
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
File: BSmF8r4ox5507_TbTHFCKEVHc1w.mft (raw, json)
Hash identifier: h5t6GKLBNxJFyr8jl8e9tReARUg82sBuSaJ/N07w1Ko=
Subject key identifier: 51:A3:21:37:3F:D8:B3:EA:DC:BA:38:E9:6C:E4:24:95:79:FA:7C:B0
Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C
Certificate issuer: /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C
Certificate serial: 0282
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
Manifest number: 0275
Signing time: Wed 09 Sep 2026 02:20:04 +0000
Manifest this update: Wed 09 Sep 2026 02:20:03 +0000
Manifest next update: Wed 16 Sep 2026 02:20:03 +0000
Files and hashes: 1: BSmF8r4ox5507_TbTHFCKEVHc1w.crl (hash: JP4DT8Qga2eGs0uhHIJR34ldu1EtBQS+dKNLUPbIE4o=)
2: A799F54AF1F111EE9D899046C4F9AE02.roa (hash: D0We847jC9NmtS/4aP2Z+ItJ6o2XNA0yQ9zXCE962BM=)
3: 00646A9CE0D511F08788B2A9556F56BC.roa (hash: FtBFCaWOLNLTBRIeXShQkhCIojOskqt9TOXuLZ51kXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl
rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 02:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151A79, serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C
Validity
Not Before: Sep 9 02:20:03 2026 GMT
Not After : Sep 16 02:20:03 2026 GMT
Subject: CN=6aa0c253-4fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:5d:bb:88:89:e0:e4:34:b1:5a:05:bc:9d:
71:28:7a:72:cb:f2:47:d2:3c:da:02:0f:69:08:3f:
b8:60:ec:b5:b3:f5:f2:21:96:c8:9c:af:0b:64:fb:
92:d4:21:37:3f:07:eb:5c:fa:f4:ba:bc:91:0d:fc:
e2:f7:76:e2:c5:d2:6e:75:0b:1d:c4:88:4c:de:c5:
64:0f:ad:c1:fd:54:0f:fe:a8:91:7d:92:a0:fc:e2:
d7:25:95:5f:bd:d4:07:70:cd:2e:9e:8d:9b:b3:63:
bf:d6:6e:53:51:4d:9e:b6:43:b7:05:54:c5:a7:33:
ee:fd:68:53:79:b3:73:ca:a3:7c:da:45:aa:6d:ee:
46:48:54:71:9e:5a:50:b5:3f:85:c7:5d:f8:98:2a:
1e:db:6c:85:66:76:b0:d5:18:61:f9:8f:9b:58:a2:
c8:ab:b9:3a:7f:79:15:72:8a:7c:0a:9b:13:2e:2b:
24:3c:37:8f:a7:e6:44:b4:b1:60:93:73:e4:fe:f5:
ce:9a:d3:92:e2:11:7a:6f:81:80:1a:9d:3c:21:b3:
73:d6:c3:cb:1b:59:43:14:c2:f0:24:94:1a:4a:29:
90:0b:ee:41:ef:4d:4b:8c:22:c4:fe:ee:b6:90:64:
29:75:7d:40:31:d9:1f:f7:bc:30:32:bb:a3:25:ba:
21:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A3:21:37:3F:D8:B3:EA:DC:BA:38:E9:6C:E4:24:95:79:FA:7C:B0
X509v3 Authority Key Identifier:
keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:7a:85:91:90:55:65:73:20:f1:77:84:37:68:e1:eb:42:c4:
5c:72:bc:72:f4:a7:bc:c0:42:2b:7c:f3:46:0a:cb:42:47:b1:
0e:0f:85:95:b1:88:78:c0:cd:38:df:82:86:64:83:4f:6e:df:
de:ad:82:3c:42:af:2f:92:28:9b:7e:e3:e0:80:07:ad:98:a9:
e3:50:83:72:d9:df:a1:60:18:47:3d:e8:34:6d:de:97:62:e4:
5b:e4:58:68:e5:22:8e:72:25:39:f0:8e:3d:4d:24:9b:63:b3:
6d:ea:86:ad:88:1d:48:7c:d7:60:36:81:02:7c:f3:9a:d0:b9:
38:8d:1a:93:ba:4a:36:11:a6:e7:7c:76:2b:af:6b:32:35:8b:
39:d7:9b:a9:db:23:85:0c:2b:a5:81:ed:b3:01:6a:e3:57:97:
b0:7d:ce:46:ca:fb:bd:19:55:7e:28:07:04:3b:ba:22:8b:be:
7f:84:21:ed:29:ec:0f:9e:17:50:49:75:df:19:60:fc:33:bc:
30:1d:19:63:b9:4f:97:4d:31:17:44:87:4b:ad:07:ee:97:b6:
91:dd:0a:24:2b:5b:a0:f2:a7:89:31:77:9a:dc:ef:09:5e:f1:
c7:d6:67:23:08:78:6d:1d:b8:18:cc:ce:8c:98:42:6b:4d:5e:
98:54:33:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:38:39 2026 by rpki-client