
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft
File: D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft (raw, json)
Hash identifier: w6uxEWVKCXsphoQWS4J6fEZRJkz3C1dXwKpbzZNCeZM=
Subject key identifier: 3A:03:01:1B:ED:AA:F3:2E:67:02:58:3B:64:E4:21:39:D6:F1:42:D0
Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02
Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702
Certificate serial: F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft
Manifest number: EB
Signing time: Thu 21 May 2026 06:31:56 +0000
Manifest this update: Thu 21 May 2026 06:31:56 +0000
Manifest next update: Thu 28 May 2026 06:31:56 +0000
Files and hashes: 1: D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl (hash: KoG+PnqZ1ks9GZ8M9kKiGYnRIzCdWSP1yqN/1yZivpI=)
2: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (hash: q11CNL+t4x5Vwq5rP/tYmXtfqpTGYiz7uq25DLAZUOc=)
3: 41554C78F1C111EFA67D2459C4F9AE02.roa (hash: zH79Pg4ZQIEeTl4Pd39EmE15gNeuVouP/IuZpHLtxZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl
rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156B5D, serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702
Validity
Not Before: May 21 06:31:56 2026 GMT
Not After : May 28 06:31:56 2026 GMT
Subject: CN=6a0ea6dc-27ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:08:6e:27:c3:a9:9a:d1:c4:e5:28:f5:b7:7c:
9a:de:f6:60:2f:a0:b7:ce:fd:4c:ea:0e:2d:a6:0a:
5d:ca:77:42:f6:63:47:cb:cd:68:89:cb:07:89:23:
08:53:d4:c8:f6:3a:01:42:a0:57:5e:48:34:98:5d:
d9:48:2d:31:63:07:eb:19:b4:51:29:b3:58:ba:df:
b8:10:d6:e0:35:aa:18:8f:cf:76:79:e7:fb:ab:55:
77:58:b9:51:b3:f5:c2:ea:ca:32:dd:f8:57:15:2b:
89:ba:20:bd:88:b5:5c:25:a9:7e:bc:d3:79:00:01:
d0:13:fb:e6:28:50:2a:ca:3d:75:4b:86:bb:48:a4:
61:5e:c8:c9:f3:16:9a:2f:a9:62:a3:42:a5:40:e8:
c6:4c:cf:77:84:d7:1f:82:34:86:71:08:22:96:15:
05:cb:95:60:f0:79:31:1e:6c:fc:b3:96:db:bd:ee:
44:ec:da:6d:48:f0:f7:87:81:2f:62:b5:1e:f5:1e:
58:ae:f6:53:06:a3:a3:ad:84:2c:38:4f:eb:de:34:
c1:08:6b:dc:13:a7:19:92:22:cd:4f:b0:50:32:af:
de:9d:5d:f2:28:92:a5:55:3d:eb:79:c6:d2:24:86:
4a:12:7e:05:38:d1:ef:6d:df:42:46:db:d5:ce:55:
9e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:03:01:1B:ED:AA:F3:2E:67:02:58:3B:64:E4:21:39:D6:F1:42:D0
X509v3 Authority Key Identifier:
keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:db:2c:0f:f5:b2:9e:63:32:a3:e2:86:06:b3:7c:0b:ab:fe:
d3:38:00:ae:dd:22:2b:5c:36:b8:38:ba:fb:2b:4d:02:b5:3e:
39:1b:02:72:b1:96:a2:e4:8f:15:09:45:ac:73:6a:4c:56:a1:
f4:3f:b3:22:3d:43:e3:84:79:7a:0d:e0:17:5b:2c:43:db:46:
92:39:71:8c:a3:b3:2e:ec:9c:ae:02:dc:27:15:db:ad:d7:00:
e8:3f:cd:8e:10:dd:01:7a:32:94:4f:c5:87:61:66:76:77:97:
2b:ca:2b:1d:f5:d6:fa:78:4e:e3:c9:26:6e:ea:39:ba:bc:91:
b5:81:7f:b9:70:5a:28:bd:b7:b6:cd:2f:fc:7e:5c:27:16:b4:
ad:6b:96:6f:9e:e9:e7:12:01:68:d0:62:67:21:ae:88:42:1c:
ab:a4:21:5f:fe:ea:61:7a:49:ee:01:72:fc:78:56:3f:39:a0:
f1:c5:cb:e1:ba:7c:d3:98:fa:93:5f:75:fd:41:ab:b5:a7:d1:
b7:73:4d:14:d4:3c:56:4e:46:48:57:46:82:77:eb:4b:a0:6f:
5a:7e:a5:3b:7c:3e:dc:27:77:4f:79:0f:b0:a5:eb:76:e7:47:
69:8b:05:f4:f4:18:58:ac:92:fa:f1:63:8e:e7:0a:72:fa:e5:
67:15:4e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:58 2026 by rpki-client