
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
File: bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft (raw, json)
Hash identifier: DnMUcybVELK1F79VBUL1pLLzXLgAQXYHcfUcDOpoC0Q=
Subject key identifier: 54:35:A5:90:9D:67:D0:54:B9:A6:5F:AD:C0:A0:E0:91:12:81:EE:91
Authority key identifier: 6D:DE:C6:A1:71:29:23:0E:EE:FE:50:8A:F1:19:62:FB:4C:0F:6F:C2
Certificate issuer: /CN=A9167C9C/serialNumber=6DDEC6A17129230EEEFE508AF11962FB4C0F6FC2
Certificate serial: 0685
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
Manifest number: 067E
Signing time: Thu 08 Oct 2026 22:43:26 +0000
Manifest this update: Thu 08 Oct 2026 22:43:25 +0000
Manifest next update: Thu 15 Oct 2026 22:43:25 +0000
Files and hashes: 1: bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl (hash: nH9itzW53SfB+wZPIbHH5mGJ3d9/BwDsi+mIx5MistU=)
2: BF811486DC1E11EBB2C72F52C4F9AE02.roa (hash: 3RyEfrC1/+oLdtWYjCCiGJj81mtXCEJfqPIsFdcM1I0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl
rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 22:43:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1669 (0x685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167C9C, serialNumber=6DDEC6A17129230EEEFE508AF11962FB4C0F6FC2
Validity
Not Before: Oct 8 22:43:25 2026 GMT
Not After : Oct 15 22:43:25 2026 GMT
Subject: CN=6ac81c8d-4321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ed:0a:f5:d7:c9:fa:04:4a:fe:17:4b:e7:89:
5c:f6:a5:47:91:dd:87:e1:75:17:83:c2:9d:ae:d9:
99:7c:17:7a:81:92:5a:79:5b:43:c5:a6:aa:d4:99:
40:0b:38:99:36:9f:b1:ad:bc:b8:c7:14:a8:9b:c3:
13:4f:6a:5d:96:e6:9c:da:34:9b:4f:cc:9e:fd:24:
4a:58:23:16:90:33:ea:10:f6:7a:e7:1e:b5:d4:80:
89:9d:84:8b:21:4f:6b:cb:f4:49:2b:f9:ac:ee:6b:
ee:02:02:e9:f7:dc:4c:4d:6d:ae:35:79:00:a5:77:
45:36:8f:15:99:e1:3c:5a:f0:f2:35:91:37:74:8e:
6a:48:07:fd:b1:28:ae:41:ad:a8:75:b0:68:8e:47:
9f:ab:47:22:f4:60:37:ca:4d:42:1b:36:b8:d5:ca:
03:9a:0a:fa:c9:41:72:48:a7:6c:bc:31:ae:a6:76:
22:22:61:ed:f2:cd:cf:86:00:02:35:68:2f:7a:63:
ca:c1:9f:fb:70:29:53:68:e6:d5:1f:ea:b9:b0:06:
ee:ca:b4:37:67:0d:77:27:14:fb:d7:e6:45:95:d4:
2c:3b:3a:2b:50:64:9e:b8:41:29:7e:eb:61:1f:28:
49:0c:79:ec:e7:ea:70:1b:e3:74:86:40:cc:ca:e6:
fd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:35:A5:90:9D:67:D0:54:B9:A6:5F:AD:C0:A0:E0:91:12:81:EE:91
X509v3 Authority Key Identifier:
