
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft
File: Bmy1pxYud36-c45cu4Dn9JRwzCE.mft (raw, json)
Hash identifier: aFT9K9OybjiBRqoRpDqjJFiXGi2wj3dsavdn4SS/lHo=
Subject key identifier: DF:D7:D8:C3:8E:31:3B:48:2C:F0:07:43:AF:38:11:B4:B1:5A:59:DC
Authority key identifier: 06:6C:B5:A7:16:2E:77:7E:BE:73:8E:5C:BB:80:E7:F4:94:70:CC:21
Certificate issuer: /CN=A9134FAF/serialNumber=066CB5A7162E777EBE738E5CBB80E7F49470CC21
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft
Manifest number: 9D
Signing time: Sun 05 Apr 2026 06:43:57 +0000
Manifest this update: Sun 05 Apr 2026 06:43:57 +0000
Manifest next update: Sun 12 Apr 2026 06:43:57 +0000
Files and hashes: 1: Bmy1pxYud36-c45cu4Dn9JRwzCE.crl (hash: MVfH31CpJrdrPQw1fQ0q7IN0TmcR7HeslwgB3gA+A3k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.crl
rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134FAF, serialNumber=066CB5A7162E777EBE738E5CBB80E7F49470CC21
Validity
Not Before: Apr 5 06:43:57 2026 GMT
Not After : Apr 12 06:43:57 2026 GMT
Subject: CN=69d204ad-3f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:f9:9c:fd:18:b4:4d:0e:a7:7d:e2:98:d1:
fd:7b:cf:19:12:36:65:15:4c:71:a3:fb:04:63:49:
3e:54:8c:d2:ad:c9:93:b2:fa:2c:36:bc:bb:3a:42:
b3:06:fb:e0:3d:37:48:18:49:48:f9:c2:5b:06:10:
3f:8a:42:b4:84:a0:0b:10:e4:37:40:01:73:c7:1c:
0e:df:2b:43:69:53:c7:36:fd:a7:c8:fb:0a:78:e0:
23:b2:fb:e4:9b:b3:1f:9c:bf:61:9a:46:17:9f:fd:
a1:e5:94:d9:ae:31:1f:17:13:d4:6e:ac:61:1a:42:
92:c1:06:0c:d6:db:3d:34:43:94:c5:e4:94:4b:0b:
29:b8:a4:b1:de:8a:3b:34:ad:49:d5:9c:5c:dd:0a:
4e:51:8e:a0:29:18:d9:36:30:0f:5b:90:f8:20:d1:
e0:ec:0b:ee:05:00:de:20:51:b0:f4:ae:d5:b5:dd:
2f:f2:a0:f0:81:20:ce:b5:32:61:33:f2:d7:aa:f1:
5c:61:93:14:d9:73:65:7e:e5:0a:72:ac:ce:31:70:
e2:38:18:4e:54:2f:ee:74:7e:2c:38:e8:8e:fd:8e:
06:97:a0:ef:d0:b0:a2:75:19:02:be:61:e8:08:c5:
43:4e:71:b5:4c:93:6c:b1:39:e7:3b:5e:1c:fc:55:
c9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D7:D8:C3:8E:31:3B:48:2C:F0:07:43:AF:38:11:B4:B1:5A:59:DC
X509v3 Authority Key Identifier:
keyid:06:6C:B5:A7:16:2E:77:7E:BE:73:8E:5C:BB:80:E7:F4:94:70:CC:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:49:40:6d:e3:93:f9:18:59:a1:30:19:48:a4:32:00:7f:a5:
f6:f1:1f:3e:c5:74:ab:80:ae:c5:cb:97:07:69:fc:71:d0:5d:
