
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
File: BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft (raw, json)
Hash identifier: HfdSZc3jeyA/JVypKROwEZHptuw+HXtyGtRI7UrWKZ8=
Subject key identifier: EA:69:0A:53:C6:2E:23:2B:AF:1F:0F:E0:0D:44:DB:50:12:79:4F:E3
Authority key identifier: 04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9
Certificate issuer: /CN=A9120BC1/serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9
Certificate serial: D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
Manifest number: CC
Signing time: Mon 05 Oct 2026 07:09:33 +0000
Manifest this update: Mon 05 Oct 2026 07:09:32 +0000
Manifest next update: Mon 12 Oct 2026 07:09:32 +0000
Files and hashes: 1: BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl (hash: CAaRXQQG38WC0mesJnprY/ZR71xKu216HzNMJ7mvjlE=)
2: 309260868C7311F0A82E0E57C4F9AE02.roa (hash: DfBJQ3k9mLnvtH5/59OE4Ql1Nm5pTBAatkbZQBsoojY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl
rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 07:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120BC1, serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9
Validity
Not Before: Oct 5 07:09:32 2026 GMT
Not After : Oct 12 07:09:32 2026 GMT
Subject: CN=6ac34d2d-90f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:87:63:a7:b7:7d:75:9f:39:7b:ca:22:a0:e1:
6e:b3:ec:83:71:64:dc:8d:da:8d:1c:7c:e1:42:8a:
b0:aa:08:42:1a:9f:b1:73:4a:15:e9:46:a2:b1:57:
c2:36:6d:d6:78:3a:3b:d0:68:7b:5b:13:2b:f7:ab:
e2:23:8f:dd:00:bd:a5:f6:f0:af:1c:82:c6:4b:60:
18:f5:66:5d:47:cf:66:05:fb:28:1c:f0:04:2c:31:
8d:af:48:a9:c0:42:46:48:af:ca:a4:04:ea:a3:12:
88:42:8c:a2:53:8f:d5:91:9d:74:09:5e:a3:f9:3c:
36:ef:ee:d6:a6:1c:30:1a:82:a8:88:5b:9b:7f:b5:
92:05:d6:89:a5:c6:ed:bc:fe:e2:65:ba:9a:fb:db:
e5:75:89:3b:30:c4:34:e0:9e:21:d0:6d:5b:34:8e:
d6:b8:f8:5d:41:08:52:49:6b:27:dd:20:74:36:58:
a0:4e:4f:fa:14:a1:ca:b3:f1:09:a9:60:a7:0d:a0:
23:0f:9e:64:fb:7f:3f:17:7f:5c:70:b5:06:f4:88:
7d:ab:2e:ff:ae:ba:c3:14:9f:48:ca:8d:3d:cd:5f:
e0:ef:1b:27:95:e1:24:3c:24:c7:f5:18:bf:2b:15:
fd:d1:b2:d4:67:6d:99:d5:c3:20:47:20:98:8d:d1:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:69:0A:53:C6:2E:23:2B:AF:1F:0F:E0:0D:44:DB:50:12:79:4F:E3
X509v3 Authority Key Identifier:
keyid:04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:40:2d:ef:c2:25:28:b2:68:a8:3f:6e:c2:66:ec:57:41:ec:
4d:19:58:59:c7:ff:95:cf:fa:6b:a9:9f:6a:67:be:31:b8:b8:
c4:ef:48:a6:c9:a9:75:6c:02:f8:95:28:f0:ed:e6:6a:c8:34:
8f:4e:5e:c4:c3:9e:bf:a9:bb:f0:a2:73:6a:68:d7:8a:ef:f9:
dd:56:8f:f1:5c:d4:de:e9:ca:4d:12:ad:e5:0f:27:d1:9d:c2:
29:b4:8e:31:5f:9a:b5:ad:9e:c4:cf:ff:a4:c7:b9:27:34:d5:
57:e3:c0:c5:3a:f6:03:bc:21:71:ac:97:d4:90:78:bc:0b:04:
95:ce:9d:ba:32:9a:88:8e:07:76:f6:cb:be:0c:28:08:64:e6:
42:51:41:c6:b0:8e:d7:c4:bd:5c:c7:21:64:8e:9f:91:7f:46:
60:d7:d4:13:34:ab:1d:eb:f8:ed:a2:9f:d6:ff:ff:2b:22:51:
6e:db:8a:5a:90:6d:d9:08:af:4f:11:0b:30:a9:05:a1:1d:24:
89:23:e4:3f:28:b2:4c:cc:d4:4a:fc:ee:d0:21:24:e0:dd:d3:
65:01:ea:e2:2d:3b:35:da:e1:b6:51:63:d3:c1:41:54:09:9b:
6f:c1:d5:18:4f:95:c9:56:aa:70:2c:ee:0b:5b:c4:d6:df:c9:
3d:ce:8a:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBCQzExMTAvBgNVBAUTKDA0QThGMjhGNTI3RTE4OTE2N0FDQzkwMzBDQkVEQUQ4
QTlDNDE3QjkwHhcNMjYxMDA1MDcwOTMyWhcNMjYxMDEyMDcwOTMyWjAYMRYwFAYD
VQQDEw02YWMzNGQyZC05MGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoIdjp7d9dZ85e8oioOFus+yDcWTcjdqNHHzhQoqwqghCGp+xc0oV6UaisVfC
Nm3WeDo70Gh7WxMr96viI4/dAL2l9vCvHILGS2AY9WZdR89mBfsoHPAELDGNr0ip
wEJGSK/KpATqoxKIQoyiU4/VkZ10CV6j+Tw27+7WphwwGoKoiFubf7WSBdaJpcbt
vP7iZbqa+9vldYk7MMQ04J4h0G1bNI7WuPhdQQhSSWsn3SB0NligTk/6FKHKs/EJ
qWCnDaAjD55k+38/F39ccLUG9Ih9qy7/rrrDFJ9Iyo09zV/g7xsnleEkPCTH9Ri/
KxX90bLUZ22Z1cMgRyCYjdH7fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOppClPG
LiMrrx8P4A1E21ASeU/jMB8GA1UdIwQYMBaAFASo8o9SfhiRZ6zJAwy+2tipxBe5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEJDMS9EQUM2MDM4ODhD
NzIxMUYwQTJCMEFFNTZDNEY5QUUwMi9CS2p5ajFKLUdKRm5yTWtEREw3YTJLbkVG
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JLanlqMUotR0pGbnJNa0RETDdhMktuRUY3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MEJDMS9EQUM2MDM4ODhDNzIxMUYwQTJCMEFFNTZDNEY5QUUwMi9CS2p5ajFKLUdK
Rm5yTWtEREw3YTJLbkVGN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhEAt78IlKLJoqD9uwmbsV0HsTRlYWcf/lc/6a6mfame+Mbi4xO9IpsmpdWwC
+JUo8O3masg0j05exMOev6m78KJzamjXiu/53VaP8VzU3unKTRKt5Q8n0Z3CKbSO
MV+ata2exM//pMe5JzTVV+PAxTr2A7whcayX1JB4vAsElc6dujKaiI4HdvbLvgwo
CGTmQlFBxrCO18S9XMchZI6fkX9GYNfUEzSrHev47aKf1v//KyJRbtuKWpBt2Qiv
TxELMKkFoR0kiSPkPyiyTMzUSvzu0CEk4N3TZQHq4i07NdrhtlFj08FBVAmbb8HV
GE+VyVaqcCzuC1vE1t/JPc6KXQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 06:10:44 2026 by rpki-client