
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F03D/007E2BF8A74511F1BFB1A9176E11F970/bM962T-4K_TWlcn087pVvbvtUA8.mft
File: bM962T-4K_TWlcn087pVvbvtUA8.mft (raw, json)
Hash identifier: EaZYAjKBl8vU48rg/J9ikSPbbwzQHWJD5qEtLiS9rD8=
Subject key identifier: 9A:13:DC:46:39:CB:98:92:3A:34:3E:01:95:67:CE:B6:20:91:A0:61
Authority key identifier: 6C:CF:7A:D9:3F:B8:2B:F4:D6:95:C9:F4:F3:BA:55:BD:BB:ED:50:0F
Certificate issuer: /CN=A911F03D/serialNumber=6CCF7AD93FB82BF4D695C9F4F3BA55BDBBED500F
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bM962T-4K_TWlcn087pVvbvtUA8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F03D/007E2BF8A74511F1BFB1A9176E11F970/bM962T-4K_TWlcn087pVvbvtUA8.mft
Manifest number: 0F
Signing time: Sun 27 Sep 2026 09:43:57 +0000
Manifest this update: Sun 27 Sep 2026 09:43:56 +0000
Manifest next update: Sun 04 Oct 2026 09:43:56 +0000
Files and hashes: 1: bM962T-4K_TWlcn087pVvbvtUA8.crl (hash: KNHahQWQlwWNqxJ7RCYgTb8RFq6yisuvljaHSGsiDt4=)
2: A0481C92A74B11F1895225536F11F970.roa (hash: J6dIYlpx8CpbM84fJA4wqGY7/WUTAultaTUwAuCK+mI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F03D/007E2BF8A74511F1BFB1A9176E11F970/bM962T-4K_TWlcn087pVvbvtUA8.crl
rsync://rpki.apnic.net/member_repository/A911F03D/007E2BF8A74511F1BFB1A9176E11F970/bM962T-4K_TWlcn087pVvbvtUA8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bM962T-4K_TWlcn087pVvbvtUA8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 09:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F03D, serialNumber=6CCF7AD93FB82BF4D695C9F4F3BA55BDBBED500F
Validity
Not Before: Sep 27 09:43:56 2026 GMT
Not After : Oct 4 09:43:56 2026 GMT
Subject: CN=6ab8e55d-a731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:d6:e3:6f:a5:8f:17:1a:b1:ca:85:e7:78:
52:38:68:9d:94:a4:0b:71:06:38:64:e6:9b:97:fe:
3d:75:0d:a5:44:00:15:0f:8e:3b:23:fa:8f:2c:8c:
57:d3:b6:51:02:12:5a:eb:14:32:06:2d:c0:73:c8:
b2:8c:ff:b8:85:10:c9:f8:f8:ed:51:22:80:83:26:
8b:1e:c9:fe:0d:1f:5f:80:2b:d6:82:19:9b:63:84:
ff:a2:81:06:1e:e7:c3:ef:b7:c4:3b:23:27:98:3e:
97:c4:36:14:70:ba:78:ea:21:de:2b:a1:54:bf:18:
7b:c2:44:cc:46:a7:13:93:25:8d:e4:93:b5:ac:75:
0a:89:38:64:09:f9:16:ad:15:44:c8:38:ca:5a:95:
eb:1e:8d:2b:80:eb:fc:cc:f0:78:26:e2:ba:e8:b5:
42:73:c7:0c:1f:45:c3:b6:26:a2:5e:03:a9:5f:e2:
97:f9:7f:e4:5c:14:5f:59:c1:6f:7c:6e:37:4a:ae:
a8:37:f0:c4:e7:40:c1:3e:df:af:57:3b:ee:ad:91:
29:f4:20:64:51:56:03:e0:7c:ad:1c:b0:e6:73:80:
82:76:b7:f8:6a:f2:b8:09:e4:2d:73:15:26:8c:a6:
d2:b4:25:a1:10:8a:13:69:a2:c1:53:87:97:4a:0b:
2b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:13:DC:46:39:CB:98:92:3A:34:3E:01:95:67:CE:B6:20:91:A0:61
X509v3 Authority Key Identifier:
keyid:6C:CF:7A:D9:3F:B8:2B:F4:D6:95:C9:F4:F3:BA:55:BD:BB:ED:50:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F03D/007E2BF8A74511F1BFB1A9176E11F970/bM962T-4K_TWlcn087pVvbvtUA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bM962T-4K_TWlcn087pVvbvtUA8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F03D/007E2BF8A74511F1BFB1A9176E11F970/bM962T-4K_TWlcn087pVvbvtUA8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ee:ee:be:f6:6a:49:93:cb:49:e8:b9:84:f2:29:1b:e2:94:
00:03:32:c4:1d:5c:d8:0d:38:90:25:91:ea:cc:3c:ee:9a:66:
30:63:47:6e:5c:c1:88:eb:13:f5:21:60:b6:c1:36:bd:ef:36:
e6:96:c0:7e:d7:95:27:46:fb:eb:b2:42:a4:8c:44:a7:35:98:
a6:bb:14:b1:4d:c1:0a:22:ee:c9:2d:91:f0:81:e9:b5:db:b9:
c1:0d:59:07:99:fd:34:5d:7e:b4:0d:24:e2:0d:e2:49:ec:88:
b4:9e:33:cc:7c:40:59:85:c5:cd:f8:f2:05:b2:73:4d:c9:4b:
95:bc:60:55:4d:88:52:2b:3e:1d:5a:23:f4:da:71:f7:8b:a6:
ab:68:4a:8b:8b:b3:c1:e7:2d:5f:91:a0:2a:f1:67:89:28:62:
38:05:34:6a:01:48:cf:ab:ad:aa:e3:18:79:d9:ee:7d:b5:d1:
87:cf:a3:26:17:dd:37:8f:3c:cf:f0:22:89:7b:6f:11:6b:ca:
d3:6a:a1:1f:7f:1b:01:16:d1:df:aa:7e:3e:2a:0c:32:ea:ac:
a6:7b:b2:04:f5:a5:ba:4a:e8:eb:78:21:3b:e1:2a:e6:5a:37:
9d:a6:08:5b:a6:a2:c1:cc:54:c7:9b:0f:33:55:f3:2c:d0:19:
29:9a:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:31:45 2026 by rpki-client