2a:70:ad:12:07:f4:bf:37:2b:fc:4a:29:21:c4:f2:b5:4b:c6:
ad:2c:fb:ac:04:24:6c:76:32:b3:14:96:de:cf:df:82:db:dc:
95:a4:7a:dc:68:20:a9:ab:c8:78:4e:7e:14:6b:59:67:16:98:
f4:b4:db:3a:79:4b:62:4b:fd:72:20:90:6e:50:ce:59:fa:02:
26:a8:a8:89:de:c2:6d:e3:8c:09:29:90:50:d7:0b:0a:29:b3:
ac:bf:4e:d4:62:38:43:2f:7b:23:7d:27:ec:48:b1:91:81:ac:
0e:d4:0e:49:b7:b1:a6:b8:41:a0:05:ea:0c:6a:c7:9a:f6:22:
77:73:d3:73:4f:0e:0f:34:87:59:11:ca:5c:74:6f:a3:e3:ab:
41:55:5d:84:2d:16:d9:dc:7f:48:1b:b4:ca:e3:9f:37:54:d5:
cc:5a:83:e7:23:eb:31:38:67:d9:09:10:5a:c4:64:e9:d5:5d:
e9:58:28:4b:01:1a:e0:0a:5f:4b:e2:28:38:a6:15:c6:20:d6:
15:76:80:ee:03:d7:30:af:46:61:be:7a:56:4d:0d:ce:ec:16:
f7:3a:5c:86
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzRGQUYxMTAvBgNVBAUTKDA2NkNCNUE3MTYyRTc3N0VCRTczOEU1Q0JCODBFN0Y0
OTQ3MENDMjEwHhcNMjYwNDA1MDY0MzU3WhcNMjYwNDEyMDY0MzU3WjAYMRYwFAYD
VQQDEw02OWQyMDRhZC0zZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo8H5nP0YtE0Op33imNH9e88ZEjZlFUxxo/sEY0k+VIzSrcmTsvosNry7OkKz
BvvgPTdIGElI+cJbBhA/ikK0hKALEOQ3QAFzxxwO3ytDaVPHNv2nyPsKeOAjsvvk
m7MfnL9hmkYXn/2h5ZTZrjEfFxPUbqxhGkKSwQYM1ts9NEOUxeSUSwspuKSx3oo7
NK1J1Zxc3QpOUY6gKRjZNjAPW5D4INHg7AvuBQDeIFGw9K7Vtd0v8qDwgSDOtTJh
M/LXqvFcYZMU2XNlfuUKcqzOMXDiOBhOVC/udH4sOOiO/Y4Gl6Dv0LCidRkCvmHo
CMVDTnG1TJNssTnnO14c/FXJmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN/X2MOO
MTtILPAHQ684EbSxWlncMB8GA1UdIwQYMBaAFAZstacWLnd+vnOOXLuA5/SUcMwh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEZBRi84QUM0MTc5NDQ0
OTcxMUYwQTk3NTczNjJDNEY5QUUwMi9CbXkxcHhZdWQzNi1jNDVjdTREbjlKUnd6
Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JteTFweFl1ZDM2LWM0NWN1NERuOUpSd3pDRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NEZBRi84QUM0MTc5NDQ0OTcxMUYwQTk3NTczNjJDNEY5QUUwMi9CbXkxcHhZdWQz
Ni1jNDVjdTREbjlKUnd6Q0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzklAbeOT+RhZoTAZSKQyAH+l9vEfPsV0q4CuxcuXB2n8cdBdKnCtEgf0vzcr
/EopIcTytUvGrSz7rAQkbHYysxSW3s/fgtvclaR63GggqavIeE5+FGtZZxaY9LTb
OnlLYkv9ciCQblDOWfoCJqioid7CbeOMCSmQUNcLCimzrL9O1GI4Qy97I30n7Eix
kYGsDtQOSbexprhBoAXqDGrHmvYid3PTc08ODzSHWRHKXHRvo+OrQVVdhC0W2dx/
SBu0yuOfN1TVzFqD5yPrMThn2QkQWsRk6dVd6VgoSwEa4ApfS+IoOKYVxiDWFXaA
7gPXMK9GYb56Vk0NzuwW9zpchg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 11:34:57 2026 by rpki-client