
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
File: bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft (raw, json)
Hash identifier: HGD57h7Bn2oiMr3va0vUAqP8miRwyPq8UVBmH9t1qL8=
Subject key identifier: C0:E9:DA:4E:12:B0:74:AD:CF:D3:63:99:2E:AD:76:EB:9E:B9:C8:52
Authority key identifier: 6C:22:97:F8:2E:21:83:74:94:13:92:65:2C:9C:8B:30:55:C8:63:A2
Certificate issuer: /CN=A912781D/serialNumber=6C2297F82E218374941392652C9C8B3055C863A2
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
Manifest number: BA
Signing time: Sat 03 Oct 2026 07:37:25 +0000
Manifest this update: Sat 03 Oct 2026 07:37:24 +0000
Manifest next update: Sat 10 Oct 2026 07:37:24 +0000
Files and hashes: 1: bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl (hash: Rwu+0qymDgYz2DKEp41M9XmxHfiCbwjkaJW+RGbU1hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl
rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:37:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912781D, serialNumber=6C2297F82E218374941392652C9C8B3055C863A2
Validity
Not Before: Oct 3 07:37:24 2026 GMT
Not After : Oct 10 07:37:24 2026 GMT
Subject: CN=6ac0b0b5-e40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:ec:f7:7e:55:13:42:d1:e9:b1:f2:c5:1a:
38:b4:af:c0:cb:cb:c7:ee:5d:0f:64:a7:66:8b:7b:
a2:ba:89:8c:39:ed:e9:a4:72:c0:f3:c6:45:52:e7:
de:20:e9:bf:a6:60:f4:a5:33:ff:f1:68:9c:92:fd:
b8:98:c8:b4:ec:6e:95:78:96:7a:ff:e2:9e:67:5f:
b3:1b:ca:28:2e:c0:04:05:37:98:c6:af:1f:68:f6:
d1:50:13:55:39:7b:24:df:25:75:d0:6e:0d:4a:2c:
64:36:fb:cc:ef:5e:c8:39:c7:e6:99:66:18:40:99:
bf:0f:15:f5:5d:80:3f:91:d3:e3:13:e1:f4:f4:f4:
8f:d1:d7:ea:20:83:7a:9a:ee:bb:a6:c8:85:ab:6e:
ee:23:1c:e2:a7:fc:2a:56:57:f4:13:50:3c:a4:62:
08:a9:da:94:0c:f8:20:7d:0d:88:39:48:21:37:0c:
39:08:cc:f8:da:10:54:f3:b4:04:4c:3a:69:39:57:
9d:38:10:69:89:19:84:b0:61:af:59:cb:34:5b:5e:
6c:05:3c:4b:5b:f8:8d:d6:fa:6d:40:c2:10:5a:41:
41:94:93:c3:9d:20:5d:6f:4a:98:eb:4d:6b:21:87:
7f:62:4d:7b:57:1b:a7:c7:f4:21:d4:ce:d9:9c:3a:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E9:DA:4E:12:B0:74:AD:CF:D3:63:99:2E:AD:76:EB:9E:B9:C8:52
X509v3 Authority Key Identifier:
keyid:6C:22:97:F8:2E:21:83:74:94:13:92:65:2C:9C:8B:30:55:C8:63:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:92:d9:c5:e0:b8:12:61:69:6e:13:7a:56:37:86:73:0b:92:
79:18:9b:9d:7e:75:19:50:45:d1:51:69:8d:43:23:e6:57:cf:
86:7d:52:e2:55:4b:52:d6:e2:fb:32:7f:8e:ce:4a:2f:42:a3:
e4:f1:a7:cd:dc:4e:c3:fb:bd:57:c2:d6:2e:68:26:1b:e8:e8:
42:5c:2c:50:8e:f9:28:76:b9:12:85:02:f7:96:06:e1:1d:63:
0a:f5:22:0a:e2:19:89:6e:68:51:b3:54:b6:e5:7e:14:6f:ef:
42:1f:09:ad:e5:b8:32:c5:9f:44:7e:2e:58:97:74:27:a6:14:
e1:84:c0:d6:af:cd:fb:67:e7:b7:02:00:f1:98:98:83:75:a0:
1b:8a:cc:4e:bb:64:79:6d:ae:38:be:7b:ec:11:0f:08:40:f0:
b7:65:f4:56:bf:af:07:e2:22:1b:73:d9:4a:24:82:65:7f:15:
4e:73:be:05:af:67:2e:a5:db:1a:fa:38:3a:0e:2c:ea:a5:b9:
27:20:b7:39:23:74:0b:6d:72:c5:e9:f5:3b:a8:ae:c2:0c:b5:
02:1f:71:ff:b9:22:2a:c4:07:d1:56:d3:a2:d1:44:35:5b:8e:
46:2d:01:d1:a8:d1:e7:21:8f:fa:8c:65:10:b6:17:40:d2:fd:
3e:59:21:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:04:11 2026 by rpki-client