
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
File: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft (raw, json)
Hash identifier: 8095QY9kjRTSnQSO+48mGziJQoqktbrZZFJOcB7gEnA=
Subject key identifier: EB:AC:3B:6F:18:32:14:5C:BF:EA:21:E6:7B:23:87:D0:CE:5D:D9:B3
Authority key identifier: 6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB
Certificate issuer: /CN=A9196172/serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
Certificate serial: 11DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
Manifest number: 11C8
Signing time: Sat 04 Apr 2026 17:04:02 +0000
Manifest this update: Sat 04 Apr 2026 17:04:01 +0000
Manifest next update: Sat 11 Apr 2026 17:04:01 +0000
Files and hashes: 1: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl (hash: yrmYjWbZVErjJ6D1Y+WrtheYSV+3rnL5D4wkCZoejqs=)
2: 2CE73CF20F1D11E991F4271EC4F9AE02.roa (hash: dwjkn2DW2HgGCHSm1qCTooFpBKfe2SamOh5enGZ3aMA=)
3: 2D9B5B380F1D11E991F4271EC4F9AE02.roa (hash: l9qxQIDYZFB8lqVkzL19z7LMxH3Tman8VfcseXtGTGQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl
rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4574 (0x11de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196172, serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB
Validity
Not Before: Apr 4 17:04:01 2026 GMT
Not After : Apr 11 17:04:01 2026 GMT
Subject: CN=69d14482-47a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:84:b9:41:ea:8f:94:d0:97:b7:19:69:3b:
13:e6:ae:61:f6:df:d7:81:0e:cc:b7:4a:d7:70:de:
9e:60:26:a5:94:eb:dc:78:7a:fe:d4:26:57:12:ff:
47:75:26:a8:4c:69:f1:6d:30:55:c9:d0:79:ba:2a:
09:35:8f:05:b2:ce:41:94:45:09:50:6a:d7:02:97:
25:6f:64:df:68:16:4d:b6:68:f8:ef:22:26:d7:1c:
44:93:87:1d:b9:7b:24:54:a3:ac:bd:51:18:9b:08:
35:cf:9c:b1:06:d4:29:64:b0:ab:c1:58:85:4a:b2:
e4:35:34:f1:47:dd:93:ac:e9:e1:79:b0:81:2f:42:
b5:46:80:c3:6e:04:c7:aa:cf:b3:1c:2b:cc:40:6b:
d8:0e:45:4c:c2:31:10:62:78:6d:ef:8b:fd:ba:f2:
7e:77:7d:3c:0b:fb:60:1d:87:97:ca:60:5a:71:14:
e4:d1:a3:d9:48:55:3f:86:b4:3e:25:c5:f9:81:b1:
6c:21:c8:56:15:97:7c:fd:e2:6c:b7:8a:53:96:92:
fa:78:90:92:3d:5e:84:10:ae:a1:1f:9d:9c:92:89:
a2:ef:8a:fd:23:e4:b4:5d:93:73:a4:4e:ef:44:d9:
d6:e5:4b:19:90:68:5c:aa:7b:42:6e:42:40:b0:d6:
56:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AC:3B:6F:18:32:14:5C:BF:EA:21:E6:7B:23:87:D0:CE:5D:D9:B3
X509v3 Authority Key Identifier:
