
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft
File: BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft (raw, json)
Hash identifier: arx075G+Oi/KyT7gWc52mcMjdik9OpT6VYj8sKbwceM=
Subject key identifier: 39:B8:09:E6:DE:8C:3E:96:32:BE:3A:4E:0B:45:DC:D9:1D:6A:84:37
Authority key identifier: 04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7
Certificate issuer: /CN=A9165B02/serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7
Certificate serial: 06D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft
Manifest number: 06CE
Signing time: Tue 06 Oct 2026 22:26:38 +0000
Manifest this update: Tue 06 Oct 2026 22:26:38 +0000
Manifest next update: Tue 13 Oct 2026 22:26:38 +0000
Files and hashes: 1: BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl (hash: kYlb5o2jlaW1hnHr/ONLUSdAJrA9UumTN0YwJsVYGjk=)
2: CEEBA382BD1511EB9E873260C4F9AE02.roa (hash: 7GG4HXVAAliKVWU1/QAGmEXY38iid1/8BMRmSndCqBc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl
rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1750 (0x6d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165B02, serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7
Validity
Not Before: Oct 6 22:26:38 2026 GMT
Not After : Oct 13 22:26:38 2026 GMT
Subject: CN=6ac5759e-1ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:20:a6:22:62:6b:76:80:fe:50:45:9d:b3:9e:
e8:ce:7f:12:8c:d4:7e:41:65:92:00:d9:1c:31:67:
8b:93:fc:76:5d:7e:a8:c6:d3:ba:53:df:06:ff:f3:
11:ec:07:7b:b6:b7:62:92:a2:8c:0b:b0:11:26:04:
6b:9d:43:a2:c9:42:43:b0:04:da:04:2d:1f:45:85:
11:f0:96:5f:f0:b8:a4:a3:af:7d:5e:f1:ff:b3:e1:
65:83:5b:c0:50:8b:54:a9:de:9f:7e:f3:2a:2d:3a:
90:55:50:59:d5:f0:97:df:91:d8:5d:a7:f7:ed:0d:
9d:21:85:e3:db:59:80:51:88:20:6a:2d:c2:7e:44:
35:bc:72:0f:2a:d5:c3:45:8d:2a:a6:7d:d8:79:c8:
48:63:9d:05:55:eb:db:0c:4d:9d:3b:3e:59:31:35:
5a:2f:c2:17:aa:72:5f:05:52:07:78:39:b9:f1:5a:
fa:e3:22:0e:bf:b0:e3:79:18:da:24:30:46:66:19:
56:17:dc:07:c3:0b:43:46:bf:46:ea:b7:7d:db:12:
9d:3e:7c:42:0a:27:13:ac:87:b2:4b:c5:03:a8:e8:
df:d4:97:fb:9c:be:f8:9c:f6:36:ac:ec:4e:8c:34:
8f:54:41:09:4d:93:5a:04:46:96:31:db:a1:40:7b:
76:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B8:09:E6:DE:8C:3E:96:32:BE:3A:4E:0B:45:DC:D9:1D:6A:84:37
X509v3 Authority Key Identifier:
keyid:04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:9e:00:91:99:e6:d2:03:3d:78:71:6c:dd:b6:63:40:1c:e6:
dc:3a:ac:5d:91:f8:3d:87:71:28:3c:6e:48:1b:79:2f:e7:35:
da:f0:7d:86:75:b2:42:d6:66:aa:c4:9e:19:64:b9:80:6b:9c:
8e:c4:20:44:2c:03:f4:f4:de:12:c6:cb:f0:e7:21:65:e6:f1:
a4:71:2d:db:2b:44:98:21:fa:cf:38:dd:e8:57:4c:15:79:e0:
e5:ae:a3:8b:fa:cd:8d:1b:5d:89:4b:b5:86:b6:65:d3:ad:0a:
17:97:25:ef:57:5f:b4:11:3d:ae:51:3b:8f:f2:32:05:e5:03:
c4:4e:0f:c0:27:8b:22:bb:c7:02:f2:86:1d:de:85:e6:48:3f:
6a:a7:51:67:79:cc:2e:ba:c7:49:da:f9:0b:8e:d6:73:71:c6:
73:ef:cf:bb:7f:9e:b6:47:80:43:0f:9a:a8:ff:dd:54:cf:e1:
ab:2a:1c:41:80:f9:f1:27:a6:dc:f4:1c:30:82:eb:51:a3:a3:
9c:38:c0:bc:55:05:a9:aa:9f:f6:96:9b:fc:5f:ee:1a:1a:03:
e4:2c:51:7b:86:3a:51:62:86:07:66:37:e1:0e:18:2d:2e:75:
a4:dd:55:ce:9f:49:49:17:a3:f6:f6:3d:ed:8e:ac:5d:54:99:
8f:95:5f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 18:25:41 2026 by rpki-client