keyid:6D:DE:C6:A1:71:29:23:0E:EE:FE:50:8A:F1:19:62:FB:4C:0F:6F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:b3:47:bd:d0:d3:72:6e:e7:44:05:48:9c:3e:d0:cd:f0:d7:
db:fc:a2:ad:61:8c:f5:19:0f:a6:5a:79:d7:5c:82:79:24:0c:
9d:44:a5:5f:cd:8e:ec:27:37:1c:c2:0b:7c:1b:a8:0e:04:f9:
ac:95:76:e2:57:64:a0:c3:c0:f8:c2:36:1c:31:cb:2e:79:0e:
79:3c:35:2b:08:4c:8a:57:d8:71:6a:b9:39:c7:a5:cf:16:9b:
e3:7a:21:e5:1d:d2:b4:2c:bc:0c:ce:40:83:fe:25:81:bd:09:
de:25:91:cf:10:28:a4:d8:72:2f:4d:a7:fe:4a:4a:c0:ab:9c:
92:37:56:a6:c8:c5:c6:f6:a0:51:7c:99:1c:67:19:d8:33:59:
61:f9:43:2a:c3:aa:2e:2c:42:68:a9:04:a9:7f:1e:94:24:34:
89:1a:89:96:62:8d:d8:41:d1:cd:49:69:68:0b:0f:2e:be:32:
2a:2c:3a:5d:98:98:a1:19:08:cd:80:6c:00:ff:85:84:9d:b7:
d1:c6:3d:4e:48:15:4f:d2:a8:d1:9c:8c:c2:65:63:2f:e8:c1:
c3:94:85:63:c9:25:3a:e3:93:f4:6f:94:c8:59:44:98:31:91:
77:e9:39:42:b4:5f:7a:4a:93:bb:8c:ac:24:a3:f3:22:41:69:
ca:18:77:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdDOUMxMTAvBgNVBAUTKDZEREVDNkExNzEyOTIzMEVFRUZFNTA4QUYxMTk2MkZC
NEMwRjZGQzIwHhcNMjYxMDA4MjI0MzI1WhcNMjYxMDE1MjI0MzI1WjAYMRYwFAYD
VQQDEw02YWM4MWM4ZC00MzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoO0K9dfJ+gRK/hdL54lc9qVHkd2H4XUXg8KdrtmZfBd6gZJaeVtDxaaq1JlA
CziZNp+xrby4xxSom8MTT2pdluac2jSbT8ye/SRKWCMWkDPqEPZ65x611ICJnYSL
IU9ry/RJK/ms7mvuAgLp99xMTW2uNXkApXdFNo8VmeE8WvDyNZE3dI5qSAf9sSiu
Qa2odbBojkefq0ci9GA3yk1CGza41coDmgr6yUFySKdsvDGupnYiImHt8s3PhgAC
NWgvemPKwZ/7cClTaObVH+q5sAbuyrQ3Zw13JxT71+ZFldQsOzorUGSeuEEpfuth
HyhJDHns5+pwG+N0hkDMyub9uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFQ1pZCd
Z9BUuaZfrcCg4JESge6RMB8GA1UdIwQYMBaAFG3exqFxKSMO7v5QivEZYvtMD2/C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0M5Qy85QjZDNDI4MERD
MUIxMUVCQTYzNTUwNEVDNEY5QUUwMi9iZDdHb1hFcEl3N3VfbENLOFJsaS0wd1Bi
OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JkN0dvWEVwSXc3dV9sQ0s4UmxpLTB3UGI4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0M5Qy85QjZDNDI4MERDMUIxMUVCQTYzNTUwNEVDNEY5QUUwMi9iZDdHb1hFcEl3
N3VfbENLOFJsaS0wd1BiOEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxLNHvdDTcm7nRAVInD7QzfDX2/yirWGM9RkPplp511yCeSQMnUSlX82O7Cc3
HMILfBuoDgT5rJV24ldkoMPA+MI2HDHLLnkOeTw1KwhMilfYcWq5Ocelzxab43oh
5R3StCy8DM5Ag/4lgb0J3iWRzxAopNhyL02n/kpKwKuckjdWpsjFxvagUXyZHGcZ
2DNZYflDKsOqLixCaKkEqX8elCQ0iRqJlmKN2EHRzUlpaAsPLr4yKiw6XZiYoRkI
zYBsAP+FhJ230cY9TkgVT9Ko0ZyMwmVjL+jBw5SFY8klOuOT9G+UyFlEmDGRd+k5
QrRfekqTu4ysJKPzIkFpyhh3Gw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 00:34:57 2026 by rpki-client