
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
File: bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft (raw, json)
Hash identifier: ntyAJtgkQVRA1c8Zg+XRHjzvvBMhDu00ymb3hk9mpUI=
Subject key identifier: 5B:5A:75:22:CF:3D:78:B8:AD:A1:80:13:C9:2D:47:8D:FC:8C:1D:4A
Authority key identifier: 6C:22:97:F8:2E:21:83:74:94:13:92:65:2C:9C:8B:30:55:C8:63:A2
Certificate issuer: /CN=A912781D/serialNumber=6C2297F82E218374941392652C9C8B3055C863A2
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
Manifest number: B7
Signing time: Sun 27 Sep 2026 07:30:37 +0000
Manifest this update: Sun 27 Sep 2026 07:30:36 +0000
Manifest next update: Sun 04 Oct 2026 07:30:36 +0000
Files and hashes: 1: bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl (hash: STxRQEos0bXc3JzpnWcWuNZGzSi4qB5vy1+GVQcDxaI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl
rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 07:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912781D, serialNumber=6C2297F82E218374941392652C9C8B3055C863A2
Validity
Not Before: Sep 27 07:30:36 2026 GMT
Not After : Oct 4 07:30:36 2026 GMT
Subject: CN=6ab8c61d-e70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:08:c9:3f:fe:c3:74:0b:b7:9d:a9:69:5b:8f:
2c:28:de:07:75:00:9c:0e:99:83:26:41:a3:bc:d9:
dd:8f:00:0c:a4:e8:da:60:26:ed:71:9e:15:88:a5:
8e:a8:4a:14:2f:54:33:54:94:be:a5:91:c3:71:64:
58:8c:70:25:a4:7a:8c:7c:f8:a4:bf:53:2f:0e:ef:
ad:56:07:72:1b:b1:88:ac:29:c5:dc:f6:3a:fb:e6:
d9:27:cc:d5:1d:0e:d7:6c:a0:30:aa:bc:c3:52:3b:
6c:17:6d:46:75:96:bc:13:b4:c2:83:58:eb:6c:ff:
db:8b:da:aa:17:ee:23:b8:4a:92:79:dc:54:01:96:
5b:e9:e0:d3:25:e6:c7:e1:92:68:2e:f5:a6:39:d8:
a0:88:cd:f8:a9:97:20:d1:25:11:45:e0:b5:6f:80:
1f:70:e3:36:69:64:7b:23:3d:4f:69:fd:86:50:b0:
f9:07:85:4c:e3:02:bc:76:fe:08:88:46:0f:f4:d7:
f9:22:2a:40:4d:05:27:aa:71:dc:a3:21:ed:7a:15:
2f:1e:8f:e1:85:7f:cc:e1:f8:fa:5d:2d:d5:17:27:
00:c3:5e:4e:f1:9a:9a:09:2a:dc:70:1e:9a:cc:9a:
ac:8f:6e:7b:80:96:d2:0a:1c:ac:71:ab:5f:a9:08:
36:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5A:75:22:CF:3D:78:B8:AD:A1:80:13:C9:2D:47:8D:FC:8C:1D:4A
X509v3 Authority Key Identifier:
keyid:6C:22:97:F8:2E:21:83:74:94:13:92:65:2C:9C:8B:30:55:C8:63:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:3f:d2:de:c4:5c:67:a8:78:d4:e6:f5:cc:ae:08:28:2f:89:
de:21:76:f1:db:75:70:46:e5:50:a2:f1:03:c5:38:ab:62:05:
b4:ce:46:ce:ea:ef:3b:73:f1:89:0e:2c:42:e3:1b:97:7d:3a:
64:83:5a:b6:6e:81:52:09:ed:fd:de:4e:f4:58:e0:1f:ef:55:
77:72:b3:0b:db:f1:13:87:1d:50:af:dc:a6:70:26:63:fe:e4:
48:5e:3e:22:24:de:42:e5:00:3f:ea:75:91:7b:db:ad:f9:4c:
11:24:ff:52:92:f4:f4:13:b8:a5:d8:a1:a7:86:76:b0:82:23:
22:84:aa:c9:eb:e4:3d:71:22:e7:86:e2:ad:fe:1a:61:b9:65:
8e:b1:5a:6c:c9:93:dc:3a:1d:1f:a6:1a:47:46:f8:a3:c9:a1:
f5:4b:1c:ff:1e:b0:f0:cc:37:f0:43:1f:bd:17:ff:31:46:cf:
69:a0:5b:24:d3:ef:35:4a:b5:89:ca:38:0e:42:d4:b6:61:bc:
69:be:1d:87:07:fe:ad:2b:63:ab:24:c7:a5:d2:bd:5c:36:bb:
52:f8:05:3b:c6:89:35:fb:f9:87:3f:db:11:b6:36:dc:a4:c3:
05:4b:b3:22:98:4b:51:af:e0:0f:21:97:21:cd:e6:e7:11:38:
87:26:e2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:41:32 2026 by rpki-client