
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
File: BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft (raw, json)
Hash identifier: dL3YLCFJPvpPBt0IDige02OcjUT7KFG1m/r1Blc7Czo=
Subject key identifier: F6:59:73:A1:41:51:50:23:F3:F9:2F:B0:49:55:2B:A8:FC:D0:47:F1
Authority key identifier: 06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24
Certificate issuer: /CN=A9122905/serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324
Certificate serial: 02D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
Manifest number: 02CB
Signing time: Wed 13 May 2026 01:29:42 +0000
Manifest this update: Wed 13 May 2026 01:29:42 +0000
Manifest next update: Wed 20 May 2026 01:29:42 +0000
Files and hashes: 1: BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl (hash: 3nt/qOm1YQqHyyZIzjf6EkyPzGaT4px1AgV26TH4gm8=)
2: 8BFE9EA6335911EDBC60AC44C4F9AE02.roa (hash: gaiP1us9ZVKBdlJoHfbtQhGqWeKxEzvnmSCb9KMbw0c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl
rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721 (0x2d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122905, serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324
Validity
Not Before: May 13 01:29:42 2026 GMT
Not After : May 20 01:29:42 2026 GMT
Subject: CN=6a03d406-ab84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:c9:6a:e4:66:f8:0b:fb:3f:95:ba:07:c9:
57:97:15:05:d0:9c:c0:52:1b:ab:1c:b9:a9:cd:50:
77:b5:fd:50:2e:dd:b7:6e:5b:1b:3e:8c:4d:70:82:
02:92:89:77:aa:75:d7:fe:c7:c8:fb:36:c1:13:68:
a0:56:3c:0f:cb:2b:f3:d2:0d:4b:02:3b:7c:aa:d8:
a2:e0:8b:13:32:d1:b4:c1:b5:bf:0b:57:28:3b:6d:
90:dc:a1:f5:ef:4c:4d:91:b0:39:03:52:ad:76:14:
37:26:12:94:8e:08:55:78:91:c1:50:fd:91:df:4d:
60:35:57:f3:7e:9f:ec:eb:d9:f7:b1:6a:4f:08:40:
5d:69:54:77:d1:f7:0d:3f:24:a4:00:07:5d:e1:39:
0a:15:db:f0:5a:2d:0c:dd:d2:eb:e0:26:f4:7d:74:
39:ba:23:a3:e0:15:4d:bd:da:6b:b3:fd:00:4f:88:
12:8f:7e:d6:3a:5e:61:52:8a:cf:8a:a2:bf:13:d7:
aa:9d:f3:02:3d:e3:63:ec:de:17:e9:62:74:c8:f9:
06:4f:45:5d:d7:56:51:b0:d4:fe:19:2f:b7:32:2d:
66:9e:97:ee:f8:f2:17:e8:3a:77:12:a6:48:f7:54:
0f:68:37:1a:f4:cd:c3:23:8d:92:53:ac:82:e0:be:
e1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:59:73:A1:41:51:50:23:F3:F9:2F:B0:49:55:2B:A8:FC:D0:47:F1
X509v3 Authority Key Identifier:
keyid:06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:ae:79:e8:48:07:25:98:8f:41:a8:55:75:cc:08:58:7a:fa:
f2:16:fb:0c:0d:cc:b5:85:e3:d8:de:33:17:a0:35:65:1e:41:
0f:9e:11:8b:03:dd:d4:77:aa:76:9b:18:74:64:5a:4a:b0:c7:
2a:f0:2c:81:1b:4f:46:72:cd:91:16:b8:d1:ae:7b:3a:a7:2f:
8a:c8:6a:e6:3e:c9:85:39:44:be:95:17:27:26:7d:a3:c6:9d:
4e:d4:16:4b:84:63:32:81:84:cc:51:ef:ad:4f:93:00:a3:13:
88:e4:fc:c2:43:46:ae:62:e8:e2:77:70:63:49:bb:27:d0:a0:
18:a5:e8:08:7c:f2:0e:26:2c:9b:a8:99:c7:a4:00:8e:f0:f3:
ea:e6:8c:50:42:aa:bc:69:2f:3a:ae:4c:2b:74:50:cf:e5:a8:
af:8f:b3:b8:71:f1:50:fc:78:1d:4c:fc:ae:bd:e9:36:9c:7d:
85:ed:c5:83:61:11:37:16:0b:53:fe:4d:f5:4d:51:f4:3c:e2:
0b:97:19:1a:fe:5f:56:15:e0:cb:e6:32:3a:03:99:58:eb:d1:
49:a0:0b:d1:e9:3e:96:c0:17:61:0b:54:06:4e:18:a1:57:7e:
e2:64:18:2d:81:6b:b3:58:0d:0b:85:63:33:7a:0b:2c:b5:ea:
32:37:7c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:37:50 2026 by rpki-client