
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft
File: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft (raw, json)
Hash identifier: a91wi8YQ6VtlMNhuydgyUnYNunUDY9vGgOTcIGK6QMY=
Subject key identifier: 3D:63:59:FB:10:BA:5C:48:99:43:EB:7F:2C:9C:E2:4D:40:67:5F:26
Authority key identifier: F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6
Certificate issuer: /CN=A9121D73/serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6
Certificate serial: 0C96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft
Manifest number: 0C89
Signing time: Tue 18 Aug 2026 18:55:14 +0000
Manifest this update: Tue 18 Aug 2026 18:55:14 +0000
Manifest next update: Tue 25 Aug 2026 18:55:14 +0000
Files and hashes: 1: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl (hash: 7LRN5j+Bbtos4NmP3DBQjTfzA3+DtWzQSHTjfSuVDzI=)
2: 01A8B084262811EA8269E33EC4F9AE02.roa (hash: BtTQvQkkCMyORN0/OniWB7TxZ5Yt0iEdn/t0KB8XF1Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl
rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:55:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3222 (0xc96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121D73, serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6
Validity
Not Before: Aug 18 18:55:14 2026 GMT
Not After : Aug 25 18:55:14 2026 GMT
Subject: CN=6a84aa92-75eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:75:0e:29:a9:d5:11:7e:df:4b:3a:a4:44:b4:
a4:bb:77:e6:4c:7a:d7:06:8d:24:52:bf:62:a2:cf:
78:34:10:0a:6b:49:43:fb:d3:34:cf:1e:ac:ef:fa:
6f:cc:c5:e3:26:3e:f3:0a:fc:0e:23:bf:00:85:2a:
f6:93:88:3d:dc:5c:09:7f:b4:54:27:20:84:35:c5:
23:b0:db:c9:93:2c:46:6b:08:9c:93:fa:c6:0e:94:
2a:68:1d:72:9a:0e:39:6d:20:b0:ff:0b:6c:57:00:
8f:bb:c2:11:9e:20:42:b4:89:2c:dc:f0:ad:9c:42:
56:25:28:83:17:02:ad:11:0a:76:ec:97:bc:c4:62:
9f:aa:94:65:cf:e0:fc:5b:f1:61:92:5b:24:d6:29:
01:41:a8:e9:22:36:15:7b:bf:0f:c1:a4:27:e1:97:
1b:c4:9b:b0:57:02:a1:55:e8:e1:71:a4:bc:d4:64:
6e:98:4f:fe:90:76:43:e9:f0:41:bf:73:88:c3:d0:
4f:bb:a7:fb:16:98:87:95:fc:2e:a4:c6:7f:e4:01:
44:03:df:1c:57:04:72:b8:65:78:d5:39:3b:7c:12:
30:7f:b0:d8:75:7b:65:d2:b6:f4:a4:64:cc:bc:3d:
44:9a:f7:7b:3a:6e:8c:39:75:6e:92:11:b1:80:8c:
f1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:63:59:FB:10:BA:5C:48:99:43:EB:7F:2C:9C:E2:4D:40:67:5F:26
X509v3 Authority Key Identifier:
keyid:F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:ce:2f:13:d0:22:a2:d5:51:8e:89:92:18:20:87:9a:ff:41:
c9:75:ec:e7:2b:b8:64:9a:f7:11:f7:2f:27:fe:0f:f0:1a:2f:
6f:0f:27:48:a9:4e:02:c0:d6:bf:b7:f4:3d:3a:84:cd:d3:3b:
5c:96:71:27:62:4c:35:58:a4:89:b8:7b:ef:b8:a3:1e:78:06:
c5:f3:cb:33:35:0b:bf:f2:45:5e:b8:8f:ad:4e:00:9c:00:dc:
6a:e2:d4:8e:53:9c:ac:ed:64:11:6d:e6:53:ea:9f:6b:67:a6:
e6:b8:a1:bf:9a:53:a8:68:38:b2:6b:11:93:1f:e3:5a:0d:11:
6c:5c:61:18:c7:10:59:41:c6:93:73:65:b4:63:5b:ff:0e:65:
61:f9:de:03:d7:f2:f7:da:69:ec:b9:27:31:b6:c8:37:20:a5:
20:75:25:df:80:f8:06:3f:b1:4b:46:22:48:91:94:49:8f:e3:
4b:39:93:ac:66:02:e3:3d:01:4f:10:36:94:1f:7f:52:94:82:
5f:28:4a:2a:d2:2a:d5:ae:9c:f0:6b:3a:3b:60:38:0a:3e:7a:
81:3d:6d:e3:19:fe:e9:b5:02:dc:65:0f:6a:8b:0b:5f:ff:4d:
a2:6a:44:8d:22:a3:b9:48:ae:4a:d1:f0:27:85:43:db:f5:05:
6b:94:65:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:50 2026 by rpki-client