
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft
File: BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft (raw, json)
Hash identifier: O0ctnHSBFN9x9ZpaXUss9Bqly29aSls9FDv6hP40Zb8=
Subject key identifier: 85:9B:5F:D9:D4:E5:AC:30:45:BF:E3:CC:08:7F:D2:B4:61:20:06:48
Authority key identifier: 06:3B:AF:3E:D7:B4:10:71:A9:0D:9F:AE:41:0F:F4:78:88:F0:BE:DF
Certificate issuer: /CN=A9179F22/serialNumber=063BAF3ED7B41071A90D9FAE410FF47888F0BEDF
Certificate serial: 0234
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft
Manifest number: 0222
Signing time: Wed 07 Oct 2026 03:22:57 +0000
Manifest this update: Wed 07 Oct 2026 03:22:56 +0000
Manifest next update: Wed 14 Oct 2026 03:22:56 +0000
Files and hashes: 1: BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl (hash: 3xOA8DU8hXAqmJI6CwzUaE4OnAjIxFFFsKaK6Jx4PE4=)
2: 2CDC448608D811EF8DFDE781C4F9AE02.roa (hash: dyixDKTAzovNu6k79AJhuD1om07UmsLW8IkaqNntAaY=)
3: 2D7A0C2A08D811EF8DFDE781C4F9AE02.roa (hash: cz4Ylmr4Kv9n4Y7QqxrwtG+najuucUzZTc2q4HUpfpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl
rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F22, serialNumber=063BAF3ED7B41071A90D9FAE410FF47888F0BEDF
Validity
Not Before: Oct 7 03:22:56 2026 GMT
Not After : Oct 14 03:22:56 2026 GMT
Subject: CN=6ac5bb11-5cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7d:2a:68:78:79:17:ad:67:76:4b:fa:e6:8d:
39:d1:49:4d:4c:4d:34:ad:90:9d:0c:75:d7:a7:7d:
22:fd:d7:df:54:2d:81:d3:41:db:e6:05:73:46:d7:
38:2a:99:16:d1:6a:47:6b:3f:bf:f2:5b:84:82:aa:
e7:10:72:09:b7:67:12:fc:7d:99:09:cb:46:26:39:
1b:c2:95:cc:ee:63:11:d1:ac:26:c1:d8:a5:98:cb:
92:5e:2a:9a:b2:eb:6b:ff:e6:68:11:b9:f9:48:6a:
f2:43:fa:b0:ad:c5:3c:cf:ef:70:dc:50:d7:b6:bf:
d4:87:0a:9f:7d:e3:b6:a1:7e:90:f6:60:70:7e:c9:
1d:e3:fc:15:00:e9:a7:57:39:32:14:b2:b2:7c:ad:
1e:c0:ae:b6:59:7e:e7:8d:6c:f9:1b:39:22:5c:10:
11:9e:30:24:17:31:4f:1c:27:ff:24:2e:13:dc:d4:
1c:94:20:6b:4b:28:e3:0a:ba:6b:a2:79:cf:5b:d2:
09:29:f2:a9:57:2d:7d:28:09:6e:8e:98:c3:bd:d4:
e3:28:1c:4b:25:2e:ea:c8:3a:23:01:08:8e:64:4c:
35:9a:e9:08:60:23:5c:43:59:b4:75:2f:b7:1f:32:
04:1d:de:b5:ac:4e:e5:30:20:45:04:68:4e:6e:b3:
88:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9B:5F:D9:D4:E5:AC:30:45:BF:E3:CC:08:7F:D2:B4:61:20:06:48
X509v3 Authority Key Identifier:
keyid:06:3B:AF:3E:D7:B4:10:71:A9:0D:9F:AE:41:0F:F4:78:88:F0:BE:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:12:74:11:9f:4f:cf:e2:fb:da:c5:a2:45:2e:da:e7:db:6e:
