
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
File: bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft (raw, json)
Hash identifier: /uHCHKgJyGeR5h4Oo4nVZV97YU9RA9uCGFbF8qaqW1U=
Subject key identifier: 8B:23:CC:D2:26:34:E9:6D:1B:BA:13:07:2B:F2:85:D6:5B:44:4C:BE
Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4
Certificate issuer: /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4
Certificate serial: 02EE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
Manifest number: 02E7
Signing time: Fri 17 Apr 2026 01:12:55 +0000
Manifest this update: Fri 17 Apr 2026 01:12:54 +0000
Manifest next update: Fri 24 Apr 2026 01:12:54 +0000
Files and hashes: 1: bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl (hash: mVa/eNdfITXJDjaVPlcFaJOSMU2+AvRpkEmDGhcEKSk=)
2: FB1F8158242A11ED9547B486C4F9AE02.roa (hash: qOTgX26Zanjyv6Lj/0iXY/YLtNoeVOf7TQ8Rw4nq2og=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl
rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 750 (0x2ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C95AA, serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4
Validity
Not Before: Apr 17 01:12:54 2026 GMT
Not After : Apr 24 01:12:54 2026 GMT
Subject: CN=69e18917-d83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:69:1a:d8:05:7d:34:95:72:7d:ee:c9:8e:
f5:b8:1b:91:af:f3:6e:b1:fc:17:1c:9e:5e:53:d9:
2a:7d:be:98:74:16:6e:1a:7a:c1:70:bf:73:d5:7f:
be:c2:09:85:58:22:f0:eb:6f:88:e6:76:49:53:5c:
ce:ff:db:5c:ed:f4:e1:3c:b3:14:10:e9:f5:2a:01:
32:06:4a:fa:50:8e:1c:e0:8a:5d:2d:ea:57:18:b5:
86:4c:c4:51:01:c0:34:a5:de:f1:5a:ff:56:41:93:
27:bf:cf:78:2a:6b:f8:72:3d:4c:0d:05:bb:ff:1c:
1a:bc:19:d7:bf:36:29:4f:3f:27:d5:35:22:87:38:
5f:b6:29:94:17:c0:7f:bb:ae:0a:d2:c7:ef:de:dc:
df:9e:e3:ba:f8:35:29:70:3d:19:b9:f7:bb:15:fa:
19:c6:55:1a:b8:b4:5f:7a:a7:b0:e0:15:3e:58:9d:
90:84:b2:23:e6:f7:3b:5e:f6:a4:16:3e:8e:9e:c9:
a1:2d:14:1f:04:a2:c6:d2:b2:42:9b:ab:78:ae:2f:
06:7b:f4:1d:dd:01:6c:b7:c8:48:25:6c:c6:62:59:
1f:bc:df:4d:24:89:a5:db:a4:2e:04:f7:c0:54:5d:
79:7e:86:a1:73:a5:c8:8d:f7:37:1e:1b:5f:27:d2:
4e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:23:CC:D2:26:34:E9:6D:1B:BA:13:07:2B:F2:85:D6:5B:44:4C:BE
X509v3 Authority Key Identifier:
keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:1f:ea:bb:11:73:8b:27:a1:1d:2b:e5:a9:c4:5a:ba:c9:6c:
fd:f8:a9:0c:f5:1b:73:2c:da:5a:b1:fc:37:e7:70:6b:7e:c4:
cb:dd:26:62:b2:1e:78:7d:63:74:f9:d1:37:13:fc:84:2e:eb:
f5:09:eb:6a:19:91:c9:aa:6b:58:00:f0:c6:3f:a3:ac:da:ec:
16:29:40:63:97:fa:85:54:8b:91:1d:08:e5:a2:1d:87:d0:d4:
9b:7a:bd:c1:4b:94:06:7e:bd:04:c5:cd:7e:f0:ab:ce:da:6b:
59:8f:ab:a6:ac:38:14:75:5e:a8:82:5c:69:f8:30:57:4c:82:
95:c4:21:43:cc:74:26:15:d9:ea:b4:12:f7:80:a7:c8:ef:31:
80:ff:a9:dc:65:48:a5:89:71:42:e9:b0:e1:a4:44:7d:f3:e2:
5b:7e:4e:c7:51:0c:df:e9:96:00:33:d6:9c:b5:75:05:e6:8c:
42:f9:e3:f0:ed:93:e2:a5:83:f6:0a:18:5f:f0:09:0e:ee:c7:
cd:ff:9d:e8:58:ef:d4:83:8c:9d:1b:91:75:ee:4d:b5:0d:c4:
2a:5c:f1:4a:25:e0:54:7e:2f:e3:1e:7e:9d:7d:da:03:5c:6f:
0e:02:7e:86:5a:e4:74:e4:a3:84:9f:e4:36:c2:3d:f9:2d:eb:
de:3f:08:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:08:23 2026 by rpki-client