
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
File: bJoSIRV5G44VBIAXqXV-WHq1b4A.mft (raw, json)
Hash identifier: TQJFXi+g3gSIYUX39Ju+Kto4sFyNKEzA5V1FpYu0jdY=
Subject key identifier: 77:34:7B:DC:EB:EB:BA:67:62:F0:8A:90:4C:80:3C:85:C6:3B:EE:05
Authority key identifier: 6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80
Certificate issuer: /CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
Manifest number: 016D
Signing time: Mon 01 Jun 2026 05:29:29 +0000
Manifest this update: Mon 01 Jun 2026 05:29:28 +0000
Manifest next update: Mon 08 Jun 2026 05:29:28 +0000
Files and hashes: 1: bJoSIRV5G44VBIAXqXV-WHq1b4A.crl (hash: GCdvq4y7AQ4VSESmC0Spy3t9G/DYqIuXAjWQ+h4gEh8=)
2: CA2855CC2F0211EFB28E0271C4F9AE02.roa (hash: eFqoSUC3CBG2LpBUw/aigLIa86LE66amw5wsVo9Bfuc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl
rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133239, serialNumber=6C9A122115791B8E15048017A9757E587AB56F80
Validity
Not Before: Jun 1 05:29:28 2026 GMT
Not After : Jun 8 05:29:28 2026 GMT
Subject: CN=6a1d18b9-840c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:10:48:1b:f4:39:bd:57:5c:72:af:80:91:
4c:23:33:0f:d9:ce:40:ff:08:37:da:35:87:52:1c:
f2:1d:92:1b:59:fe:3d:11:46:fb:7b:b9:6c:95:36:
46:65:ac:b1:34:7f:f8:2e:4b:51:da:07:3b:93:2a:
d8:43:01:41:fc:99:13:21:e1:cd:3e:76:41:f7:8e:
95:4b:5e:4f:6f:4d:10:24:49:96:b0:b1:69:88:03:
e8:a1:3b:b9:ed:e6:6b:a8:0f:8d:74:00:b9:25:af:
ac:72:6d:56:3a:e0:11:90:0d:c9:ee:bc:c3:63:08:
1d:07:79:2e:a3:85:bc:df:52:ce:5a:4e:b0:04:e1:
1f:16:b3:9e:a4:70:8c:02:1e:6a:6a:fd:09:6e:08:
84:99:e0:00:c9:f0:b2:52:7e:03:85:d8:d3:e8:8a:
b7:16:7e:86:af:d6:19:af:f2:fe:00:c8:14:e0:3b:
ea:55:50:4d:cb:cb:d6:c6:03:89:77:c4:c4:af:af:
dd:57:4f:87:4e:72:7c:84:0d:fc:79:80:01:c1:b6:
b5:c8:3e:e8:94:56:dc:05:94:6c:3e:65:46:14:0f:
49:79:25:be:eb:42:f5:41:68:24:6f:bf:9b:4c:f5:
52:d3:60:68:a4:24:f3:cf:04:de:04:22:07:77:d7:
88:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:34:7B:DC:EB:EB:BA:67:62:F0:8A:90:4C:80:3C:85:C6:3B:EE:05
X509v3 Authority Key Identifier:
keyid:6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c9:14:6a:04:02:9e:c5:cc:47:26:4c:86:81:92:3a:bd:f3:
0e:52:6f:98:17:fc:1e:96:6c:90:7e:58:78:9f:a6:7c:4c:b3:
7b:5c:7f:ed:d3:5b:1f:04:31:97:39:5c:be:56:21:7d:7a:04:
cd:6d:f7:7b:d4:76:9f:c2:2e:04:8e:a5:d2:13:02:f7:29:30:
2c:39:3d:66:ff:0d:fb:11:9d:21:99:98:3a:b4:63:d1:06:3c:
c5:f2:2c:63:c8:af:31:e4:2c:0e:fe:57:8b:62:6e:72:42:b8:
bc:16:7f:5f:c9:c2:bf:12:2d:36:1d:21:67:ca:fa:77:4e:36:
65:e2:d0:fd:c0:9e:db:7e:dc:a2:2e:a0:31:10:74:7e:df:37:
7a:ae:46:01:8d:14:ba:6c:02:bb:91:5e:d1:35:2c:11:3a:be:
1d:eb:59:30:cc:b8:d8:ef:88:c4:6b:a7:8d:75:2b:46:e8:34:
3b:25:f6:de:23:e9:7b:11:a7:a0:b3:5f:b6:5b:ca:e9:f1:48:
65:fe:ee:c8:56:92:4c:72:e5:d6:a2:80:42:6e:02:3f:a5:e8:
d8:d1:ee:88:b9:84:1e:cc:ed:a8:05:ed:4c:d3:d9:5e:19:42:
85:ac:17:17:d7:d7:e1:91:28:f1:23:e4:d3:85:04:e9:89:02:
3d:9f:67:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:09 2026 by rpki-client