
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
File: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft (raw, json)
Hash identifier: vGBaZTAZVJXbb5ryxnVZJODu0+nvq645lqj+fcxv030=
Subject key identifier: F6:DE:CF:8A:27:E1:18:94:51:E2:33:A8:86:37:AF:17:10:44:D2:FB
Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
Certificate issuer: /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Certificate serial: 023C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
Manifest number: 022C
Signing time: Sun 25 Oct 2026 03:10:41 +0000
Manifest this update: Sun 25 Oct 2026 03:10:41 +0000
Manifest next update: Sun 01 Nov 2026 03:10:41 +0000
Files and hashes: 1: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl (hash: 7m7JPwRnTnn58WIeuxFP9nyW2NMrNCN9Q1F1iG04D1E=)
2: 342A14D6F0E911EEAAAD9A6CC4F9AE02.roa (hash: zAWlrytMBb7aOvLXuHLVnYaYJEpV8eVWaLPA029dJCU=)
3: 5A44099895C111EE951C9E4CC4F9AE02.roa (hash: DkdcatwLmN2ONkPOpKETQhUgaZX36ttB9+kcADlT4Z4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl
rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 03:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913939F, serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Validity
Not Before: Oct 25 03:10:41 2026 GMT
Not After : Nov 1 03:10:41 2026 GMT
Subject: CN=6add7331-57ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:07:a0:2a:b6:b2:70:f6:4a:11:85:6c:b8:
63:88:33:8e:81:73:d5:cc:14:f4:6e:59:3f:c7:f5:
ff:96:04:62:6e:ac:64:30:d8:c2:c5:ed:d0:fb:b0:
b3:f0:78:3e:77:9b:b2:0b:64:35:14:6a:eb:e0:24:
82:03:94:54:75:91:8e:6f:72:37:b4:f8:35:0e:d9:
eb:46:58:38:3b:19:d9:95:2a:c9:c0:4f:26:8a:63:
3c:5f:db:36:f0:6f:6e:17:31:70:cd:f0:c8:1b:47:
83:a1:9c:e4:d3:4d:99:42:6b:38:b8:2a:93:4f:20:
f8:52:db:c7:67:1c:ef:81:41:2c:b4:ab:9f:ec:d9:
82:bb:f4:d5:c4:d2:bf:44:60:6d:ad:5d:7b:ee:bd:
e2:6c:7b:82:53:27:b0:09:5c:aa:54:94:60:b5:fc:
e0:cb:c0:f7:06:60:de:8f:46:61:16:64:8f:ee:e3:
c0:17:dd:ec:6a:7d:2d:d0:c7:1d:43:3e:f3:cc:10:
73:0e:aa:da:2a:98:e7:1b:e4:b2:b8:4b:af:e0:59:
f2:69:a1:27:eb:49:c9:80:16:3f:f0:9a:d8:b7:e4:
b2:85:9c:24:06:a4:c1:ff:53:96:7a:e7:61:ed:34:
5f:c3:2f:f4:31:e0:c8:29:e1:84:b6:8b:80:95:53:
6a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DE:CF:8A:27:E1:18:94:51:E2:33:A8:86:37:AF:17:10:44:D2:FB
X509v3 Authority Key Identifier:
keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:05:81:c8:2a:de:75:f2:f2:ef:64:24:bb:06:bc:f1:fc:e3:
bb:2b:18:4c:d7:ee:4a:e6:7f:2e:3e:ef:c7:10:71:53:8d:4b:
99:65:af:00:d8:68:2b:3b:e8:fd:5e:29:33:52:f5:8b:49:3b:
e3:20:a6:c8:78:dd:62:17:68:ea:77:fe:0c:ff:fe:1c:6f:68:
35:c0:44:67:66:00:97:95:b5:c4:9c:d5:a1:7f:32:20:50:c3:
38:fa:25:33:6b:d8:af:81:9a:a2:a4:8b:0a:82:de:55:76:fb:
e4:0d:f8:6f:3f:70:51:35:bb:b4:5b:a2:a1:d5:4f:9d:82:e2:
4c:9b:d8:bb:5b:38:4b:2a:b7:7b:94:cf:58:63:2f:68:be:4f:
d6:4b:5c:68:36:af:d2:1f:b4:e3:ce:bc:50:3f:12:97:29:85:
f6:c8:71:b5:24:de:ab:a2:f6:05:54:8b:92:c5:23:66:bb:1d:
13:c1:2c:e2:c6:79:6d:08:23:40:e8:17:f2:84:47:9f:5a:a2:
bc:93:f1:70:24:6c:23:73:88:ce:a6:fd:f7:5f:83:9f:fa:2c:
0d:6f:cb:57:88:21:a2:fb:b5:33:80:f3:a2:bc:2d:ae:bf:aa:
37:e1:3d:99:d0:a4:54:eb:c9:c1:10:8a:95:69:14:49:84:62:
d9:2d:52:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:49:09 2026 by rpki-client