keyid:6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ce:41:91:ca:02:1f:a6:5e:35:f6:6f:9e:c7:59:81:6f:47:
8e:c7:75:d5:97:ac:24:c4:d7:8e:1e:3b:be:98:6c:fc:28:da:
a7:ed:53:27:9b:fd:c2:5c:e1:fa:d8:49:ee:57:af:d9:bd:3d:
36:73:dd:7f:12:b5:a6:68:21:e1:0e:cc:83:b7:e4:66:70:49:
cd:0f:71:f8:19:69:23:ee:de:7b:1c:df:bd:a9:db:8e:7b:4f:
1c:47:06:bb:48:b9:3c:24:50:c7:63:ba:18:9c:d1:9b:44:20:
8c:45:aa:7d:1d:3f:9f:67:19:a0:ef:3c:e1:fe:fe:04:fb:26:
c8:e2:78:d0:38:68:29:10:c4:46:a6:a6:22:c7:9e:ab:16:9e:
30:5a:30:b8:26:da:d4:4a:fd:86:08:e6:f4:95:06:6c:34:83:
12:ac:b9:87:3b:18:44:bf:ec:3c:af:ed:97:7a:72:f4:44:46:
d8:ca:a6:96:d6:3d:fc:11:46:47:d1:21:b6:13:35:f2:c2:be:
7c:80:8a:72:b4:4a:72:ba:e1:70:f1:82:f8:93:b0:ef:77:24:
33:59:3d:74:cd:aa:f7:d8:bc:5a:00:8f:64:45:e9:81:08:46:
34:65:2b:a2:19:ce:7f:0f:83:04:2b:3b:85:03:34:a4:fd:3c:
09:57:b9:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTYxNzIxMTAvBgNVBAUTKDZDM0E3RTAyQUNCQjczQTY2MzVCREFGRTAyMkQ3ODVE
MDBDNDQ3REIwHhcNMjYwNDA0MTcwNDAxWhcNMjYwNDExMTcwNDAxWjAYMRYwFAYD
VQQDEw02OWQxNDQ4Mi00N2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtW+EuUHqj5TQl7cZaTsT5q5h9t/XgQ7Mt0rXcN6eYCallOvceHr+1CZXEv9H
dSaoTGnxbTBVydB5uioJNY8Fss5BlEUJUGrXApclb2TfaBZNtmj47yIm1xxEk4cd
uXskVKOsvVEYmwg1z5yxBtQpZLCrwViFSrLkNTTxR92TrOnhebCBL0K1RoDDbgTH
qs+zHCvMQGvYDkVMwjEQYnht74v9uvJ+d308C/tgHYeXymBacRTk0aPZSFU/hrQ+
JcX5gbFsIchWFZd8/eJst4pTlpL6eJCSPV6EEK6hH52ckomi74r9I+S0XZNzpE7v
RNnW5UsZkGhcqntCbkJAsNZWswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOusO28Y
MhRcv+oh5nsjh9DOXdmzMB8GA1UdIwQYMBaAFGw6fgKsu3OmY1va/gIteF0AxEfb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjE3Mi9FODY3Q0IxMDBG
MUIxMUU5QTVEQkRCMUJDNEY5QUUwMi9iRHAtQXF5N2M2WmpXOXItQWkxNFhRREVS
OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JEcC1BcXk3YzZaalc5ci1BaTE0WFFERVI5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NjE3Mi9FODY3Q0IxMDBGMUIxMUU5QTVEQkRCMUJDNEY5QUUwMi9iRHAtQXF5N2M2
WmpXOXItQWkxNFhRREVSOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoc5BkcoCH6ZeNfZvnsdZgW9Hjsd11ZesJMTXjh47vphs/Cjap+1TJ5v9wlzh
+thJ7lev2b09NnPdfxK1pmgh4Q7Mg7fkZnBJzQ9x+BlpI+7eexzfvanbjntPHEcG
u0i5PCRQx2O6GJzRm0QgjEWqfR0/n2cZoO884f7+BPsmyOJ40DhoKRDERqamIsee
qxaeMFowuCba1Er9hgjm9JUGbDSDEqy5hzsYRL/sPK/tl3py9ERG2MqmltY9/BFG
R9EhthM18sK+fICKcrRKcrrhcPGC+JOw73ckM1k9dM2q99i8WgCPZEXpgQhGNGUr
ohnOfw+DBCs7hQM0pP08CVe5+A==
-----END CERTIFICATE-----
Generated at Mon Apr 6 11:34:52 2026 by rpki-client