
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
File: BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft (raw, json)
Hash identifier: 9s4IWpDGsyj6SEVCLuVDxIr7fqApMnANN5gEnCCqM2E=
Subject key identifier: 2B:25:A5:3E:A2:DB:B5:89:04:C4:C0:09:DD:E2:71:A1:2F:91:F3:24
Authority key identifier: 06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24
Certificate issuer: /CN=A9122905/serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324
Certificate serial: 02BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
Manifest number: 02B8
Signing time: Sun 05 Apr 2026 01:10:38 +0000
Manifest this update: Sun 05 Apr 2026 01:10:38 +0000
Manifest next update: Sun 12 Apr 2026 01:10:38 +0000
Files and hashes: 1: BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl (hash: aZ5GgqBTs6n/CgZivVZr/nqBXiYRALxmlPrzpHj1IEo=)
2: 8BFE9EA6335911EDBC60AC44C4F9AE02.roa (hash: gaiP1us9ZVKBdlJoHfbtQhGqWeKxEzvnmSCb9KMbw0c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl
rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702 (0x2be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122905, serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324
Validity
Not Before: Apr 5 01:10:38 2026 GMT
Not After : Apr 12 01:10:38 2026 GMT
Subject: CN=69d1b68e-4876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:0d:2d:2f:13:c5:e2:ec:47:09:da:dd:ff:
8e:f2:2c:44:82:5f:74:eb:45:b6:8f:a9:2e:de:f6:
1a:0b:5c:86:23:92:41:ff:76:07:5e:11:0f:c8:a6:
a4:e4:1c:0b:00:76:0b:fb:a5:fa:a9:10:01:72:05:
b3:1e:67:7a:a7:9d:36:07:85:40:57:b4:4b:9d:c5:
5e:0c:d4:12:15:91:12:0c:b5:b0:62:3d:e0:1b:14:
cf:4b:cd:1f:44:23:47:9b:53:79:02:3c:4e:04:ac:
04:84:93:5a:c9:a2:d9:c3:a5:dc:b2:ee:bf:7e:5b:
d9:a2:0b:96:df:9e:fa:3c:51:fd:83:c5:cc:4d:de:
ac:ae:56:5e:30:7a:b4:c6:23:13:d9:df:21:c3:09:
27:49:33:dd:a0:53:ea:cb:af:e2:4b:51:68:ac:2b:
27:7f:7b:c8:47:b9:53:10:95:ca:60:c7:a9:aa:ce:
61:d5:39:fd:e2:e3:44:dd:d4:b3:c7:5d:b2:49:ce:
22:57:00:ea:88:fc:d6:a2:94:ce:92:da:d3:51:21:
22:ec:6c:2f:e6:e5:8c:ca:ec:50:35:c0:01:e3:62:
fc:1d:8e:a9:c6:04:d4:5e:2c:da:16:24:d3:69:fb:
54:21:bb:96:d5:82:5d:0a:88:22:5f:8c:13:74:de:
9d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:25:A5:3E:A2:DB:B5:89:04:C4:C0:09:DD:E2:71:A1:2F:91:F3:24
X509v3 Authority Key Identifier:
keyid:06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:26:0b:ac:0e:98:95:72:0c:df:a2:2d:8d:4e:c0:db:fa:eb:
00:20:0d:e0:bb:c6:b8:cc:9c:54:f1:9d:89:07:d3:ba:51:6f:
d2:45:ce:7b:9d:6f:b3:28:8f:cf:79:ba:6a:58:87:3c:b4:4a:
af:8a:ac:9d:6a:8f:be:1b:6e:16:75:a1:35:5c:6c:48:1f:d7:
31:58:7b:f8:ca:1d:53:b6:f9:f2:77:80:db:90:0f:10:75:3b:
2f:a9:78:b6:87:5b:64:eb:67:63:c7:b5:0d:be:6b:62:f7:e2:
f3:f3:24:71:94:d9:a0:68:b7:4c:5a:41:33:e5:3b:bf:9d:07:
08:95:f8:13:39:0c:36:b4:d1:5b:95:04:cc:a5:d8:bc:27:33:
11:9e:0a:67:80:c6:8c:ec:02:c8:a5:d0:44:a3:ba:d7:f4:dd:
c4:70:68:8f:c1:a4:c5:95:fa:6c:5a:a5:6f:83:5f:bd:be:6c:
61:34:b9:c7:18:ef:9d:70:d5:97:9e:75:c4:56:92:2d:48:60:
ca:63:2d:96:38:39:c9:b1:3a:0c:f6:f8:56:07:44:a3:22:9f:
9e:ee:cd:e9:a3:fb:04:8e:b8:ec:f8:0d:c4:97:47:3e:09:4a:
01:5c:ce:79:f2:ad:40:74:e6:c7:63:9d:9e:b5:ff:70:68:14:
b3:c7:15:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:40:58 2026 by rpki-client