
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft
File: Bst2YhlvZE7eydz72HmbjHPjlwk.mft (raw, json)
Hash identifier: rSjSWm0yMbm7eLKUr0j8IEXbrmDbRWUvibfFAXJhEzI=
Subject key identifier: 9B:AE:2D:8A:DE:03:C6:E9:F6:70:63:B6:09:C1:AA:00:56:06:5D:DF
Authority key identifier: 06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09
Certificate issuer: /CN=A9127C93/serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709
Certificate serial: 02F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft
Manifest number: 02E6
Signing time: Wed 07 Oct 2026 01:26:20 +0000
Manifest this update: Wed 07 Oct 2026 01:26:19 +0000
Manifest next update: Wed 14 Oct 2026 01:26:19 +0000
Files and hashes: 1: Bst2YhlvZE7eydz72HmbjHPjlwk.crl (hash: fd/h/5CAQVGaLI6v5sfyLJeoqTv/X4JoHhTeKlOvbiY=)
2: 2965791E5F4011ED9361C246C4F9AE02.roa (hash: crADnnspzyglWavHLC4zFe+KwWuVQZ1sRGjDTPv5Jv8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl
rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:26:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 752 (0x2f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127C93, serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709
Validity
Not Before: Oct 7 01:26:19 2026 GMT
Not After : Oct 14 01:26:19 2026 GMT
Subject: CN=6ac59fbc-f044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:50:d7:35:ec:43:6b:99:92:0a:b0:7b:64:
57:0c:34:f5:c7:ea:50:8f:0c:a3:54:2d:cc:75:46:
90:a6:68:dc:ad:b3:e4:83:4c:c7:25:25:5f:bc:0f:
f6:0d:a0:80:43:b9:c6:93:67:28:f6:e9:41:7a:29:
0b:be:e0:9d:0f:fc:50:d5:8c:82:09:8f:5e:36:33:
14:0c:6f:6d:04:5a:e2:bf:66:94:01:bb:51:dd:ef:
91:40:c0:3a:35:a9:e8:c8:c0:45:94:3c:d2:54:de:
59:d4:92:2a:3d:17:cb:f2:09:83:19:5c:c7:61:76:
ca:2d:4c:ea:88:7e:83:23:cf:07:78:8e:52:19:33:
66:3e:26:51:72:38:96:10:88:57:51:8b:46:3a:23:
08:e1:39:81:f0:80:a7:95:5d:3b:1c:af:d7:51:bb:
18:1f:c6:e0:4b:7b:f8:b8:49:20:e3:b7:d1:77:28:
25:da:f6:ce:56:ea:ea:41:55:7f:f3:6a:4e:bd:41:
55:11:8c:64:f8:d3:02:07:b5:72:8a:b2:ec:8e:23:
25:bf:51:b0:5a:52:99:8b:fe:bd:7e:af:f1:87:66:
5d:b0:4a:06:d0:0a:2e:48:91:15:3e:31:14:64:05:
4d:c3:00:5b:a3:14:a7:6e:c0:f4:f1:8e:fb:c1:36:
20:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AE:2D:8A:DE:03:C6:E9:F6:70:63:B6:09:C1:AA:00:56:06:5D:DF
X509v3 Authority Key Identifier:
keyid:06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:66:cd:b0:47:a6:5b:17:20:53:ef:c3:6d:8e:c4:97:54:16:
1b:c9:1b:50:08:76:98:ab:03:5f:cb:99:9d:4b:f8:3f:ff:80:
10:5f:43:d3:f0:cc:31:4f:3f:a4:bf:4d:db:a0:43:48:b2:58:
f5:0f:1c:ff:ce:e5:c7:b4:43:02:ed:29:0d:fd:4e:eb:62:a7:
1d:77:dc:81:77:a8:8f:14:55:b8:6a:1d:55:bd:20:dd:f2:1c:
e9:ba:11:a7:bc:d6:59:dd:0e:c8:ce:b7:68:ae:87:11:a0:9c:
81:73:3f:70:8b:d0:d8:9f:4f:e0:1c:72:60:11:87:22:41:7c:
80:05:0c:32:c2:3c:eb:24:20:c5:38:8c:97:71:fc:b0:61:ec:
54:1c:1e:c5:58:b1:62:ed:88:eb:29:27:02:da:cb:83:3f:ac:
9d:18:b3:83:9c:19:43:f2:42:87:4f:8a:ca:74:be:5b:13:70:
99:e1:f8:2f:fb:58:56:57:5b:d4:45:85:7f:5e:05:f1:64:ae:
ec:af:61:84:f1:dd:41:e4:b3:a1:60:a7:1c:99:41:e0:f2:31:
9c:f1:e8:36:e6:dc:66:0d:30:9a:05:28:f1:fa:8f:29:0f:bd:
7f:4e:95:18:6c:be:3a:42:2d:bd:30:47:62:fb:e5:1f:92:1d:
53:b9:d8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:03:39 2026 by rpki-client