B:CD:1C:C2:9D:31:03:77:6A:CC
Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
Certificate issuer: /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Certificate serial: 0C87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
Manifest number: 0C58
Signing time: Tue 28 Apr 2026 18:55:12 +0000
Manifest this update: Tue 28 Apr 2026 18:55:12 +0000
Manifest next update: Tue 05 May 2026 18:55:12 +0000
Files and hashes: 1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: VbsfonLfwhnQY9VPdPnQTjgrN8U9mw9fcxur4BmP0Yw=)
2: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: s0qB2iNNIUGZAV7Qs3yGnrF3Wpc6qo9NyC9+Hue+JMc=)
3: DAFD055806F811EC9558C827C4F9AE02.roa (hash: SIPUDEhwO81LNv9dhcibvLJQkdYFv/PIhTjKFY7R3oc=)
4: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: 2kqZ2ax/As32o8RRs0PQNYd+3fd0DLwwDpGPzi6gp20=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 05 May 2026 18:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3207 (0xc87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Validity
Not Before: Apr 28 18:55:12 2026 GMT
Not After : May 5 18:55:12 2026 GMT
Subject: CN=69f10290-4642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e4:05:70:1a:c9:38:3f:43:00:f9:52:fc:f2:
4c:c2:d1:95:bf:0d:ad:20:5f:50:4e:25:95:b5:76:
64:14:ab:5c:1f:36:97:3a:4c:45:b7:e9:fb:c4:a8:
82:de:c3:16:b5:34:3f:bf:0e:18:2e:cf:43:f0:41:
2b:86:42:99:56:40:e7:73:0d:2c:70:d0:c5:58:0c:
6b:4d:08:b9:32:d1:e4:d9:c8:c1:8f:39:23:d1:b7:
02:6c:17:06:1f:44:6c:c8:c3:d9:be:3c:25:97:87:
8f:9f:8a:e0:0f:a6:4a:7a:53:49:22:84:ae:00:a9:
e9:fb:3f:b0:d1:da:aa:51:12:81:b8:11:55:f7:b6:
a8:a3:69:33:51:a1:56:de:d0:ac:1b:89:d8:f7:36:
8c:8c:31:a5:4f:bd:50:05:d3:d7:fd:9f:96:09:24:
b2:20:a2:60:19:c2:a8:2b:e9:b0:de:bf:0d:4e:9d:
46:65:f1:a7:b1:ee:76:2a:f0:2d:3b:dc:74:a5:92:
69:2e:47:45:4e:f8:56:cc:11:98:48:89:0d:cd:a9:
d1:4b:cd:df:5a:ed:21:31:0f:ce:fb:f5:92:eb:fa:
eb:86:a3:0a:75:63:ad:c2:26:f8:4c:c8:47:0f:b3:
5b:d0:59:9c:73:5c:6d:89:14:b0:c4:cb:1a:03:6d:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:16:B1:5E:E9:8F:05:91:8F:9A:4B:CD:1C:C2:9D:31:03:77:6A:CC
X509v3 Authority Key Identifier:
keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:af:2a:c2:8e:93:8d:f8:3f:c8:bc:16:03:b9:cf:e7:31:99:
d5:ea:ed:5c:51:93:51:8a:ba:12:72:91:64:fa:6b:27:f4:4d:
3c:7d:17:b4:2a:ac:b7:57:7d:b4:3b:b2:b3:56:27:f7:e6:01:
54:da:e1:f9:34:a8:5b:d8:a1:0c:c2:41:9d:ad:3f:f1:9c:f6:
e8:d8:f3:88:c5:e2:00:12:19:ac:28:5f:9b:cc:0b:65:c3:48:
0c:18:28:c1:57:d2:eb:e1:4f:54:a0:6a:dd:37:ea:b0:a2:be:
62:71:d5:50:26:73:47:df:81:9f:f4:d7:d5:dd:59:43:24:07:
cc:b1:62:3b:8b:41:6b:f3:42:87:ab:3e:42:40:aa:52:6d:a7:
6a:c2:0c:4a:bd:81:af:6e:e1:0a:a4:35:0d:2b:86:98:dd:e4:
57:48:f3:d0:34:d7:9e:f9:2f:62:fc:91:f9:e5:60:e9:a5:6f:
b9:b6:af:da:8e:2c:e8:62:4c:fe:18:5f:37:24:2e:b2:e4:f5:
27:66:14:e6:1a:bc:4b:73:d3:70:e2:71:ef:70:57:bf:74:38:
b9:7a:8e:89:77:f4:d3:46:52:17:c1:0a:90:5b:ca:38:ef:01:
4b:06:8b:2f:3c:cb:6a:6a:e1:91:18:d5:9e:dd:fb:65:d0:9c:
ba:a3:92:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 00:04:30 2026 by rpki-client