
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
File: BN7ay9uvpcHBT5KBe5b39QMQCig.mft (raw, json)
Hash identifier: +90eoDZxVQp/Y0NxPz+q3/D36W/zySlca5UmSdtCIGI=
Subject key identifier: 0A:07:B0:8B:7F:C8:1E:0F:44:58:4F:F6:B7:67:1F:5F:63:CE:78:90
Authority key identifier: 04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28
Certificate issuer: /CN=A912DD36/serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28
Certificate serial: 01A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
Manifest number: 019E
Signing time: Wed 19 Aug 2026 04:51:07 +0000
Manifest this update: Wed 19 Aug 2026 04:51:07 +0000
Manifest next update: Wed 26 Aug 2026 04:51:07 +0000
Files and hashes: 1: BN7ay9uvpcHBT5KBe5b39QMQCig.crl (hash: ep2KtiHxkJVwaQUVHQiG7MuiDIt/1Fxhp1R3HaB2VGE=)
2: 09EC8E16662211EFB6FA446CC4F9AE02.roa (hash: b75sAYMEIXYdDT25gmVHvykzgLoZpS+x22joZCKSsl4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.crl
rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DD36, serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28
Validity
Not Before: Aug 19 04:51:07 2026 GMT
Not After : Aug 26 04:51:07 2026 GMT
Subject: CN=6a85363b-5410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:1c:36:56:57:a3:68:44:cd:43:03:64:8d:
c1:45:5e:f5:fd:e3:8c:3e:1a:1a:ba:5c:d2:cc:0c:
5d:31:9b:32:b8:63:be:12:08:6d:9b:be:27:ee:cf:
16:50:4e:8c:22:3e:6f:83:bf:36:c3:37:c3:0d:c5:
ce:6c:50:ac:62:16:71:2b:96:86:8b:35:14:cb:b3:
a2:5e:f1:c5:9e:2d:3a:b0:4a:fc:7f:f5:a0:84:81:
2f:d2:45:e2:29:e9:26:2e:71:a0:eb:b7:a9:6e:ea:
61:7b:5d:a2:1a:0d:1f:09:8f:d8:49:a0:b2:56:8e:
6e:d7:3b:c9:8d:a8:93:63:ee:b9:1f:20:94:d1:86:
6d:ea:21:69:a3:df:3e:00:fc:31:33:75:08:2b:e1:
fb:6d:ed:cf:81:86:18:06:8f:da:8d:f9:a1:1a:8f:
cf:83:b4:09:cd:18:57:e0:52:02:75:de:4f:1e:e6:
d5:0f:51:46:7b:5b:11:3d:4f:60:9f:94:6d:d3:3d:
b5:77:dd:fa:35:75:f4:e9:6f:03:23:62:56:50:a6:
59:c8:60:30:c3:7b:65:c5:41:1f:bb:01:42:ac:89:
b1:0b:be:c2:11:e8:3d:94:98:d7:4f:71:b1:0e:e9:
4e:59:cf:87:64:77:44:de:0b:fb:ec:56:fc:1f:8f:
46:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:07:B0:8B:7F:C8:1E:0F:44:58:4F:F6:B7:67:1F:5F:63:CE:78:90
X509v3 Authority Key Identifier:
keyid:04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:5f:cc:17:87:d9:eb:cf:cf:33:85:c6:7b:f7:16:3a:e1:f3:
1d:33:55:55:21:0c:b9:06:6a:c8:6e:af:eb:b2:fb:1d:f5:73:
0c:2c:e0:54:77:c6:33:25:7d:7c:b3:62:f8:c7:bd:93:ab:e2:
16:25:f6:ed:aa:be:ee:09:36:4a:de:c8:b8:20:14:38:9f:8b:
db:4e:c7:aa:6a:e0:24:7a:4c:7e:30:48:db:30:20:ff:86:ae:
38:31:3e:91:03:fa:60:38:8c:43:cf:35:15:e0:c5:b1:9f:d5:
85:1d:e2:40:2c:dc:66:08:48:b3:a1:fc:b7:a9:ec:33:18:33:
74:eb:86:bb:3e:ba:e9:48:f6:a2:e7:57:9d:f2:cc:6f:f1:50:
a8:8c:71:05:73:4c:e6:0b:ae:b7:06:0c:d3:ef:e4:c3:2e:5e:
c0:0f:93:c1:2f:75:2c:ac:14:cf:4e:59:75:a3:b7:73:9c:f5:
48:4f:1c:93:d5:99:99:06:ee:62:33:99:0e:e7:1f:d3:62:4b:
53:49:3d:74:2a:9c:bc:55:a2:4f:05:09:1f:dd:50:b5:ac:49:
85:87:82:82:8a:c3:c5:60:89:c5:d9:74:f1:44:9a:b0:db:bd:
ef:e8:6a:be:6d:4c:db:24:4d:59:9f:09:73:07:bd:62:cd:cc:
0a:66:5a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:43 2026 by rpki-client