
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
File: -bspsKvoSef-GA4znkscKCNoxSE.mft (raw, json)
Hash identifier: N4lSP8EMYyJEhGTH0Bm6zNF9OcIUEks1QofBw7unegQ=
Subject key identifier: 11:D7:C7:1B:F3:A4:97:22:D4:B2:4F:35:D8:B0:A2:55:91:34:53:43
Authority key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
Certificate issuer: /CN=A913E8F3/serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
Certificate serial: 10B3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
Manifest number: 1096
Signing time: Sat 18 Apr 2026 17:17:42 +0000
Manifest this update: Sat 18 Apr 2026 17:17:41 +0000
Manifest next update: Sat 25 Apr 2026 17:17:41 +0000
Files and hashes: 1: -bspsKvoSef-GA4znkscKCNoxSE.crl (hash: ycfRXV9UrnLS13bgqm+6gbkicJMav+VXEB3x+XeHf0I=)
2: 06093D68DC1311F09341A9F45E6F56BC.roa (hash: 38iP1UDZ5HIVswjKfNaAplI7jivkq9C797QFF0+FNg8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl
rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4275 (0x10b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
Validity
Not Before: Apr 18 17:17:41 2026 GMT
Not After : Apr 25 17:17:41 2026 GMT
Subject: CN=69e3bcb6-29a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:c9:87:d3:e9:06:5b:d9:2b:10:a2:64:82:
b0:c5:51:ac:2d:ba:ca:33:81:c0:df:e6:db:7e:41:
84:92:7c:d3:78:cd:97:14:97:98:5a:14:f2:1b:86:
af:5e:bf:ef:80:53:e5:1c:dc:c4:87:a8:21:5c:d2:
aa:0c:f7:bc:ca:58:35:76:ab:c9:a4:9c:0b:22:44:
6e:f3:7f:46:3f:7f:2e:90:29:41:cb:d8:95:e3:7f:
b9:6a:38:57:92:52:9e:2f:ee:8c:b7:f4:aa:9c:73:
4d:fa:e4:08:12:94:d8:a4:65:2e:c6:0b:fc:16:eb:
64:a4:1c:87:aa:95:5c:48:df:82:3e:7e:bc:e5:59:
83:9d:f7:10:7a:7b:ed:04:4b:3a:6f:f4:c7:6c:20:
eb:07:a8:9a:e2:3c:67:b4:75:6b:c9:24:ae:c9:12:
69:5a:1f:0f:36:50:57:30:a9:3f:e4:e9:d6:c0:18:
40:6b:56:f1:ef:3b:5d:15:62:bd:52:e2:ec:a9:fe:
62:bd:cb:c6:53:a4:0d:f2:36:b1:62:95:68:6e:bc:
5e:5c:8d:59:7d:8f:43:d2:08:10:3a:c6:50:77:3b:
2d:7d:eb:f3:1b:13:94:99:d5:40:83:05:52:33:cb:
3c:38:51:8a:c2:2f:e3:d4:ed:55:f1:08:f1:79:04:
7e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D7:C7:1B:F3:A4:97:22:D4:B2:4F:35:D8:B0:A2:55:91:34:53:43
X509v3 Authority Key Identifier:
keyid:F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:03:bf:e8:29:b3:64:20:0b:14:6b:c1:d5:20:cf:95:f5:62:
a5:5e:eb:1d:d2:e9:3c:66:24:87:3c:cb:9a:0b:5a:88:5c:8d:
9a:39:8c:80:e9:49:24:2b:ca:40:ee:0e:f3:71:8c:c4:09:aa:
65:a5:88:54:98:a9:71:b9:a1:85:cd:90:7f:2b:13:68:a6:ad:
4b:ec:b5:e0:be:00:c0:c0:3f:a4:76:a0:5e:6a:33:6c:9e:f1:
db:6f:a3:fa:77:b6:3a:e9:cc:b8:d3:94:eb:d7:92:d4:a7:b8:
bc:79:93:43:a3:66:07:c3:54:a3:bc:74:0a:7a:ee:8d:a4:7f:
97:7a:9d:0d:71:ca:d5:6b:29:33:ac:bc:50:3e:35:27:fc:e0:
8b:bb:63:f3:f4:5a:5b:59:ab:fa:e5:5f:cd:d9:a8:ba:b3:40:
33:b9:08:70:7e:a5:36:b3:05:f3:11:c5:29:b4:75:c8:9e:97:
a5:19:73:7b:40:38:68:34:0e:26:04:d3:87:15:e7:c6:36:e5:
9f:37:80:43:75:d7:b5:74:6d:b5:36:c7:a3:a1:4a:e6:bc:54:
af:c0:61:d4:f0:3e:8f:a3:1c:05:88:e8:01:85:16:ed:d2:d1:
31:2f:b7:c2:be:b9:5d:98:26:9d:8d:89:65:44:0a:16:69:13:
a0:32:2c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:07:39 2026 by rpki-client