
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
File: badIHjljLTOANmkPe0OixINj22g.mft (raw, json)
Hash identifier: G9N03bot9AvGjho5gH3rz/drqzdzxWxxjdTHYkiD6FE=
Subject key identifier: CB:04:5C:28:76:C4:1C:D7:D0:D6:36:EF:A0:B1:C5:C9:BF:99:0B:73
Authority key identifier: 6D:A7:48:1E:39:63:2D:33:80:36:69:0F:7B:43:A2:C4:83:63:DB:68
Certificate issuer: /CN=A9156854/serialNumber=6DA7481E39632D338036690F7B43A2C48363DB68
Certificate serial: F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
Manifest number: ED
Signing time: Sun 05 Apr 2026 05:46:33 +0000
Manifest this update: Sun 05 Apr 2026 05:46:32 +0000
Manifest next update: Sun 12 Apr 2026 05:46:32 +0000
Files and hashes: 1: badIHjljLTOANmkPe0OixINj22g.crl (hash: G/LHazbt14usUOiQP3qCsKBQxqj7xuNhvFXt9taiUZQ=)
2: CCE068D6CB2411EF93F63631C4F9AE02.roa (hash: kVyhvgjxUwUSm0wPasDIxMkRKwNbqO3guIkhR0YMhkI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.crl
rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:46:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156854, serialNumber=6DA7481E39632D338036690F7B43A2C48363DB68
Validity
Not Before: Apr 5 05:46:32 2026 GMT
Not After : Apr 12 05:46:32 2026 GMT
Subject: CN=69d1f739-576c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:78:a1:8f:08:b8:87:dd:eb:7c:56:15:5a:
c7:4d:64:34:a8:7f:3c:47:68:24:85:b9:6f:3e:96:
d9:0b:78:f7:2b:ae:83:6c:d1:d6:e7:73:3c:0e:e7:
9c:1b:8d:79:4b:61:5d:26:db:52:67:ea:d1:78:1b:
d9:da:c3:bc:3f:6a:4c:1e:e1:01:be:58:ec:bf:c1:
02:b1:a0:a7:de:e0:95:40:f0:3b:e9:9a:eb:9f:16:
a7:54:56:52:1f:d2:19:cf:6c:10:16:98:39:ef:cf:
0a:24:a7:69:ac:d0:dc:66:d2:ac:57:f3:0f:01:e1:
b1:3a:77:70:ba:a0:1c:65:0d:af:90:fa:b8:81:45:
a7:f4:e9:05:a3:98:00:d9:75:a0:5b:05:e1:64:cc:
2d:aa:2b:a1:91:05:55:75:c9:07:54:5d:6e:be:d9:
e3:f8:d2:b7:19:6c:5b:20:07:fc:38:ee:f5:d4:6d:
15:31:17:1c:cc:f1:e7:b6:cd:55:1a:0a:2c:5d:0b:
49:2b:fd:dc:eb:a6:f4:fa:5d:85:cb:6d:1f:1b:4d:
56:e0:e2:7b:e1:9e:ed:cb:56:bb:e0:53:6e:2c:ee:
15:fa:1a:03:3f:29:ee:46:f4:2d:27:a6:d9:75:1c:
9f:f8:35:7d:58:22:5b:df:d2:5f:04:a3:85:fe:47:
9e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:04:5C:28:76:C4:1C:D7:D0:D6:36:EF:A0:B1:C5:C9:BF:99:0B:73
X509v3 Authority Key Identifier:
keyid:6D:A7:48:1E:39:63:2D:33:80:36:69:0F:7B:43:A2:C4:83:63:DB:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:21:b0:37:b5:94:42:2b:04:3f:fb:b7:2a:03:b9:48:3a:d7:
d8:ae:52:d5:99:38:30:3c:7c:f3:70:26:45:e7:b9:ee:b8:5c:
32:3c:38:12:ad:75:23:4b:5e:eb:52:fd:44:e0:fd:dd:13:df:
8b:ce:17:cc:e5:1c:7f:ff:54:2e:dc:6f:f2:3d:d9:94:05:c2:
a7:0b:91:72:43:34:8b:3a:d8:c2:c7:bc:f1:34:b5:36:f3:86:
06:3c:95:68:b2:ae:71:03:a8:96:dd:38:f3:02:c2:b5:46:fe:
8c:78:d5:07:f6:9f:0b:87:cc:a9:08:09:da:90:06:a2:ac:9e:
5d:bf:c7:66:7e:18:86:d3:57:37:9a:13:8e:85:db:a8:45:4f:
95:8d:90:f1:84:fc:ef:3e:98:40:08:7e:0b:af:5b:f9:5a:89:
cb:61:b9:d0:de:5a:65:43:73:30:77:4a:42:37:e4:55:b7:f3:
29:7f:04:cb:d7:c2:ab:76:6a:4d:c1:28:42:af:ce:8f:f0:dd:
d1:c2:a6:35:1a:9c:84:45:b0:98:70:ca:cc:08:25:6f:90:98:
e0:55:6d:7f:5e:a6:5d:19:bd:46:b0:3a:49:11:8f:bc:3b:e6:
db:88:7a:17:d4:48:f8:04:89:59:2f:a9:ff:a1:9d:e3:66:c0:
87:34:99:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:12 2026 by rpki-client