
$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
File: bCx8FCiea7W3J1sapr_foCJ7kIY.mft (raw, json)
Hash identifier: 0s5RUNWqgfzhib276B7LN/xHyda9Pu0rwfWkUMDAjA8=
Subject key identifier: DD:71:74:BE:B3:14:DC:5D:09:66:71:98:AD:C8:BA:02:C3:DC:8C:8B
Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
Certificate issuer: /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
Manifest number: 015E
Signing time: Fri 17 Jul 2026 06:20:17 +0000
Manifest this update: Fri 17 Jul 2026 06:20:16 +0000
Manifest next update: Fri 24 Jul 2026 06:20:16 +0000
Files and hashes: 1: bCx8FCiea7W3J1sapr_foCJ7kIY.crl (hash: hlxuA2YaLvGgaG1yZowSwKCqqNmoJYlZKfn+2DKFKCE=)
2: BC8ECC20F38811EF8AB19939C4F9AE02.roa (hash: xM+k8JQJmpD4Ax0g8sE6JNmMBLQtiYg67IPffewNqIg=)
3: 63A0A458F38811EFB8E2D638C4F9AE02.roa (hash: MzzziUvdgBRD34K13czjAKz5Qa4KFePNv6ZSJaDtfDg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl
rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:20:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Validity
Not Before: Jul 17 06:20:16 2026 GMT
Not After : Jul 24 06:20:16 2026 GMT
Subject: CN=6a59c9a1-1704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:5f:d2:cc:dc:b0:c9:95:c5:4c:18:bd:3f:
6b:7d:67:7d:52:d7:35:82:b0:21:69:ae:3e:ca:76:
43:3c:5e:ab:bf:34:0c:86:f0:83:12:61:65:6c:94:
c1:f0:fa:3f:46:04:fd:0d:49:c8:9b:66:b7:a4:e4:
24:31:1b:14:81:64:28:10:a9:93:9e:ed:2b:28:16:
17:3d:e8:87:c6:1a:68:18:a4:a5:72:2e:f0:65:51:
8c:06:1e:28:78:a9:74:a7:30:f1:c0:9d:01:7a:d5:
3d:91:59:bc:25:72:aa:32:b8:df:3e:0d:50:a9:39:
ae:e7:07:8a:b2:b5:2c:4a:2b:83:5b:02:dd:9b:27:
85:87:c2:03:17:27:f8:e9:c8:07:52:1f:e0:ad:3b:
5d:dd:c1:cc:95:ec:f3:05:f2:33:7c:74:55:78:7b:
11:73:3a:03:54:e6:5e:a8:7b:4d:0c:63:35:3c:26:
a4:fb:8e:00:73:43:7c:f5:8f:d8:c6:f0:64:df:15:
d8:87:91:4d:bb:36:1f:47:42:4d:62:9d:91:f3:1c:
a3:51:3b:a8:f9:9c:cc:a0:bc:a3:9f:88:f4:d5:d5:
5f:1c:0c:46:a7:c5:96:86:97:52:e3:1c:34:84:bd:
4e:93:e4:9c:c5:1b:26:be:ef:17:19:5f:18:5e:7b:
1d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:71:74:BE:B3:14:DC:5D:09:66:71:98:AD:C8:BA:02:C3:DC:8C:8B
X509v3 Authority Key Identifier:
keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ce:b0:77:98:e5:f6:4c:a8:40:42:8d:45:b4:84:a4:15:fc:
f0:c8:31:18:68:e3:3b:6c:3b:bf:34:b3:e3:2d:fd:49:18:74:
e0:1e:60:5d:5a:cb:a3:c5:0e:e5:3a:70:33:ec:f4:a2:fe:d6:
42:ec:8c:e2:3c:c5:8d:0e:5e:e9:37:7c:e0:d6:cd:74:66:0b:
e8:dc:e4:4a:b1:88:cd:88:66:86:e0:ab:87:61:53:96:3d:12:
50:b0:e9:74:7a:d4:81:b0:32:20:e6:48:28:44:2f:33:a3:4e:
ad:4b:8f:5c:30:89:42:28:b2:a4:3c:0a:bd:ac:fd:dc:67:f2:
bd:e1:e6:2f:d4:be:16:12:99:1d:12:72:94:28:ca:02:f1:cc:
82:26:06:c5:20:a3:b9:a8:e6:85:e0:c0:0d:4d:29:29:0b:84:
37:eb:17:89:ee:61:7f:54:d7:d6:c1:7e:63:3e:1f:f5:7c:d0:
b2:81:bc:ac:c3:de:9f:cb:73:bc:8b:bb:1e:4c:08:7e:71:dd:
45:3b:87:b1:cf:ac:76:69:c5:60:a5:62:2b:6e:63:03:60:51:
de:82:65:e4:7a:62:29:4f:e4:e5:f1:d0:3e:3c:d1:4c:80:a4:
7f:49:38:69:b8:98:55:41:94:70:db:b1:6c:40:48:d6:b1:a3:
20:a6:d0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:31:37 2026 by rpki-client