
$ rpki-client -vvf rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
File: bjpCzSsjnaPmWO-5fq0VsObt2qE.mft (raw, json)
Hash identifier: Am8EnMtf0psHvVEMGX2LxB4p80Hsr9mJ5GPxqVS6EWQ=
Subject key identifier: AE:C0:9D:11:20:EF:0F:C9:E6:45:E4:26:81:36:67:C6:79:9F:D2:74
Authority key identifier: 6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1
Certificate issuer: /CN=A914AA58/serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1
Certificate serial: 0432
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
Manifest number: 042B
Signing time: Thu 21 May 2026 00:24:05 +0000
Manifest this update: Thu 21 May 2026 00:24:05 +0000
Manifest next update: Thu 28 May 2026 00:24:05 +0000
Files and hashes: 1: bjpCzSsjnaPmWO-5fq0VsObt2qE.crl (hash: ZfQUGqJSHWsuAByQoLgBgQrUh1hyhJk8JgxlIpRdS1Q=)
2: CC2E531EAA7811ECB6791A3EC4F9AE02.roa (hash: 37VlMe44HsI4mwZGoHfVZRuXEIx4vFk+koi7ahjqKfI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl
rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 00:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1074 (0x432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914AA58, serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1
Validity
Not Before: May 21 00:24:05 2026 GMT
Not After : May 28 00:24:05 2026 GMT
Subject: CN=6a0e50a5-354a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:18:05:85:1b:79:a3:67:98:bf:57:5e:29:
0e:8f:30:a4:f4:d9:28:35:2c:0d:b1:5a:54:74:11:
a8:fd:ed:20:94:19:3d:96:a2:ca:60:dc:2e:97:3f:
82:58:25:86:79:07:34:e4:14:34:73:9b:91:e7:59:
22:bc:52:b5:d6:23:07:32:67:ac:89:41:c6:dc:24:
e9:25:4a:cc:98:fa:ce:24:a9:bc:47:08:0a:14:de:
67:c6:8e:a6:f5:7b:b5:93:4c:69:c1:8a:df:21:30:
a3:3d:17:5f:7e:ca:c3:51:71:70:0c:3c:35:07:54:
f4:f7:ff:fc:39:ab:07:3f:68:06:17:9d:ad:41:33:
e3:ba:53:0e:e6:31:d5:b2:97:62:04:fb:c8:bc:6e:
56:cf:b1:1d:3a:c7:e4:aa:76:19:d6:6d:50:3c:03:
96:ae:ff:64:5f:7f:97:60:65:3b:9f:54:cd:25:a4:
e3:1f:17:bc:09:9a:57:49:be:fc:24:41:90:81:6e:
71:fc:a3:32:20:ea:c0:0d:fd:f9:d2:a3:5a:50:61:
35:c9:e1:d8:3c:5d:fc:5d:a6:19:8c:1d:40:90:2e:
d4:20:d4:bf:2e:e0:0f:33:22:9e:1a:c4:9e:63:74:
6c:42:17:24:e5:2b:ba:00:80:ee:52:9b:6f:1f:81:
23:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C0:9D:11:20:EF:0F:C9:E6:45:E4:26:81:36:67:C6:79:9F:D2:74
X509v3 Authority Key Identifier:
keyid:6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:a9:16:2c:20:fb:33:69:b0:a7:c0:5d:1c:57:6a:8d:ed:fe:
c6:fa:ac:50:01:d9:b2:20:a5:89:39:97:6a:39:f0:a5:e0:af:
38:33:27:24:29:f1:99:f5:2b:25:85:12:ff:61:18:fa:6a:c7:
18:8e:d8:d2:be:57:e5:c8:4b:57:86:b0:55:bc:d1:ce:0c:5c:
0b:75:96:38:80:8f:ec:b1:a4:21:73:cd:a4:2f:ae:7b:8b:6c:
d3:ab:1d:dd:4e:fa:12:f9:dd:4c:12:ba:00:ca:f4:53:ab:ea:
cc:20:c6:5d:a4:78:0c:0d:69:71:13:38:a4:e1:a7:61:b8:64:
29:66:94:c4:25:e1:6b:c9:f8:1a:c6:f8:c4:a5:ea:8e:94:9e:
5c:0c:22:76:a7:fc:b8:8d:b3:b5:a7:8d:41:1e:52:70:b3:fc:
0e:3a:8f:fc:c8:d8:40:2b:cc:62:17:63:82:98:15:5b:7a:41:
b3:b1:00:a2:fd:2f:b8:b7:2c:08:dd:71:a8:e0:02:cd:9f:33:
de:d1:ab:df:6b:f6:8e:e6:8d:75:c4:ba:03:b4:2a:5a:da:f5:
0b:22:14:23:2f:80:c7:88:63:cb:44:94:19:9d:dd:7b:13:77:
56:9c:ee:5a:7e:af:79:99:b5:cd:be:aa:d4:10:fa:44:e4:ff:
cf:ff:5a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:11 2026 by rpki-client