
$ rpki-client -vvf rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
File: bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft (raw, json)
Hash identifier: 5Nd7NlfanGqt8iEvcos/sMzncvsV0x9TKgd6XFKuyQ0=
Subject key identifier: 7B:7C:81:F4:F2:29:07:A9:5F:13:E1:C3:36:18:A9:B6:02:01:24:1D
Authority key identifier: 6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A
Certificate issuer: /CN=A912978E/serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A
Certificate serial: 0231
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
Manifest number: 0229
Signing time: Wed 19 Aug 2026 03:19:30 +0000
Manifest this update: Wed 19 Aug 2026 03:19:30 +0000
Manifest next update: Wed 26 Aug 2026 03:19:30 +0000
Files and hashes: 1: bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl (hash: AKv7yiz1iBajhDJA12hbwSWOnRqeTyLC4SbkBcfeoNo=)
2: 59923F2CA72011EEA63ABF4AC4F9AE02.roa (hash: jTw+k2qXsMBUja+xPqB6A7knrLM1Ewwr/1IeQgLz3tU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl
rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561 (0x231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912978E, serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A
Validity
Not Before: Aug 19 03:19:30 2026 GMT
Not After : Aug 26 03:19:30 2026 GMT
Subject: CN=6a8520c2-4118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:3f:4a:cb:8d:f1:aa:75:e4:f2:c1:19:c6:
d2:0a:82:11:fc:d7:aa:ed:fd:0d:79:c6:fd:ae:63:
b4:bf:f4:e4:04:5b:ca:a9:33:cc:47:21:27:ea:ce:
62:16:00:66:33:de:9b:5a:de:b1:2c:72:d0:2f:0b:
93:67:09:85:99:fb:68:f0:2f:8a:5e:0e:71:49:86:
fe:b8:c5:dc:32:26:85:b6:28:82:50:1b:4e:53:b8:
0c:48:78:21:6e:e3:fc:d6:c3:f6:8a:25:5d:8f:00:
01:a5:13:67:b2:c1:0a:8f:6b:5b:8b:10:14:43:cd:
34:79:e4:a0:1b:0b:49:99:b5:b9:60:92:ab:b8:11:
6d:54:f1:8e:c5:72:ae:c2:9f:b5:20:e3:40:7b:72:
ec:4e:47:41:9c:cc:90:9f:94:da:48:16:4d:f6:f0:
36:c5:30:d0:69:5d:40:03:29:d9:68:17:bb:ac:19:
44:d2:b2:ce:0f:ea:4a:cd:cf:bb:13:47:55:e8:de:
e2:59:1e:fa:e5:6c:f9:c6:1d:e0:65:a1:9b:b5:91:
b3:02:2c:e2:77:c9:85:8a:6c:38:6d:88:06:0f:cd:
06:03:cd:0e:39:13:a1:ec:f2:50:03:c0:a8:78:b0:
13:16:1f:37:7f:70:6f:9f:2b:2f:0b:75:85:7a:43:
92:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7C:81:F4:F2:29:07:A9:5F:13:E1:C3:36:18:A9:B6:02:01:24:1D
X509v3 Authority Key Identifier:
keyid:6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4f:d2:f1:29:f0:85:f4:fe:6d:8a:48:93:23:56:89:69:93:
bd:ad:8e:6c:4b:c6:48:59:51:85:d3:f3:33:8f:40:4f:67:1b:
a1:bf:74:81:87:ab:ae:da:a4:22:5d:6c:b7:bd:b6:f2:9a:b7:
f4:ec:c4:c9:cd:dc:d6:4e:84:a7:f4:7f:fb:28:23:09:ee:e7:
fb:b8:44:ca:66:5b:78:0e:34:20:5d:ba:b4:eb:7e:f0:0a:60:
66:ec:48:43:9d:49:a3:cb:b3:f6:80:8d:d3:ab:c5:31:8d:9c:
0a:7d:75:91:4b:2c:db:ff:e2:76:97:03:00:7e:62:aa:e3:a3:
01:e4:5c:0d:e0:49:d8:1c:a8:2c:d0:fd:ba:2c:ce:44:42:f6:
ac:9c:8f:7c:e5:38:ce:e8:1e:4c:11:49:78:77:21:ef:b8:15:
1d:6e:96:11:2e:41:06:64:68:cb:8e:9b:b2:c3:da:94:e9:c5:
d6:7b:91:49:fc:14:39:d2:38:37:b1:93:91:f1:4d:28:69:8b:
5c:e6:99:b3:aa:24:61:8e:d8:71:3d:92:06:57:0a:f6:2d:69:
69:3d:96:77:5a:95:02:a0:bb:9e:c9:7b:1a:38:9a:be:55:8d:
ec:94:73:8c:aa:e1:08:9b:06:a1:93:9c:c3:04:a9:54:5f:68:
58:e7:7e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:50 2026 by rpki-client