
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
File: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft (raw, json)
Hash identifier: ALyda5CigGBhBoESp1oUadjBPDUopzX6IUxogxt2lgY=
Subject key identifier: D6:6C:90:3F:60:29:4F:0E:9B:26:DE:D0:4F:59:AE:64:38:AA:79:87
Authority key identifier: 05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
Certificate issuer: /CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Certificate serial: 020B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
Manifest number: 0202
Signing time: Wed 19 Aug 2026 03:49:14 +0000
Manifest this update: Wed 19 Aug 2026 03:49:13 +0000
Manifest next update: Wed 26 Aug 2026 03:49:13 +0000
Files and hashes: 1: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl (hash: YZpd+XaAehSuT9zR10ShQHwXWKXUTdgz+VHZnwIayE8=)
2: 6063C75CB6E411EE94471D14C4F9AE02.roa (hash: 5Gtf7oujjTH1/9TpM6Po8VolgFiUghsVEkgZJ7GcJcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157724, serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Validity
Not Before: Aug 19 03:49:13 2026 GMT
Not After : Aug 26 03:49:13 2026 GMT
Subject: CN=6a8527b9-fde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:c0:87:b5:5f:bf:8b:de:a7:60:0d:7f:b2:
b6:1b:97:ea:a7:33:29:4c:b9:1e:21:8e:ae:1c:06:
8a:be:9f:52:51:22:6d:72:b8:72:9a:99:47:7b:85:
b5:5b:57:2c:19:c6:e5:15:11:bd:5b:3c:e5:56:59:
da:c6:ed:8a:64:ad:1c:51:33:a4:15:f7:ce:7c:55:
29:08:5d:f4:d6:59:1c:ca:03:98:19:a2:aa:95:7e:
cb:86:a2:9c:66:77:22:97:54:09:ca:60:e3:49:ad:
63:8f:fd:64:72:1b:dd:24:fb:fc:35:65:7b:b5:fc:
fb:90:ba:28:4d:ec:9f:6d:64:e0:6f:b6:fe:58:64:
c0:33:96:d6:11:2a:19:f1:6b:ad:17:a7:5a:70:65:
58:ec:22:7a:d7:ab:aa:ad:e0:a9:f6:49:5a:63:2a:
ad:e4:00:ea:7c:c6:6f:a0:47:dd:3d:32:3c:99:00:
5b:c7:59:6f:76:35:eb:fc:d6:e1:35:b0:e4:da:7e:
f8:af:2f:37:65:62:80:2c:9d:d1:a6:87:43:23:78:
7b:b5:1d:de:92:99:d4:26:21:26:28:5f:b7:cf:a1:
91:2c:b3:91:9f:07:75:5e:2e:88:73:8f:a1:c6:12:
d1:3a:4d:1a:e8:66:e0:19:17:c7:4a:24:be:58:03:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6C:90:3F:60:29:4F:0E:9B:26:DE:D0:4F:59:AE:64:38:AA:79:87
X509v3 Authority Key Identifier:
keyid:05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ed:a5:38:a2:da:17:33:b0:73:06:d7:1b:6b:24:25:d4:c5:
8e:5e:f6:06:2b:8f:49:a9:8c:29:1e:22:e5:41:4b:48:52:b0:
c1:a0:9a:28:dd:34:3b:a0:1a:1f:72:45:ef:bf:6d:7f:4d:22:
15:e3:33:5e:70:85:7f:66:de:7f:e9:f0:bd:1b:cd:30:1f:24:
b6:49:6c:de:3d:35:fb:92:35:c1:23:fc:8a:a2:7d:00:34:33:
b2:bb:c1:9d:1c:c8:24:cf:85:f7:3a:8e:d3:3c:4c:6c:c0:9d:
d4:b7:c2:b7:6d:25:0a:33:c4:bc:34:09:6a:b5:f8:97:37:e0:
84:c8:c2:52:d0:a8:a7:43:40:7f:17:e8:d9:3e:fb:41:f6:a1:
76:35:47:23:f3:ca:41:b3:9d:85:db:fb:28:12:79:ad:9a:2c:
a5:ee:1a:b8:9d:53:56:b8:97:36:4e:f3:f4:17:8a:5d:32:28:
95:c9:c5:83:38:92:07:2c:b7:aa:54:c0:e2:cb:f8:c1:38:cc:
40:3f:83:1c:e9:a9:31:a3:c2:4b:24:21:9c:22:18:12:11:01:
cd:3b:ba:08:0c:62:27:cd:0f:5c:79:49:48:57:9a:9a:4e:41:
d2:46:65:ef:12:90:b0:37:2e:4a:82:81:04:03:29:d1:4e:49:
0a:bb:c2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:59 2026 by rpki-client