
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
File: bOLX0NlZgNdDytSEhphI26Elwps.mft (raw, json)
Hash identifier: b/5dcZbItb33pt5kS4n7ZwAGKouR7nKCWcD09dxhi9k=
Subject key identifier: FE:9F:DE:89:B2:48:E0:F6:CB:7F:5A:A5:A6:5B:ED:E4:68:DE:67:4E
Authority key identifier: 6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B
Certificate issuer: /CN=A9120E98/serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
Certificate serial: 021E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
Manifest number: 0216
Signing time: Wed 19 Aug 2026 03:31:45 +0000
Manifest this update: Wed 19 Aug 2026 03:31:44 +0000
Manifest next update: Wed 26 Aug 2026 03:31:44 +0000
Files and hashes: 1: bOLX0NlZgNdDytSEhphI26Elwps.crl (hash: qJIihHxsltRO6t/MvytO0UUvE5YE/se6qDXOUKXVOg8=)
2: 36F3B6A86E5411EEAA31F87AC4F9AE02.roa (hash: pDTxi/uoAFHGF48GS5j39SSpSo1n7kGbSYg7ozTcf7g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl
rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120E98, serialNumber=6CE2D7D0D95980D743CAD484869848DBA125C29B
Validity
Not Before: Aug 19 03:31:44 2026 GMT
Not After : Aug 26 03:31:44 2026 GMT
Subject: CN=6a8523a0-9a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ec:e0:9d:1e:39:08:5e:30:5e:67:72:08:0c:
fc:fa:b6:72:90:d1:3b:7c:d6:2d:7e:8b:50:2a:da:
75:65:0c:35:6f:67:54:3f:73:1a:c5:fc:47:20:03:
05:38:13:9e:b7:cd:c5:81:ab:19:75:14:1b:03:6c:
53:35:51:a2:92:d4:c8:1f:8c:66:8c:ee:da:e7:08:
a8:0c:cf:95:6f:30:68:8d:93:bf:81:b7:1c:95:41:
80:23:3a:80:34:d3:c9:15:c8:e4:b4:e6:bc:c9:c5:
b6:cd:b2:e3:08:be:0f:8a:e3:00:82:a2:90:92:ea:
79:e6:63:16:ee:bb:27:eb:b5:97:56:db:3c:c9:b1:
d8:48:f1:3c:0c:fb:67:e5:90:20:48:c5:3c:ef:60:
8c:dc:e8:4a:21:d4:20:ee:ee:c8:07:39:60:53:a8:
50:43:c6:e0:39:8a:a0:32:28:e0:1e:b1:6c:77:40:
ac:1d:7c:01:0c:cd:f0:89:ca:97:3c:47:f3:39:a7:
74:4d:42:f7:51:31:3a:e4:c6:17:d1:0b:3d:36:64:
50:e2:23:58:9e:71:30:4f:d1:72:2f:f1:fa:74:18:
ff:f6:24:a4:c2:8e:d2:73:e9:15:09:12:3a:f3:13:
76:76:91:3a:ea:b3:21:54:d6:92:c3:ab:de:53:e9:
f3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9F:DE:89:B2:48:E0:F6:CB:7F:5A:A5:A6:5B:ED:E4:68:DE:67:4E
X509v3 Authority Key Identifier:
keyid:6C:E2:D7:D0:D9:59:80:D7:43:CA:D4:84:86:98:48:DB:A1:25:C2:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOLX0NlZgNdDytSEhphI26Elwps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E98/74FD5E826E5311EE9B917E79C4F9AE02/bOLX0NlZgNdDytSEhphI26Elwps.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:d8:5b:11:a0:be:4a:23:1e:fc:35:69:22:f0:3c:ef:34:88:
e3:1a:81:a7:8b:9e:1f:5b:70:5d:cc:b6:39:cc:98:34:52:37:
3b:a4:a9:0b:d4:20:8d:eb:93:bc:9f:61:b9:7a:72:00:65:3d:
93:e1:71:70:02:6a:5c:18:20:f8:6d:aa:1f:15:4b:81:25:52:
69:19:cc:b5:a5:2c:4d:84:cc:92:26:dc:a2:2c:67:2a:51:a2:
ec:46:31:91:a2:5b:97:dd:71:7b:35:ba:6f:89:c1:61:e7:5b:
d9:e2:7a:57:b4:73:f3:e6:71:b7:a7:e0:05:f3:29:61:81:80:
59:a5:d3:af:e7:0f:21:94:68:a8:8b:46:1b:8b:9b:2d:41:72:
9e:ef:37:39:39:28:6f:98:4c:fe:08:cf:16:10:ff:8c:7e:77:
a1:e0:1d:de:34:6c:45:64:6f:d1:9d:e9:62:85:1e:ea:8e:83:
41:56:f2:93:34:fc:e2:d7:d1:a3:63:52:a1:f4:ee:6a:11:38:
ec:8d:a3:10:a8:6f:39:45:eb:5c:91:3a:e4:a6:4d:7f:1b:64:
f2:2c:78:e4:32:f6:71:66:94:ed:83:f7:05:d0:22:33:c3:b8:
da:a5:5d:f8:a8:a8:a8:b3:81:ae:12:9f:55:4b:03:1f:10:42:
2c:f3:76:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:16:34 2026 by rpki-client