
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft
File: dh_-bfalw4-a60XlQCWIzddef9w.mft (raw, json)
Hash identifier: KQ7Av9XONN7VVztEGgOphXTATWpkcUmOvOcqEsFaM38=
Subject key identifier: 75:56:6A:AC:3A:1A:AD:44:02:5D:5E:AA:48:4C:E9:B7:4F:69:A2:2F
Authority key identifier: 76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC
Certificate issuer: /CN=A9179CA1/serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC
Certificate serial: 0872
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft
Manifest number: 086A
Signing time: Mon 22 Jun 2026 20:48:13 +0000
Manifest this update: Mon 22 Jun 2026 20:48:12 +0000
Manifest next update: Mon 29 Jun 2026 20:48:12 +0000
Files and hashes: 1: dh_-bfalw4-a60XlQCWIzddef9w.crl (hash: HKTuf9XUOEdpap/TR+nXHRkrrftqdV6/tvJZwkNCJUY=)
2: 7816A67E045611EB86495B26C4F9AE02.roa (hash: 7pu3YPOy/Iyi+5lsIR5w0HcGr9ERc7QOQEXQx+NBL5Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl
rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 20:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2162 (0x872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179CA1, serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC
Validity
Not Before: Jun 22 20:48:12 2026 GMT
Not After : Jun 29 20:48:12 2026 GMT
Subject: CN=6a399f8d-13b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2c:25:57:38:dc:e9:20:c0:88:da:d6:be:55:
41:90:d8:23:a8:8c:e2:f3:f2:7c:b6:35:0c:3e:1a:
c0:12:d6:e0:c4:3d:75:ec:8e:22:af:59:a4:a8:68:
f2:ce:f0:81:c8:36:17:25:cc:05:2c:cf:43:1b:fd:
02:aa:63:96:c1:b7:c6:55:9a:b3:96:9c:0d:b5:30:
e8:ed:79:6f:26:bb:ad:d6:77:ce:4b:bf:e4:93:66:
84:5a:df:c3:97:80:1d:1a:68:a4:ed:52:94:81:f9:
e7:55:9c:69:b5:18:bf:71:b7:32:ec:a4:cf:0a:5c:
13:8d:db:dd:02:b0:c8:ce:7a:c5:91:a0:1c:36:4a:
cf:bd:01:37:62:1a:3d:d9:8e:71:50:76:5a:f2:a7:
a3:08:2a:cc:14:b6:13:7c:75:3d:c0:3d:c4:29:34:
32:27:c4:be:b6:e1:4a:03:e4:87:86:04:54:2d:85:
72:ea:75:e2:56:6a:51:af:a6:a6:88:ae:cd:f9:be:
4e:81:c7:40:ea:3c:6e:e5:a4:70:6c:c9:62:84:39:
9a:c5:37:a2:d6:9a:ae:62:06:3d:24:df:20:43:b6:
24:3f:26:49:21:ba:40:f8:32:d5:13:ad:46:c7:65:
b4:a3:0a:ae:17:ea:ae:23:76:9e:3a:f2:8f:e8:fd:
de:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:56:6A:AC:3A:1A:AD:44:02:5D:5E:AA:48:4C:E9:B7:4F:69:A2:2F
X509v3 Authority Key Identifier:
keyid:76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f6:b0:62:aa:23:b9:35:25:ee:be:51:77:dd:d1:21:8e:45:
b0:10:08:76:bc:2f:7d:ac:2b:98:07:d9:dd:fd:92:20:27:51:
7f:83:bd:89:2c:79:8e:92:0c:a9:43:bc:08:f4:1e:b6:44:fd:
b0:99:39:03:af:54:7f:fd:fe:9f:dc:67:c8:a3:1e:ea:2f:48:
e4:7f:5c:b6:e1:d9:80:e6:09:96:d9:87:cf:12:87:4c:c3:c3:
0d:f4:95:6f:43:43:91:97:ad:be:cc:dd:0b:a3:f7:31:da:e5:
10:39:06:11:a7:22:12:01:33:58:8d:da:00:76:4e:50:14:ef:
79:07:4f:b6:67:9a:15:99:c5:9d:78:10:df:48:d1:e4:7e:c2:
1a:6b:50:dd:99:bb:be:fe:d9:37:8a:2c:15:ee:11:e0:52:69:
ee:a0:9d:b0:e8:92:c3:87:2e:65:bd:78:0e:6d:26:20:58:fc:
04:e7:a6:db:96:31:a0:ba:88:7a:a3:c9:8e:00:4c:a1:bd:62:
d0:f1:6a:1e:44:73:d8:af:08:83:4a:5a:a7:a0:4d:a6:52:c4:
fc:37:47:e5:12:2c:2e:5b:61:12:52:75:a7:af:5c:44:f4:75:
0d:43:ee:23:57:b7:01:51:7c:84:06:b4:7b:29:68:6e:a5:72:
2a:3e:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:50 2026 by rpki-client