
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
File: bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft (raw, json)
Hash identifier: Sm1QbnSZ0wm4txz3m5gaevVTqgHGlzs7ob4hMyKsSv0=
Subject key identifier: B8:8E:07:C8:A9:1D:D1:68:71:49:60:27:7B:2D:DD:AA:19:02:BA:49
Authority key identifier: 6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D
Certificate issuer: /CN=A9130A53/serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D
Certificate serial: 09A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
Manifest number: 0993
Signing time: Sat 04 Apr 2026 19:48:37 +0000
Manifest this update: Sat 04 Apr 2026 19:48:37 +0000
Manifest next update: Sat 11 Apr 2026 19:48:37 +0000
Files and hashes: 1: bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl (hash: Bc1aLMX+0tIqHl+7CDwMx5HBq7GluXcv3H0PBmib9ZY=)
2: F36A0E2EAB4B11EAA2CA585BC4F9AE02.roa (hash: 3mYXKQGPTclvrVN59MFw/zfTsvZixKAABlHasf+SFZU=)
3: F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa (hash: K9ygKHUO5qXA1XG+AYxwcORvRSOsX7Vi56bxTzrxJe8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl
rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2469 (0x9a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130A53, serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D
Validity
Not Before: Apr 4 19:48:37 2026 GMT
Not After : Apr 11 19:48:37 2026 GMT
Subject: CN=69d16b15-0196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:a1:90:f3:67:61:77:07:25:a2:63:a6:3f:
6c:86:03:12:3f:11:6b:5d:8c:57:8d:b7:22:ec:96:
95:83:ca:89:da:c9:c5:c3:ea:aa:23:ac:b1:f2:d4:
88:8d:e5:ed:3a:92:f0:f1:09:c4:64:e5:95:60:f8:
1d:81:04:03:11:7a:4f:5a:23:12:26:4f:96:14:41:
07:53:76:c2:9b:81:7e:b9:73:b2:06:1f:e7:db:60:
5c:f4:c7:04:a8:3b:07:65:34:2e:06:c7:34:93:16:
36:57:82:a7:b3:16:14:76:45:e4:f2:30:e1:71:bb:
d8:9d:07:a4:ca:2f:62:b4:aa:e2:05:94:ed:5b:71:
91:f5:48:89:1c:62:40:e6:55:97:a8:22:2b:db:ee:
2e:07:4b:47:67:35:07:39:8a:a9:f0:cf:c6:3f:b2:
85:e2:07:c6:e7:4f:b0:9a:94:2d:f8:0a:8e:e4:7a:
e2:61:f7:c6:ef:fc:ab:56:5f:e9:04:c3:6d:da:ea:
cc:08:a4:67:6f:65:97:4a:b3:6a:17:a5:10:d1:79:
59:8c:be:5d:56:4b:ee:58:17:aa:9f:8d:34:c2:45:
5d:98:3b:f0:cd:07:b7:59:3f:74:3d:f4:60:1e:2a:
6c:35:d6:ee:5c:28:06:09:44:c0:90:43:66:f5:ce:
66:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8E:07:C8:A9:1D:D1:68:71:49:60:27:7B:2D:DD:AA:19:02:BA:49
X509v3 Authority Key Identifier:
keyid:6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:22:e7:82:03:2e:5a:43:8b:a0:31:1b:ed:96:80:30:d2:60:
01:4b:b1:e2:37:d8:e7:c7:92:3b:fa:b9:4e:ae:ae:6a:21:6a:
9d:90:5e:27:d2:5e:55:08:ce:6c:7a:6a:bb:07:0a:01:ec:43:
e6:ca:49:67:20:db:1d:b7:2e:a8:19:2f:c9:ee:6c:41:21:1f:
b1:64:f7:26:62:13:c2:8e:26:98:b7:3e:08:5b:d5:c9:f4:cb:
66:be:77:de:15:27:12:50:54:13:cd:eb:d6:a6:be:9c:d1:d3:
0a:ed:44:1d:6f:9f:b7:15:66:02:3c:60:73:db:4f:e1:82:d5:
3d:82:c8:00:13:8a:4f:4f:24:98:25:b0:61:64:ec:66:7c:d3:
59:04:fb:f2:d2:06:65:48:c3:b6:ac:ea:5d:5c:de:96:8d:1f:
11:c3:d6:60:3e:7b:58:92:59:86:f9:0f:89:a4:e1:40:2f:b7:
ef:d3:cd:00:60:ea:ff:e7:5f:3d:ed:b5:fc:55:50:08:e8:c6:
3b:1e:e8:e8:2a:fc:5b:c3:c3:21:f7:c3:fc:75:93:b4:2b:92:
ee:7f:e7:1c:6b:0d:71:0c:ec:24:6e:d4:ca:93:b5:ff:a5:c7:
bf:d3:a2:9e:fc:ae:8d:92:29:c9:09:b4:30:1e:37:ee:5a:65:
f3:e6:e2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:16 2026 by rpki-client