
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
File: BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft (raw, json)
Hash identifier: ICy+WVzTQdXoREf0/L3b1Ov6gl4mJGBp/07FdlEqZAw=
Subject key identifier: F5:B1:C0:03:93:4A:8F:A5:2E:56:2D:3E:AC:0D:10:3E:A3:4C:20:36
Authority key identifier: 04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9
Certificate issuer: /CN=A9120BC1/serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
Manifest number: 58
Signing time: Thu 19 Feb 2026 06:26:52 +0000
Manifest this update: Thu 19 Feb 2026 06:26:51 +0000
Manifest next update: Thu 26 Feb 2026 06:26:51 +0000
Files and hashes: 1: BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl (hash: UQKS+gIjzeYeq0o+xEupU33KbpsnndPNw7ALCFsR6c4=)
2: 309260868C7311F0A82E0E57C4F9AE02.roa (hash: pmJN4rlyAjyIEwtIxMwQqfFU7tME7Agin1X2d5LeW2c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl
rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120BC1, serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9
Validity
Not Before: Feb 19 06:26:51 2026 GMT
Not After : Feb 26 06:26:51 2026 GMT
Subject: CN=6996ad2c-e978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:39:63:a4:43:3e:8a:80:36:c8:1f:ad:57:
69:1c:e2:93:e4:56:6a:c8:9d:9b:bb:b7:5d:b1:14:
28:2d:56:6c:eb:99:c5:64:75:f3:fa:6b:23:63:30:
b9:96:d8:ff:e8:41:76:b3:07:82:99:ee:ee:1b:2c:
b7:b5:b7:75:f5:47:62:75:3e:47:bf:5e:a2:06:a6:
8e:41:94:59:5a:df:9f:59:c2:e9:db:f0:07:70:64:
0b:8c:da:7c:bb:c7:bd:12:46:1b:f9:50:b8:c7:ae:
fb:a0:42:1e:2b:9b:bf:97:b3:3f:1c:92:ca:da:0b:
5d:fc:bb:1d:5e:56:f9:37:52:bb:bb:ab:cb:4b:70:
96:ad:8a:40:b1:09:4a:91:22:4c:9c:9f:ce:a8:ba:
34:2f:2c:2d:d8:86:49:73:27:8d:1c:3f:22:26:59:
5e:22:ee:f6:59:21:89:16:0e:fc:9f:20:7c:1b:b4:
83:d9:32:53:88:f9:00:00:58:2e:0f:bd:94:d3:30:
4a:51:3b:f2:6d:8a:4c:32:d8:34:3a:d7:52:e1:2f:
42:47:4b:93:28:8e:1a:1c:71:ec:76:4e:ca:fc:58:
d3:30:e3:66:e5:16:be:f0:93:e6:f3:a4:6b:a3:94:
ba:1b:a5:f5:c7:6c:c4:b7:38:ff:45:e8:e1:73:9a:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B1:C0:03:93:4A:8F:A5:2E:56:2D:3E:AC:0D:10:3E:A3:4C:20:36
X509v3 Authority Key Identifier:
keyid:04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:10:23:bd:4f:52:36:f0:2e:49:4e:2d:80:37:1c:2e:a1:ca:
11:a2:28:17:63:50:ed:fa:b9:d3:9d:1a:38:86:90:ee:9e:0f:
65:66:e9:09:50:4d:34:fc:75:31:6a:c1:2f:d3:32:c1:cd:de:
ed:e5:dd:03:c3:9a:17:36:65:2a:d8:16:03:45:8f:df:c4:8a:
92:b5:46:ab:7e:b6:5e:bb:4e:6a:d4:04:0b:ad:69:e8:37:78:
68:69:96:87:cf:80:47:f3:08:d8:94:ea:9f:d6:e4:5a:e4:c9:
12:bd:3a:78:b7:b2:8c:d4:0f:7a:17:7d:69:3e:3d:ed:82:1f:
66:a3:1d:aa:62:ba:10:fe:71:01:d0:0f:e9:24:7e:7c:95:5e:
5c:89:8b:39:17:1f:7a:e2:6e:30:b1:8f:49:cd:21:01:29:83:
7b:33:50:5c:8a:d8:f1:8c:ab:31:9c:c1:30:4e:cf:6f:c8:cf:
36:7a:3e:f0:4a:ea:c2:3f:4c:d4:3b:80:43:f1:0f:ba:d4:c6:
44:08:2e:f1:02:0c:29:2a:96:69:a3:f7:29:b4:10:ac:f4:33:
80:4a:e0:39:31:ec:9b:9c:21:a9:f7:db:48:5d:03:46:62:3c:
4a:d0:cc:a0:4a:a3:34:cc:fa:b4:dd:a2:74:43:f8:7c:e6:aa:
95:8f:83:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:01:34 2026 by rpki-client