
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
File: bWlDJ6eLD158LQx0Y3dIHe3doAI.mft (raw, json)
Hash identifier: q38jhCePEQhHsQiffFkTXbLGoYrdEJxQ0mrYdwyvB8U=
Subject key identifier: 2C:0E:CE:A2:84:0F:1A:2E:F8:92:7F:41:41:26:AD:65:43:36:3B:8B
Authority key identifier: 6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02
Certificate issuer: /CN=A9186392/serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002
Certificate serial: 0256
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
Manifest number: 024E
Signing time: Thu 21 May 2026 02:28:18 +0000
Manifest this update: Thu 21 May 2026 02:28:18 +0000
Manifest next update: Thu 28 May 2026 02:28:18 +0000
Files and hashes: 1: bWlDJ6eLD158LQx0Y3dIHe3doAI.crl (hash: iqBpfqfvwxbVNlStI96Jts65ZK96r7jzEooX+p+8s8E=)
2: 3CF4087AD90611ED890F5D5FC4F9AE02.roa (hash: 4ZmDz0huIaWm/DTwuUb93xnXK/d7kmZ8GktldPFPCz8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl
rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598 (0x256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186392, serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002
Validity
Not Before: May 21 02:28:18 2026 GMT
Not After : May 28 02:28:18 2026 GMT
Subject: CN=6a0e6dc2-480e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:1f:4c:a8:06:e0:67:4b:79:0d:84:2e:c3:
70:77:dc:ef:66:43:05:3c:bc:5b:e9:7e:45:ce:1e:
d4:5d:1d:1a:07:50:bb:9d:0a:3d:f0:e6:60:07:5f:
8a:00:0a:e2:91:95:0e:a0:a3:df:6c:35:65:74:49:
4e:3b:c8:da:0e:98:9b:1e:2e:fc:8a:15:0a:11:a4:
36:82:97:7c:31:e8:d3:64:87:20:e3:f6:ea:42:07:
dc:ed:28:51:83:81:e1:40:f9:ef:2f:f8:f1:d3:c6:
b7:da:f4:9e:03:76:3a:30:45:a9:be:74:80:47:2d:
9c:33:63:c8:10:2c:e7:a4:d6:ef:9d:aa:4b:91:86:
0c:c9:1a:6a:b3:c0:a1:b4:3c:55:f5:59:ae:01:d3:
5a:99:f3:9e:36:9d:2b:6f:41:92:36:59:92:90:db:
2b:90:3a:ae:95:8c:83:2c:6a:6d:b2:21:4a:63:a5:
76:f0:9b:fe:7f:da:7c:48:34:12:9f:67:59:db:61:
2c:5b:30:60:23:ee:87:f9:2d:be:32:08:0c:a9:98:
fb:c5:98:f8:44:80:fe:05:c5:c6:a9:4d:79:f0:b1:
20:9c:f6:35:69:5b:05:08:f2:34:91:70:af:22:ee:
12:7c:6a:79:56:22:b4:c0:05:89:3a:81:e2:b9:b5:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0E:CE:A2:84:0F:1A:2E:F8:92:7F:41:41:26:AD:65:43:36:3B:8B
X509v3 Authority Key Identifier:
keyid:6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:70:18:3f:3a:ef:ab:ec:3c:b0:5d:19:53:2d:52:17:cb:4e:
f0:96:66:4e:e5:59:41:ab:40:9d:83:46:33:e8:ee:3f:68:7a:
80:e4:e3:14:99:c3:cc:50:8b:6c:7c:4b:4a:ea:1d:d4:69:dd:
ee:23:c0:1b:a2:7f:bd:ad:f2:5f:e0:33:28:80:0f:83:02:89:
d4:2d:6f:7e:57:97:d1:38:25:ba:67:04:ff:48:28:98:60:64:
6a:26:42:7c:3b:6c:81:ad:b2:d0:63:46:50:91:1d:71:1d:0e:
05:b9:96:b4:b5:bd:24:4f:d2:58:32:cd:8b:bb:c7:ce:da:a7:
1f:47:c0:3c:36:4e:f5:d4:f2:91:c1:4f:3f:76:0a:74:a9:df:
2f:34:94:a7:b2:18:f5:e3:32:c1:ba:e2:ac:fa:6c:44:eb:12:
ac:d7:95:93:ae:59:ff:f1:2d:69:b9:b1:45:d6:33:e7:eb:4d:
6d:7a:33:56:e2:a8:c2:aa:64:e9:5d:18:30:b1:fa:6b:cf:fc:
4c:2f:fc:34:48:fb:d1:81:c1:ca:25:64:67:20:e8:4a:9a:f8:
60:de:8b:a5:9c:4a:03:d2:e5:9c:02:ce:bc:85:73:80:d8:84:
a5:57:3b:2f:21:24:8b:ac:2e:09:89:3f:b1:b9:06:2a:e3:3f:
c6:44:b8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:30:24 2026 by rpki-client