
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
File: BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft (raw, json)
Hash identifier: sV2e68y5u/xI9e8IvBHeXnXoMdU5oKNse3y+mdsL0qA=
Subject key identifier: F3:DB:95:2E:CE:87:0F:42:D8:81:87:09:0B:C9:14:C1:33:87:D0:40
Authority key identifier: 06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E
Certificate issuer: /CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
Certificate serial: 018B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
Manifest number: 0182
Signing time: Fri 23 Oct 2026 05:09:21 +0000
Manifest this update: Fri 23 Oct 2026 05:09:21 +0000
Manifest next update: Fri 30 Oct 2026 05:09:21 +0000
Files and hashes: 1: BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl (hash: 9VtWm6aBBfwuVcvmOKBHG6hfZuHq3LbXvdNCxkidTes=)
2: 79F85264827711EFAACDBD12C4F9AE02.roa (hash: m6PK1KHMxrRI0ccZY7maoxeIFFbWJyKbnxXXLM2hE+s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl
rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 05:09:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150D5C, serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
Validity
Not Before: Oct 23 05:09:21 2026 GMT
Not After : Oct 30 05:09:21 2026 GMT
Subject: CN=6adaec01-8341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:be:f4:a2:95:75:c2:d2:02:f4:ac:0b:6a:
52:e6:d1:7b:b0:2f:fa:cf:8f:7d:41:3f:bb:45:60:
94:19:07:f0:f4:1b:79:bd:e0:98:1c:55:d8:de:c3:
da:1e:93:4d:91:d7:16:5f:c1:6b:6d:9a:3b:06:43:
6a:cf:06:91:e9:90:30:1f:00:7a:2e:06:26:2a:eb:
10:6a:a5:ab:56:d4:d4:b8:e4:62:ef:f2:f9:21:45:
0c:f2:f9:5a:69:c8:fb:b5:1d:57:42:31:ac:c6:de:
b7:88:99:08:58:fa:b5:95:1e:d6:85:8c:b3:5a:9e:
c1:fc:b4:6f:5f:4c:bb:2c:d5:11:bc:38:97:5a:45:
7e:82:fb:ac:13:b5:6c:df:72:94:26:9c:0e:f3:3a:
83:64:9e:be:42:bb:da:79:ea:f8:af:fb:4e:02:9d:
7d:da:5d:2c:e9:20:ca:27:db:5e:52:c9:c9:93:79:
ca:c3:d9:c2:9a:3a:d4:d4:4e:e1:ba:cd:21:37:6b:
8b:b4:85:42:cf:75:3a:58:7e:0f:4b:5a:71:9e:5b:
1f:5c:14:13:65:f2:da:f7:19:79:dd:12:4b:40:63:
2d:8a:e9:f2:3b:4d:17:e4:03:f0:c1:5a:d7:71:3d:
d1:37:23:37:7a:a6:82:c9:db:64:91:50:ab:55:ca:
31:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DB:95:2E:CE:87:0F:42:D8:81:87:09:0B:C9:14:C1:33:87:D0:40
X509v3 Authority Key Identifier:
keyid:06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:bc:40:21:e7:ae:52:76:e1:32:56:81:2f:36:df:98:df:9e:
d3:bd:81:9d:e8:68:cd:d3:69:10:61:d5:b4:d9:2a:45:02:98:
e2:b9:4b:99:66:db:5b:c2:1d:1a:92:96:16:3b:dc:06:92:bc:
4f:b8:62:a1:d2:31:4e:6e:2d:d9:f6:79:2b:9f:22:ac:ac:a4:
2a:7b:44:95:ee:d0:4a:72:e0:c4:fe:b1:d4:01:ef:30:bd:cb:
7f:68:c7:80:da:48:17:6f:7e:6c:dc:4e:0b:6b:09:af:77:51:
1d:de:33:f4:39:e2:e0:29:03:a6:db:17:35:ab:64:8b:ef:24:
df:95:14:e7:94:e2:6d:df:16:30:08:fb:cc:90:f5:54:b4:66:
d6:0d:82:fc:16:64:cb:e1:c0:fc:2e:99:45:cf:58:47:e1:08:
b6:7b:cf:b5:2f:88:53:39:25:55:a9:4b:99:2d:32:47:8a:12:
d9:a6:5f:0d:10:90:bf:1d:dd:09:4f:ab:e9:ae:e2:ad:e0:e2:
6c:3f:14:2f:84:6f:fd:c4:83:7a:8a:84:41:a2:4f:2a:78:8d:
7d:d3:d9:f5:bf:b0:ee:b4:71:4f:13:0e:9b:37:55:1c:95:76:
d4:5f:72:6b:b7:d5:4c:f6:70:9e:72:5e:d5:ef:8a:49:a3:53:
a8:b8:80:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:55:24 2026 by rpki-client