
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft
File: bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft (raw, json)
Hash identifier: lq3aRc6r+6Jkg/Glkg5UtVbBzNW5w5Ne9eMP1Gu21Mw=
Subject key identifier: 83:E8:13:1E:8C:8A:00:85:8B:8C:CE:45:95:CC:74:57:E9:40:7E:6F
Authority key identifier: 6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25
Certificate issuer: /CN=A9155A44/serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25
Certificate serial: 0329
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft
Manifest number: 0324
Signing time: Sun 05 Apr 2026 00:51:05 +0000
Manifest this update: Sun 05 Apr 2026 00:51:05 +0000
Manifest next update: Sun 12 Apr 2026 00:51:05 +0000
Files and hashes: 1: bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl (hash: iKsqLOFxZuDBOgPniRC8rdPXjjvmU/l6S4vIq9HKWJY=)
2: ED947C26088911EDA7D9A84AC4F9AE02.roa (hash: xk01nK+OBQA+N9iJTJFyOHUIgnyXzK+MKBhb3bDCqGA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl
rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 809 (0x329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155A44, serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25
Validity
Not Before: Apr 5 00:51:05 2026 GMT
Not After : Apr 12 00:51:05 2026 GMT
Subject: CN=69d1b1f9-0814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:7d:ed:b4:20:5e:2c:76:65:7b:a3:70:8d:
47:b1:5e:72:45:2d:37:d7:17:d3:90:0d:91:c7:27:
4b:1f:4f:3d:74:ed:5f:2c:2d:46:49:eb:c4:37:d3:
88:85:b5:7d:c0:78:9c:01:40:a5:d3:82:2b:e3:91:
34:ad:9b:f6:ff:6d:20:9f:bf:a3:5b:a5:93:0d:6f:
85:bb:42:ee:94:fd:f7:69:95:d7:cf:08:b5:0e:2c:
d2:0b:57:5f:6b:03:e8:9f:96:2c:48:a9:e9:b1:4b:
c9:a7:5a:75:b9:95:d2:60:5a:24:e6:2f:c4:f8:11:
ec:41:c3:5f:46:12:6f:b0:89:a9:ee:1d:51:d8:9b:
38:a3:83:fc:a5:31:e5:54:b6:ad:75:db:d1:8e:01:
67:d6:ae:31:b9:73:0f:d9:eb:eb:18:60:28:35:d2:
3c:34:5c:06:34:59:14:cb:eb:f6:17:b9:45:89:c3:
41:e6:32:a6:35:9c:0a:ac:ac:b1:01:d3:9a:1b:8d:
32:19:a8:cb:d3:65:ea:70:cf:73:51:91:5e:d9:72:
cb:8e:ac:08:16:7a:e2:b1:f6:f9:ee:40:75:3d:55:
cb:dd:48:95:bb:f9:2d:2b:4f:f1:83:62:e2:90:be:
35:d6:10:9e:54:d6:b5:4e:9c:a7:4d:bd:7b:05:23:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E8:13:1E:8C:8A:00:85:8B:8C:CE:45:95:CC:74:57:E9:40:7E:6F
X509v3 Authority Key Identifier:
keyid:6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:7b:bd:fb:89:b1:dc:06:9c:a5:db:e8:59:d5:76:b5:9c:db:
8d:d2:c1:16:48:aa:2d:5e:e3:ba:89:20:06:ed:4a:1c:c8:17:
9b:45:13:b5:8a:17:7a:83:64:3d:55:7b:23:e0:d0:79:d8:58:
15:e6:73:b8:ef:28:30:31:bc:b2:ff:8b:1f:d4:9a:e5:4a:8c:
8a:f1:c4:b8:d3:59:e9:b3:44:29:8d:d2:56:1a:11:d4:57:f9:
e2:fd:21:af:f2:04:15:26:c0:22:e4:07:0a:66:e6:14:86:8a:
c7:7a:b4:45:0c:3f:04:c1:f7:1c:26:45:8c:8e:94:bb:d9:95:
8b:f6:3a:67:e4:7a:23:47:44:b2:e0:77:1f:68:65:fb:bc:7d:
ff:64:1b:e7:3b:b0:7e:74:40:df:6f:0b:a1:2d:77:c6:a7:ec:
ab:3a:22:85:d2:40:5f:cc:3b:7b:11:f8:8f:6a:d3:95:9b:e5:
bb:6d:67:92:72:bf:67:ce:af:c1:dc:7c:7a:b3:3e:1f:0f:99:
12:13:53:53:23:9a:00:65:ca:af:f5:36:66:57:73:4a:e4:39:
f6:ff:bd:e8:a0:68:a2:20:5e:29:91:6b:aa:0d:e1:6d:2f:70:
7a:06:ed:2f:c3:0f:70:26:11:b8:65:4d:dc:c8:e2:0c:e2:88:
64:c3:f1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:07 2026 by rpki-client