
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
File: BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft (raw, json)
Hash identifier: tzf8vjVAjidUAeb9Q8d9BNH7WOnILkodVDVwuEcx0vc=
Subject key identifier: E2:8D:18:1A:92:3C:58:23:2F:D1:9E:CB:2F:FF:13:84:17:3F:02:E9
Authority key identifier: 06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24
Certificate issuer: /CN=A9122905/serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324
Certificate serial: 0303
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
Manifest number: 02FD
Signing time: Wed 19 Aug 2026 01:32:20 +0000
Manifest this update: Wed 19 Aug 2026 01:32:19 +0000
Manifest next update: Wed 26 Aug 2026 01:32:19 +0000
Files and hashes: 1: BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl (hash: 54oyn/WpY4reGfVdEL0+x3hMEq5QMm2394xXbtEmx7M=)
2: 8BFE9EA6335911EDBC60AC44C4F9AE02.roa (hash: gaiP1us9ZVKBdlJoHfbtQhGqWeKxEzvnmSCb9KMbw0c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl
rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 771 (0x303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122905, serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324
Validity
Not Before: Aug 19 01:32:19 2026 GMT
Not After : Aug 26 01:32:19 2026 GMT
Subject: CN=6a8507a4-42a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d5:73:f6:22:dc:ab:81:d4:60:69:24:65:0c:
b5:76:84:e7:6e:43:0c:fa:04:51:39:34:51:0f:ed:
b1:cb:57:1b:57:fd:d4:3d:5e:f4:3a:a8:db:2e:56:
61:ab:9f:ba:37:8e:bb:dc:ad:77:3f:50:de:b9:26:
b2:85:db:ba:e6:82:19:cc:5b:95:ab:4e:6a:1b:56:
44:a4:a1:fd:ee:1e:bf:af:1e:6d:46:ff:14:00:1d:
64:02:01:c3:77:f7:c3:d1:58:f8:0d:1d:4e:c3:2b:
e7:69:72:5b:50:20:e8:93:8b:3c:f0:be:6e:c5:37:
89:fe:6f:aa:10:f2:97:67:61:43:29:94:80:dc:41:
16:01:34:44:f5:69:28:58:3d:6f:7c:9d:fa:b3:48:
1f:5f:42:22:d4:09:ca:f5:39:70:9e:dd:51:54:45:
c9:53:37:63:fd:b8:6a:72:dd:98:75:e7:98:cb:4f:
0d:7f:39:7d:b0:65:78:06:49:e7:5a:a0:2c:6e:eb:
9c:ee:57:c1:7e:d4:71:d5:9d:bc:b2:a8:8b:4c:2c:
7d:84:a5:ef:af:74:8c:80:5e:88:19:23:b5:ea:c6:
cc:dc:a8:4d:4c:1d:c4:70:cd:e6:fc:9e:cf:63:e8:
bf:17:0d:1c:a3:a7:73:34:0e:2e:08:3d:c9:68:03:
8c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8D:18:1A:92:3C:58:23:2F:D1:9E:CB:2F:FF:13:84:17:3F:02:E9
X509v3 Authority Key Identifier:
keyid:06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:1e:25:ac:bf:24:5d:4f:87:6e:49:10:b7:1b:1f:24:ce:20:
15:88:a7:4b:7b:9f:4f:24:cc:89:70:e5:6d:27:5a:6a:21:09:
64:a6:2a:16:21:6c:b7:e2:4f:87:d4:27:95:b1:3c:21:8a:89:
f9:28:74:57:a9:e9:08:e5:b1:b6:7a:01:62:59:84:b9:f4:2c:
f2:ea:42:e7:af:97:0c:52:d7:0f:bf:d8:1f:65:fe:04:16:17:
6a:15:42:ea:0c:68:a7:23:8e:d6:51:c1:e9:25:6b:bb:e5:1a:
06:80:5b:3e:31:1f:f1:6c:98:9e:0d:93:25:9f:d6:e4:9a:7c:
5c:e0:c9:00:9d:7a:87:cd:8d:f9:48:68:8d:14:05:c8:fe:58:
bb:3a:f9:8a:b0:b9:f4:cd:f5:4d:61:eb:bf:d6:3d:fa:d7:3c:
9c:29:32:3b:bf:6e:87:c1:5d:a2:a4:ef:02:13:96:7e:14:59:
e6:42:35:89:51:80:2e:56:03:16:72:6e:ea:8b:d9:8d:d6:3f:
b6:21:0a:7f:61:e0:0c:7b:90:b6:29:6a:6b:b1:ea:ca:3f:e4:
1c:94:fd:20:1b:54:36:31:d5:47:3e:2c:52:8e:a4:3e:a0:e8:
33:ae:ba:0b:80:1b:cc:78:6f:e3:5a:f1:49:0d:d8:bc:90:80:
83:6e:94:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:54 2026 by rpki-client