
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
File: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft (raw, json)
Hash identifier: SyxWJbgz9GmDA41+Kiq9aBbuvO599+3sHaqb4hnMPnk=
Subject key identifier: 80:26:C5:80:C8:47:38:ED:87:A2:4A:DE:FB:62:C7:58:36:8D:36:EF
Authority key identifier: 05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
Certificate issuer: /CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
Manifest number: 01D3
Signing time: Thu 21 May 2026 03:45:15 +0000
Manifest this update: Thu 21 May 2026 03:45:15 +0000
Manifest next update: Thu 28 May 2026 03:45:15 +0000
Files and hashes: 1: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl (hash: ZnVgm+Gd9DrDX1ylbvoqi55NdioNpqn7Z+qlYSsRHHM=)
2: 6063C75CB6E411EE94471D14C4F9AE02.roa (hash: ziUwj1t2MgzSTb6oGuF04WPFD3CesqsmmUkvkWjxkR4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157724, serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Validity
Not Before: May 21 03:45:15 2026 GMT
Not After : May 28 03:45:15 2026 GMT
Subject: CN=6a0e7fcb-81ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:21:90:b4:ae:38:db:76:7c:71:bb:14:90:cb:
c4:66:57:42:a6:b7:2c:29:80:cc:f5:fa:e5:5a:c3:
eb:16:60:f5:d9:ac:8f:0e:5f:10:6d:48:87:a8:ef:
38:06:91:51:e9:af:09:a2:3d:c0:6a:dd:a6:eb:b0:
81:9c:04:db:fd:d7:07:fb:9a:b8:6b:3a:33:94:90:
29:5b:98:af:d9:2b:21:47:ad:43:12:83:dc:ef:42:
87:17:1d:41:50:a0:13:ca:4a:5a:df:06:8e:85:f3:
34:84:0e:bc:46:62:62:e4:ee:2c:01:dc:5d:4b:8a:
83:6a:39:f0:68:36:5e:e3:53:31:37:d7:60:07:d4:
be:61:84:72:5e:9d:56:08:0d:c3:18:c7:e0:bd:b2:
aa:ea:8f:26:19:22:8c:8f:52:0a:6c:f9:c6:eb:8d:
ff:86:ce:b3:45:e2:b0:20:2e:d8:c3:ad:5a:7f:b2:
6d:7d:3c:d0:ef:a5:41:c0:4d:2f:c2:4a:7a:3b:a0:
37:f3:cd:45:89:d9:82:21:e1:a9:c7:20:bb:60:e7:
b5:08:eb:54:1d:ba:3f:b4:97:03:11:5b:82:7a:10:
18:18:82:9a:c7:f1:7f:03:ef:33:4d:9f:4d:a0:7e:
dd:21:98:56:a1:7b:a4:61:8e:71:5b:d9:e2:9f:83:
6d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:26:C5:80:C8:47:38:ED:87:A2:4A:DE:FB:62:C7:58:36:8D:36:EF
X509v3 Authority Key Identifier:
keyid:05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:35:de:2c:3e:93:5b:25:78:fc:83:c7:ff:3f:f9:05:b1:e0:
74:89:2c:25:05:d0:d1:ea:87:36:7d:bf:55:1a:2e:70:be:3f:
96:2f:83:d5:45:e9:33:4e:e5:42:f2:92:5f:1e:e8:02:5b:22:
07:3f:2d:63:90:f4:17:ab:07:43:df:81:5e:d3:7b:eb:e8:97:
34:d1:b3:ba:f2:65:20:7d:47:03:7a:e1:14:96:6d:1b:15:df:
64:18:87:ba:de:e9:d7:5b:5d:13:5f:a7:f3:51:08:f3:08:c6:
b0:1f:63:88:b0:b3:65:39:82:0c:33:dd:bb:25:a9:09:be:7b:
b0:05:36:aa:7b:dc:18:d6:f4:b5:e2:fa:42:38:a3:fc:11:31:
a5:c0:4a:1b:4f:a6:08:95:1f:f7:a6:71:d6:d8:8c:73:7a:1f:
dd:cb:f0:a1:a0:55:46:1a:84:3e:2b:9e:d5:74:30:d2:44:2f:
ab:f8:50:ba:49:d0:5e:1e:4e:eb:b5:84:dc:29:6c:73:3b:73:
59:83:ce:5a:60:5e:8c:5a:80:d2:ad:2b:e3:27:92:26:3f:5c:
2e:86:a3:36:5e:07:60:eb:f4:b9:35:f1:e5:db:54:af:ff:f9:
27:45:f5:72:8e:0f:4e:a3:47:7e:1e:fe:c7:af:a8:e9:7a:51:
ac:d9:e3:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTc3MjQxMTAvBgNVBAUTKDA1RDI0QjNCOEEyMjI3QjZGRUU5MkRDRDI1RDU0QkYw
NUVFODY4Q0EwHhcNMjYwNTIxMDM0NTE1WhcNMjYwNTI4MDM0NTE1WjAYMRYwFAYD
VQQDEw02YTBlN2ZjYi04MWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmSGQtK4423Z8cbsUkMvEZldCprcsKYDM9frlWsPrFmD12ayPDl8QbUiHqO84
BpFR6a8Joj3Aat2m67CBnATb/dcH+5q4azozlJApW5iv2SshR61DEoPc70KHFx1B
UKATykpa3waOhfM0hA68RmJi5O4sAdxdS4qDajnwaDZe41MxN9dgB9S+YYRyXp1W
CA3DGMfgvbKq6o8mGSKMj1IKbPnG643/hs6zReKwIC7Yw61af7JtfTzQ76VBwE0v
wkp6O6A3881FidmCIeGpxyC7YOe1COtUHbo/tJcDEVuCehAYGIKax/F/A+8zTZ9N
oH7dIZhWoXukYY5xW9nin4NtAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIAmxYDI
Rzjth6JK3vtix1g2jTbvMB8GA1UdIwQYMBaAFAXSSzuKIie2/uktzSXVS/Be6GjK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzcyNC9ENzM5ODcyODk1
ODcxMUVFQUQzQkIyNjJDNEY5QUUwMi9CZEpMTzRvaUo3Yi02UzNOSmRWTDhGN29h
TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JkSkxPNG9pSjdiLTZTM05KZFZMOEY3b2FNby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NzcyNC9ENzM5ODcyODk1ODcxMUVFQUQzQkIyNjJDNEY5QUUwMi9CZEpMTzRvaUo3
Yi02UzNOSmRWTDhGN29hTW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAujXeLD6TWyV4/IPH/z/5BbHgdIksJQXQ0eqHNn2/VRoucL4/li+D1UXpM07l
QvKSXx7oAlsiBz8tY5D0F6sHQ9+BXtN76+iXNNGzuvJlIH1HA3rhFJZtGxXfZBiH
ut7p11tdE1+n81EI8wjGsB9jiLCzZTmCDDPduyWpCb57sAU2qnvcGNb0teL6Qjij
/BExpcBKG0+mCJUf96Zx1tiMc3of3cvwoaBVRhqEPiue1XQw0kQvq/hQuknQXh5O
67WE3ClscztzWYPOWmBejFqA0q0r4yeSJj9cLoajNl4HYOv0uTXx5dtUr//5J0X1
co4PTqNHfh7+x6+o6XpRrNnjlA==
-----END CERTIFICATE-----
Generated at Thu May 21 10:14:33 2026 by rpki-client