
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
File: bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft (raw, json)
Hash identifier: TTih7ERpYcX/nUF8SK3Dnsd8w3LtowL3TlaCFZ0E/N8=
Subject key identifier: 62:00:51:AE:A7:90:AD:A6:51:BC:CA:20:12:06:28:10:01:69:5D:30
Authority key identifier: 6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33
Certificate issuer: /CN=A9117CD5/serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
Manifest number: BD
Signing time: Fri 17 Jul 2026 08:09:44 +0000
Manifest this update: Fri 17 Jul 2026 08:09:43 +0000
Manifest next update: Fri 24 Jul 2026 08:09:43 +0000
Files and hashes: 1: bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl (hash: WEEX+GotExn4srViLNz5KbLCuFtJAkSpmPRbqjlQXm8=)
2: 0BC2889A5FA911F0BE187C31C4F9AE02.roa (hash: f1UUKk9+4mpBrjo6aq4pvsFyFPqGlKiCEdavWTpQG0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl
rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:09:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117CD5, serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33
Validity
Not Before: Jul 17 08:09:43 2026 GMT
Not After : Jul 24 08:09:43 2026 GMT
Subject: CN=6a59e347-de72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:b2:54:e7:e4:f4:7a:4d:53:4a:d9:93:df:
f0:ab:77:b3:a2:dc:54:4d:60:57:46:65:cf:01:dd:
2f:7d:bd:45:15:8f:ee:87:02:f6:cd:63:cb:86:0e:
bc:12:73:10:bd:da:f5:ca:ba:f3:1a:b6:af:55:6d:
1f:75:8c:b2:59:c9:e7:46:a6:4f:7f:73:de:62:55:
36:8b:02:16:b6:8b:ea:20:f9:5c:b2:15:8c:62:c8:
a1:98:56:84:58:66:84:c0:4f:6c:ec:92:0c:ef:44:
ed:5c:63:13:3e:4e:af:d5:8a:bf:43:3d:02:90:3a:
99:07:70:97:10:4c:16:ea:e8:88:85:33:e0:08:93:
22:c2:d2:48:d6:22:ca:c1:17:b5:38:6c:85:f0:35:
c9:0f:2f:b2:37:6c:91:0b:83:51:de:77:88:fe:f4:
75:52:1f:30:fc:2e:21:4c:a8:b6:96:18:7c:32:fd:
e6:a9:ce:e1:20:bc:4c:39:78:4a:45:be:94:a9:ac:
d4:a7:dc:fc:40:20:be:c5:53:6e:4b:ff:5b:18:aa:
7e:00:40:41:bc:62:74:27:03:61:4b:1f:c0:ee:86:
02:8a:6f:de:64:c0:58:be:c2:74:4f:7b:14:1c:62:
2f:0d:66:02:34:10:3c:ae:26:cc:f4:f4:26:09:1b:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:00:51:AE:A7:90:AD:A6:51:BC:CA:20:12:06:28:10:01:69:5D:30
X509v3 Authority Key Identifier:
keyid:6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:47:a8:ef:51:6d:dd:3a:b9:83:23:78:de:e9:fd:98:a0:4b:
6f:23:15:09:8d:0d:7b:63:a5:a4:21:c4:d8:f5:f6:f0:74:ca:
35:99:f3:9d:88:5f:d1:e6:45:8b:6d:f1:11:1f:97:b5:04:0f:
55:2c:fe:0e:d1:30:b5:0c:c6:55:b3:72:f3:01:07:2e:b9:70:
4b:9a:22:d8:ee:2b:a9:02:89:6f:dd:a2:90:35:b8:86:9a:62:
b4:e0:27:7d:f2:bc:0c:b3:b5:f1:8c:62:c0:d2:36:25:b1:cd:
5c:db:d7:08:10:e3:04:1b:29:dc:b8:31:75:4b:9c:c3:b2:d7:
84:7d:65:cd:52:7b:f0:f9:59:c4:3a:9b:fa:6f:6a:b4:92:73:
07:e3:71:e0:b2:86:4e:04:63:ec:35:eb:d8:67:8d:7c:02:5c:
84:4d:45:9b:36:05:47:1b:fb:12:95:52:73:19:70:11:3a:4c:
4f:9f:21:17:eb:7c:0f:e9:d3:77:31:08:e0:e0:63:cb:2b:37:
fe:08:c3:fd:19:36:2d:8a:85:75:84:19:23:a6:4c:34:8d:c6:
ed:af:b0:b1:13:78:62:5f:5e:5e:66:50:bd:6b:67:19:72:51:
ef:29:64:7a:5b:21:c6:5a:31:64:e1:a2:e5:b9:28:6a:ce:40:
b2:36:2d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:16:40 2026 by rpki-client