
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
File: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft (raw, json)
Hash identifier: pRT3TxG2YJbgfYI+Ba6PjKQB/OVsU18yIeQoU9ZKRT8=
Subject key identifier: EA:22:B7:C2:BF:7D:89:BB:F3:75:A3:AC:2F:8F:77:6E:A2:47:24:3D
Authority key identifier: 05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
Certificate issuer: /CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Certificate serial: 01C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
Manifest number: 01BC
Signing time: Sun 05 Apr 2026 03:27:17 +0000
Manifest this update: Sun 05 Apr 2026 03:27:17 +0000
Manifest next update: Sun 12 Apr 2026 03:27:17 +0000
Files and hashes: 1: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl (hash: I8Xp5k/6LP2e1AutBAEUhObAeYHfeyY2ZbURdeIk4Y8=)
2: 6063C75CB6E411EE94471D14C4F9AE02.roa (hash: ziUwj1t2MgzSTb6oGuF04WPFD3CesqsmmUkvkWjxkR4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452 (0x1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157724, serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Validity
Not Before: Apr 5 03:27:17 2026 GMT
Not After : Apr 12 03:27:17 2026 GMT
Subject: CN=69d1d695-f7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:3b:17:52:c6:6e:dd:8f:df:95:62:e8:ff:
84:fa:b3:03:46:cb:a3:7f:e2:ca:3d:8a:7f:ce:a6:
f5:6c:42:b6:87:6d:7b:d0:a8:94:08:89:48:ce:26:
ce:6c:25:68:ea:1a:70:6a:69:89:af:cd:b8:45:0d:
46:e8:5f:30:47:b0:90:5e:3f:55:f5:cc:3f:a9:a2:
57:a7:63:49:35:41:2c:b1:7e:57:0a:74:c6:55:cd:
ac:7e:89:3e:db:c4:35:34:6d:76:6c:00:f7:6e:f2:
0c:8a:5f:89:65:95:43:74:bd:98:5c:69:d7:89:0c:
a0:c4:fc:57:ec:1d:97:f5:8e:f7:06:d3:df:86:8c:
ef:f6:07:cd:11:0b:53:69:dc:68:1f:13:f4:42:ce:
7a:31:74:8f:f9:76:31:55:0f:26:df:98:c7:24:ba:
5b:66:63:ac:5d:af:bf:73:0f:0d:9c:2f:eb:1b:ca:
eb:e8:98:55:68:b6:d8:39:92:ce:73:bf:9d:1f:3e:
45:5c:2c:11:bc:c7:5c:b1:06:fe:4a:7c:65:8f:0e:
8f:9b:5b:7f:a3:9c:ee:9b:ec:c6:06:68:f4:06:d4:
1d:55:10:43:32:55:7a:95:b9:8a:59:74:df:bc:2f:
7c:6f:34:16:21:de:74:60:f7:41:56:85:de:3c:d9:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:22:B7:C2:BF:7D:89:BB:F3:75:A3:AC:2F:8F:77:6E:A2:47:24:3D
X509v3 Authority Key Identifier:
keyid:05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:01:0d:9d:33:3a:bf:28:21:90:0e:4a:da:af:f2:d4:f8:ea:
3b:56:a5:7f:a3:b9:68:47:7e:a3:67:b3:85:90:68:6f:bf:83:
e7:39:33:1e:00:c3:5c:03:65:49:f0:e0:47:32:ba:95:fb:a7:
12:71:6f:7a:0f:ad:30:95:8a:f9:50:ca:65:47:6f:b4:a7:88:
78:a3:eb:6a:06:f6:20:6f:86:6b:c1:f8:2d:c2:24:19:8f:af:
b0:06:c3:cc:f4:f4:eb:c3:61:e1:57:b7:76:64:bc:30:f3:df:
44:9c:25:16:7a:f9:3a:2d:e9:ad:15:27:9e:ad:54:19:3b:24:
de:37:4d:d1:af:13:7e:3a:8b:87:78:99:23:c0:3d:ec:b4:20:
4f:4f:b5:b1:20:4e:de:bf:71:b8:dc:81:15:a3:3f:93:e6:d9:
41:a9:1e:e3:35:45:ea:1e:ee:fa:4c:ef:02:5c:62:06:4e:b1:
2e:94:6f:6f:26:72:d0:07:1d:51:84:0e:82:0c:19:8b:df:e1:
05:36:47:7d:d8:b2:fa:65:8a:b1:c8:d1:7a:f8:60:49:48:dc:
90:9d:89:83:00:2a:4f:f9:07:09:cd:c9:30:84:3b:46:e7:57:
19:ed:3b:9d:93:c0:7d:0a:62:a2:49:04:2e:b7:ae:8c:72:34:
55:40:59:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:26:12 2026 by rpki-client