
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
File: badIHjljLTOANmkPe0OixINj22g.mft (raw, json)
Hash identifier: gm8iiYiFdYBULCVchiTlW227gThqdWXE8p3fprkQCWw=
Subject key identifier: A2:34:67:7F:F8:DE:ED:32:4C:B2:85:D3:A5:5B:88:45:A7:09:57:EE
Authority key identifier: 6D:A7:48:1E:39:63:2D:33:80:36:69:0F:7B:43:A2:C4:83:63:DB:68
Certificate issuer: /CN=A9156854/serialNumber=6DA7481E39632D338036690F7B43A2C48363DB68
Certificate serial: 0124
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
Manifest number: 0120
Signing time: Fri 17 Jul 2026 06:55:16 +0000
Manifest this update: Fri 17 Jul 2026 06:55:15 +0000
Manifest next update: Fri 24 Jul 2026 06:55:15 +0000
Files and hashes: 1: badIHjljLTOANmkPe0OixINj22g.crl (hash: JFDVOAYJJc04JoXNMyjPZY39n5yfuqnutF9G45tC4oU=)
2: CCE068D6CB2411EF93F63631C4F9AE02.roa (hash: kVyhvgjxUwUSm0wPasDIxMkRKwNbqO3guIkhR0YMhkI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.crl
rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156854, serialNumber=6DA7481E39632D338036690F7B43A2C48363DB68
Validity
Not Before: Jul 17 06:55:15 2026 GMT
Not After : Jul 24 06:55:15 2026 GMT
Subject: CN=6a59d1d4-b928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:6e:ee:86:a6:35:8d:0a:18:11:2d:8d:57:
57:8b:4e:95:4c:9a:59:e1:fc:d5:a0:5e:f3:64:5f:
1e:a6:be:89:15:bf:a4:23:50:e8:b5:4b:dc:43:27:
93:c3:6e:a8:27:c6:9f:1e:11:d9:be:50:cb:4b:70:
13:fa:12:d6:8b:0c:32:f6:13:f1:72:02:da:22:36:
e3:4a:4e:f7:63:34:f0:12:c4:57:9b:72:07:17:a2:
04:e4:95:c2:02:64:93:e2:39:72:96:a3:cb:fb:07:
1e:66:c2:2f:db:03:21:e1:c3:0e:6e:1a:57:17:c7:
cc:92:e3:a0:8d:7e:01:c4:6d:54:d4:cb:fb:1a:ff:
d6:b9:1a:f9:64:6e:57:92:a0:4f:b0:8d:d8:c6:68:
67:56:55:3e:0e:02:d2:6f:18:a4:3b:30:31:42:25:
d3:ce:3a:fe:a7:5b:05:93:b8:4b:3b:23:ab:ed:05:
42:ed:bd:c3:0b:1f:67:ac:98:5c:85:0d:dc:54:00:
1a:5a:07:1c:89:0e:d9:5b:e4:0e:64:75:b6:e6:ab:
df:50:00:de:fe:00:7b:fd:b8:bd:c4:e5:e5:55:77:
5c:da:da:52:50:8a:3a:81:b5:5f:af:2a:37:21:6a:
cf:7e:cd:4e:38:43:8c:96:ef:cf:b1:40:67:0d:c4:
75:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:34:67:7F:F8:DE:ED:32:4C:B2:85:D3:A5:5B:88:45:A7:09:57:EE
X509v3 Authority Key Identifier:
keyid:6D:A7:48:1E:39:63:2D:33:80:36:69:0F:7B:43:A2:C4:83:63:DB:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:84:97:4f:33:f3:69:35:fd:53:d2:63:8d:48:c2:7d:bd:69:
11:06:ab:27:78:3a:70:05:88:00:d2:0a:a4:9b:12:fd:a2:22:
90:cd:79:75:b0:56:5c:06:d9:3f:ca:98:95:85:83:e3:7a:46:
7c:34:ba:e2:7f:52:ac:67:98:77:6b:fe:fc:63:4c:52:ad:39:
52:27:80:e9:c9:c8:43:f5:e8:6b:48:23:5e:6a:75:9d:fd:e5:
bc:f9:ef:07:9d:d4:70:b5:07:c1:21:da:01:94:1c:29:e0:3c:
e9:01:f6:40:fa:3e:04:60:b9:56:e1:77:a7:6d:f9:14:dc:08:
99:82:62:7e:53:fb:72:1c:f8:5d:d6:a6:81:76:0c:66:f3:a8:
1b:b0:0f:51:fe:70:0c:f0:f7:9e:73:92:2e:87:b1:4c:f3:c3:
97:31:6b:2e:e5:1f:ce:b0:a7:bb:89:76:a1:7e:5a:db:24:b5:
ab:3e:85:c9:d0:88:d9:39:d9:7c:34:37:9f:31:42:04:ee:2a:
fc:0d:e6:90:de:5d:a2:09:51:de:ed:b7:cd:ed:da:84:a8:e8:
11:d8:77:62:76:db:e3:c4:30:b3:80:16:11:20:cb:89:37:f7:
e9:43:ea:61:eb:57:6b:83:09:cf:e9:3c:7f:01:f0:e8:a1:aa:
5a:13:b7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:21:56 2026 by rpki-client