
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
File: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft (raw, json)
Hash identifier: fcLBiglUu0qG3sz7hfFMhfQ7kDUmpFKAuZsvffrB4cM=
Subject key identifier: 50:42:B1:FC:5A:8C:90:05:69:AE:79:8B:E2:C3:DB:C6:4F:5F:88:20
Authority key identifier: 05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
Certificate issuer: /CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Certificate serial: 0222
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
Manifest number: 0219
Signing time: Sat 03 Oct 2026 03:38:32 +0000
Manifest this update: Sat 03 Oct 2026 03:38:32 +0000
Manifest next update: Sat 10 Oct 2026 03:38:32 +0000
Files and hashes: 1: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl (hash: vdxFvP0iS2e8knSo1qqHT894XEmXCQdBPy/JhI4+10A=)
2: 6063C75CB6E411EE94471D14C4F9AE02.roa (hash: 5Gtf7oujjTH1/9TpM6Po8VolgFiUghsVEkgZJ7GcJcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:38:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546 (0x222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157724, serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Validity
Not Before: Oct 3 03:38:32 2026 GMT
Not After : Oct 10 03:38:32 2026 GMT
Subject: CN=6ac078b8-0541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:98:b2:00:84:e9:2f:71:dc:19:d7:30:40:
dd:ff:05:43:8a:74:2d:2f:e9:df:45:98:8b:e2:e8:
cd:63:e3:42:e9:08:d7:9e:6f:8b:03:8d:fb:f8:63:
0b:09:1c:89:8a:df:58:6b:42:8c:8f:4f:f6:05:64:
76:38:6e:87:90:cb:6d:96:df:7c:05:2e:89:46:3d:
40:ce:32:4f:ac:3b:72:48:58:e6:b5:b8:42:36:66:
aa:ce:19:12:68:81:b7:48:63:86:66:63:0a:66:39:
fd:02:3a:e9:76:4f:ed:20:1f:b7:62:bd:b3:19:a4:
a8:77:40:cf:02:9a:4c:ed:b9:45:78:51:c4:8a:36:
7c:c2:31:65:15:16:9f:4a:7c:27:f2:2d:b6:34:86:
68:a3:68:cb:24:45:a8:36:8b:c4:30:f2:17:63:6a:
84:68:50:00:b6:54:7c:11:bf:cc:32:6c:4c:fc:88:
06:c2:b4:f6:1b:5c:eb:3f:bf:1b:07:98:e4:b8:6a:
94:f4:05:16:68:99:35:3b:d7:41:9b:c9:87:f5:ff:
38:c9:dc:80:de:d3:dd:2a:90:02:a6:d6:38:fd:81:
a4:c7:b2:7b:58:e8:03:0a:d5:c1:61:5e:d2:1e:de:
83:18:7e:06:e3:a4:27:0e:ac:d7:89:cd:d3:b3:a2:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:42:B1:FC:5A:8C:90:05:69:AE:79:8B:E2:C3:DB:C6:4F:5F:88:20
X509v3 Authority Key Identifier:
keyid:05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ee:55:44:c3:b2:94:4d:14:82:1c:e1:da:4b:83:0b:4b:a4:dc:
ad:07:7b:1c:64:5d:4d:80:46:62:70:c7:7b:12:65:73:98:de:
de:80:0c:f3:31:78:86:d7:d3:ac:05:01:e1:2a:a5:7a:d4:c9:
6a:4e:95:96:51:25:6e:d5:05:78:48:29:dd:c9:84:64:7b:3a:
79:f0:88:42:f2:71:54:78:2c:03:a4:91:11:3e:74:00:d4:28:
b3:8e:8a:1a:61:a3:20:00:f7:78:d5:c2:91:a3:06:8c:cf:20:
55:4a:0c:73:36:42:c3:f7:69:1a:70:39:30:0e:d7:68:92:28:
24:a7:29:78:0e:54:b4:08:b8:8e:e4:0e:36:d5:f3:7e:41:ff:
cd:57:09:5c:c8:d3:3b:b7:25:d3:06:d5:6d:3c:d5:83:c0:23:
da:cc:1f:9c:f2:fb:52:cd:1b:75:6b:b8:02:36:ae:55:49:82:
b8:5c:82:db:17:04:22:c4:27:61:85:fa:23:88:63:8e:05:de:
f9:b2:4a:5d:7e:d9:c3:f0:6d:b4:25:93:4a:1e:23:aa:0b:b3:
48:37:b5:af:a4:94:9d:2f:7d:2b:18:a2:9b:b8:0e:55:4c:9c:
48:37:89:93:19:f1:11:bd:d0:40:f0:93:8b:35:fe:8a:b5:e5:
8c:cd:9f:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTc3MjQxMTAvBgNVBAUTKDA1RDI0QjNCOEEyMjI3QjZGRUU5MkRDRDI1RDU0QkYw
NUVFODY4Q0EwHhcNMjYxMDAzMDMzODMyWhcNMjYxMDEwMDMzODMyWjAYMRYwFAYD
VQQDEw02YWMwNzhiOC0wNTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0uuYsgCE6S9x3BnXMEDd/wVDinQtL+nfRZiL4ujNY+NC6QjXnm+LA437+GML
CRyJit9Ya0KMj0/2BWR2OG6HkMttlt98BS6JRj1AzjJPrDtySFjmtbhCNmaqzhkS
aIG3SGOGZmMKZjn9Ajrpdk/tIB+3Yr2zGaSod0DPAppM7blFeFHEijZ8wjFlFRaf
Snwn8i22NIZoo2jLJEWoNovEMPIXY2qEaFAAtlR8Eb/MMmxM/IgGwrT2G1zrP78b
B5jkuGqU9AUWaJk1O9dBm8mH9f84ydyA3tPdKpACptY4/YGkx7J7WOgDCtXBYV7S
Ht6DGH4G46QnDqzXic3Ts6LCQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFBCsfxa
jJAFaa55i+LD28ZPX4ggMB8GA1UdIwQYMBaAFAXSSzuKIie2/uktzSXVS/Be6GjK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzcyNC9ENzM5ODcyODk1
ODcxMUVFQUQzQkIyNjJDNEY5QUUwMi9CZEpMTzRvaUo3Yi02UzNOSmRWTDhGN29h
TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JkSkxPNG9pSjdiLTZTM05KZFZMOEY3b2FNby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NzcyNC9ENzM5ODcyODk1ODcxMUVFQUQzQkIyNjJDNEY5QUUwMi9CZEpMTzRvaUo3
Yi02UzNOSmRWTDhGN29hTW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA7lVEw7KUTRSCHOHaS4MLS6TcrQd7HGRdTYBGYnDHexJlc5je3oAM8zF4htfT
rAUB4SqletTJak6VllElbtUFeEgp3cmEZHs6efCIQvJxVHgsA6SRET50ANQos46K
GmGjIAD3eNXCkaMGjM8gVUoMczZCw/dpGnA5MA7XaJIoJKcpeA5UtAi4juQONtXz
fkH/zVcJXMjTO7cl0wbVbTzVg8Aj2swfnPL7Us0bdWu4AjauVUmCuFyC2xcEIsQn
YYX6I4hjjgXe+bJKXX7Zw/BttCWTSh4jqguzSDe1r6SUnS99Kxiim7gOVUycSDeJ
kxnxEb3QQPCTizX+irXljM2fFA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:16:26 2026 by rpki-client