05:cd:29:85:11:cc:1e:78:f2:f1:99:d8:95:37:09:c5:ef:92:
c0:de:98:3d:c9:bf:cb:47:22:17:48:aa:a8:ca:36:d6:e0:0c:
7c:7e:a7:ce:dc:e5:59:39:73:e1:a7:17:5d:7b:53:3d:54:f6:
6a:eb:c0:01:e7:77:88:d9:1d:f9:f6:43:81:ab:d9:92:9d:c7:
fa:31:74:79:05:d1:6b:52:01:8f:9b:fe:8f:7d:d1:e3:49:13:
75:c8:ba:a9:70:ed:51:e0:0a:23:ef:a2:e9:9a:b8:5f:c0:38:
54:2d:16:ba:ef:3f:f7:d5:09:13:36:ae:a7:f6:5f:c6:9f:cc:
a7:5e:c9:29:80:52:a1:16:31:0a:cf:87:b8:1d:cd:32:d7:cc:
ac:8c:51:0f:ea:48:14:c7:92:7f:f2:c5:b5:e6:0e:1c:0d:cd:
81:c1:ea:dd:80:4c:96:c6:b9:e6:7b:d1:bb:ee:5e:9c:30:37:
61:37:cb:2e:2d:b8:f5:77:a2:a7:71:b7:8f:9a:d1:1b:09:27:
01:9a:e5:48:10:c4:b9:95:f8:8e:0b:e1:ed:10:7c:18:a1:1d:
ad:6d:d4:cb:00:b4:58:d2:53:31:9b:e1:b9:95:52:f6:6f:5c:
74:b4:be:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlGMjIxMTAvBgNVBAUTKDA2M0JBRjNFRDdCNDEwNzFBOTBEOUZBRTQxMEZGNDc4
ODhGMEJFREYwHhcNMjYxMDA3MDMyMjU2WhcNMjYxMDE0MDMyMjU2WjAYMRYwFAYD
VQQDEw02YWM1YmIxMS01Y2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwX0qaHh5F61ndkv65o050UlNTE00rZCdDHXXp30i/dffVC2B00Hb5gVzRtc4
KpkW0WpHaz+/8luEgqrnEHIJt2cS/H2ZCctGJjkbwpXM7mMR0awmwdilmMuSXiqa
sutr/+ZoEbn5SGryQ/qwrcU8z+9w3FDXtr/UhwqffeO2oX6Q9mBwfskd4/wVAOmn
VzkyFLKyfK0ewK62WX7njWz5GzkiXBARnjAkFzFPHCf/JC4T3NQclCBrSyjjCrpr
onnPW9IJKfKpVy19KAlujpjDvdTjKBxLJS7qyDojAQiOZEw1mukIYCNcQ1m0dS+3
HzIEHd61rE7lMCBFBGhObrOIOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIWbX9nU
5awwRb/jzAh/0rRhIAZIMB8GA1UdIwQYMBaAFAY7rz7XtBBxqQ2frkEP9HiI8L7f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUYyMi9DNkY1NUZBODhG
MkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9CanV2UHRlMEVIR3BEWi11UVFfMGVJand2
dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0JqdXZQdGUwRUhHcERaLXVRUV8wZUlqd3Z0OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUYyMi9DNkY1NUZBODhGMkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9CanV2UHRlMEVI
R3BEWi11UVFfMGVJand2dDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAShJ0EZ9Pz+L72sWiRS7a59tuBc0phRHMHnjy8ZnYlTcJxe+SwN6YPcm/y0ci
F0iqqMo21uAMfH6nztzlWTlz4acXXXtTPVT2auvAAed3iNkd+fZDgavZkp3H+jF0
eQXRa1IBj5v+j33R40kTdci6qXDtUeAKI++i6Zq4X8A4VC0Wuu8/99UJEzaup/Zf
xp/Mp17JKYBSoRYxCs+HuB3NMtfMrIxRD+pIFMeSf/LFteYOHA3NgcHq3YBMlsa5
5nvRu+5enDA3YTfLLi249Xeip3G3j5rRGwknAZrlSBDEuZX4jgvh7RB8GKEdrW3U
ywC0WNJTMZvhuZVS9m9cdLS+8g==
-----END CERTIFICATE-----
Generated at Thu Oct 8 08:51:23 2026 by rpki-client