
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft
File: bBH4O5qMvdIVMt3w6mHek4jRPGs.mft (raw, json)
Hash identifier: d+2quOet6ON6kbDIlH9F2Rg3cLJKeWFpFOKNuV3Spm0=
Subject key identifier: 96:5F:D0:AD:29:C9:BC:A2:2B:B8:6E:86:9A:14:CB:45:63:1F:9B:F3
Authority key identifier: 6C:11:F8:3B:9A:8C:BD:D2:15:32:DD:F0:EA:61:DE:93:88:D1:3C:6B
Certificate issuer: /CN=A917D958/serialNumber=6C11F83B9A8CBDD21532DDF0EA61DE9388D13C6B
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft
Manifest number: FF
Signing time: Sun 05 Apr 2026 05:38:18 +0000
Manifest this update: Sun 05 Apr 2026 05:38:17 +0000
Manifest next update: Sun 12 Apr 2026 05:38:17 +0000
Files and hashes: 1: bBH4O5qMvdIVMt3w6mHek4jRPGs.crl (hash: sgn7iaHUZRkUDZjbTkUel7vWAKfO8k4PQm2W2juZV6Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.crl
rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D958, serialNumber=6C11F83B9A8CBDD21532DDF0EA61DE9388D13C6B
Validity
Not Before: Apr 5 05:38:17 2026 GMT
Not After : Apr 12 05:38:17 2026 GMT
Subject: CN=69d1f54a-2c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:e1:c2:70:e6:ec:2c:b4:6a:24:ce:b7:fe:
7e:40:28:f2:8e:58:26:dd:52:73:6a:f3:5a:b2:cd:
83:87:64:fb:ee:ce:98:a2:2c:32:04:d9:be:c5:2b:
61:0b:96:4f:08:74:e4:e6:ac:d8:15:ae:55:04:ee:
50:21:2a:ba:ab:db:3c:b7:e5:8b:31:b7:67:81:7d:
29:db:56:83:2c:43:80:9d:46:54:82:a3:f3:1e:fe:
a1:e1:74:a9:b0:68:21:c9:87:7c:57:bf:4c:1a:1a:
d3:c4:f0:92:6e:7c:92:3e:e7:57:9b:ee:2e:42:df:
0d:c5:15:af:be:1b:29:58:24:17:4e:6d:98:c0:71:
a5:41:96:89:fd:04:2e:bd:82:21:02:ec:61:59:38:
2c:bb:cd:00:31:57:b1:34:9c:20:62:28:3f:c1:bd:
a2:e4:f7:3b:5e:52:8f:df:8a:f6:c5:a2:82:cc:41:
e3:a9:e4:3f:52:f5:5f:5c:07:36:86:11:32:2a:c6:
f4:3b:b1:f3:0d:02:7b:5b:96:e2:df:1b:4a:e3:3c:
fc:a7:72:1e:01:3e:26:0b:89:e5:eb:c3:c4:a6:ca:
c8:df:ee:c6:a6:0a:61:19:c9:00:c0:12:27:66:5d:
99:e3:c4:0e:62:f6:fd:13:da:d8:56:c6:78:f1:16:
7e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5F:D0:AD:29:C9:BC:A2:2B:B8:6E:86:9A:14:CB:45:63:1F:9B:F3
X509v3 Authority Key Identifier:
keyid:6C:11:F8:3B:9A:8C:BD:D2:15:32:DD:F0:EA:61:DE:93:88:D1:3C:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:77:19:f4:01:29:3c:3a:1b:7d:fb:ee:40:df:fa:72:ba:70:
f0:f3:55:06:2e:60:73:dd:dd:01:db:9a:b0:0d:11:f3:91:f6:
21:67:07:03:58:64:1f:aa:bb:ea:69:be:30:71:36:63:7a:d4:
7f:2f:c5:a8:98:45:52:f1:35:18:17:ae:f0:c0:19:66:43:8d:
fb:88:a1:57:2d:71:73:12:c0:50:0f:b6:41:86:f7:65:13:e2:
ae:55:9b:4f:cc:66:c5:0f:a1:6f:b3:69:ce:e2:ee:b4:a2:a5:
b3:12:23:a3:be:46:43:10:7d:26:43:36:95:da:56:f6:d2:81:
d0:d4:df:6c:c1:6f:30:0e:b1:0b:14:d5:85:dd:23:fd:6c:69:
a3:0a:71:95:d2:4d:6c:5b:cc:25:cb:8c:df:13:bc:da:38:c4:
5a:77:a7:f6:99:47:c0:b2:e1:42:e7:ed:cf:8a:d0:be:67:51:
3b:91:82:d1:30:0a:35:38:aa:29:62:a4:e3:18:f7:c1:e4:7e:
ae:33:48:fa:a9:dd:9a:a5:20:e7:0d:0e:56:a4:1b:84:30:96:
80:c9:21:41:b0:20:50:3e:6e:4b:0a:f7:8b:cc:f3:7a:0c:69:
a1:9d:33:72:04:fc:b2:fa:21:8a:68:e5:d5:c6:db:aa:0f:0f:
26:db:4d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:24 2026 by rpki-client