
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft
File: Bmy1pxYud36-c45cu4Dn9JRwzCE.mft (raw, json)
Hash identifier: 0L5Nj9ydHRwG/+k9nKro5qJaWQUPxM09UtFvers9oaA=
Subject key identifier: 33:C9:8D:9D:5D:50:EA:92:6F:F7:F4:C8:83:AE:35:58:DB:08:EB:C5
Authority key identifier: 06:6C:B5:A7:16:2E:77:7E:BE:73:8E:5C:BB:80:E7:F4:94:70:CC:21
Certificate issuer: /CN=A9134FAF/serialNumber=066CB5A7162E777EBE738E5CBB80E7F49470CC21
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft
Manifest number: 97
Signing time: Wed 25 Mar 2026 06:38:45 +0000
Manifest this update: Wed 25 Mar 2026 06:38:45 +0000
Manifest next update: Wed 01 Apr 2026 06:38:45 +0000
Files and hashes: 1: Bmy1pxYud36-c45cu4Dn9JRwzCE.crl (hash: K0XDVh9o1agT34+nCaC7CYjJcizswoP0hXsFQlBZ4/s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.crl
rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:38:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134FAF, serialNumber=066CB5A7162E777EBE738E5CBB80E7F49470CC21
Validity
Not Before: Mar 25 06:38:45 2026 GMT
Not After : Apr 1 06:38:45 2026 GMT
Subject: CN=69c382f5-df72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:3c:5e:2c:b6:7d:b2:30:0f:f8:3b:69:2f:
8a:36:0e:ec:bb:6b:b8:40:fb:1e:10:c0:af:89:50:
05:5d:02:a8:8c:d9:27:e1:a2:b9:82:6f:db:67:03:
1f:f4:55:79:ff:fe:e7:3f:3d:1c:8c:66:ad:ee:5b:
40:8d:a2:84:a7:d1:00:c3:a5:fd:1b:a7:e9:95:fa:
08:41:c5:2f:c3:87:f7:53:49:bc:92:e4:52:4b:b6:
b9:00:cf:de:cc:a4:93:ee:c1:3d:ee:e4:97:f1:10:
b6:2c:eb:f5:a8:cd:86:29:08:1b:4b:5e:2d:e3:14:
ca:41:a8:19:b3:14:a9:44:2e:d8:cc:96:e5:e9:87:
ee:e5:ef:d0:2f:20:bc:f7:e7:c1:1e:fd:5b:e2:cf:
48:52:50:58:09:c1:c1:4c:06:4a:3a:b4:53:d5:08:
22:0b:2b:56:51:cf:2b:41:cd:af:4c:eb:41:98:78:
99:c0:87:8c:5e:d2:74:e3:7b:03:24:c9:59:b2:79:
29:f5:79:09:eb:c5:1d:05:e8:5d:3f:ce:5b:4c:96:
25:47:2a:16:08:aa:52:7d:e5:c6:e5:0e:65:3a:f0:
c1:40:6c:28:3c:c9:b4:c7:5c:c7:03:f3:db:7d:85:
e8:36:f7:07:da:e0:83:a6:0d:34:4f:6b:6d:ba:4a:
09:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C9:8D:9D:5D:50:EA:92:6F:F7:F4:C8:83:AE:35:58:DB:08:EB:C5
X509v3 Authority Key Identifier:
keyid:06:6C:B5:A7:16:2E:77:7E:BE:73:8E:5C:BB:80:E7:F4:94:70:CC:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:04:f8:60:2b:8f:6d:fd:3c:17:b0:a9:e1:94:3f:95:c0:c8:
f7:2c:b0:6d:4d:94:a8:c3:7d:fe:da:94:59:b3:47:0b:1b:55:
c9:79:c8:57:d4:00:dd:06:c9:5c:82:9b:aa:3c:c5:e1:77:cd:
89:51:e5:3f:44:24:87:74:07:18:e0:1a:42:f7:ca:0a:d6:7d:
1c:60:e7:b9:9a:89:7d:08:22:80:c4:32:49:73:8b:94:6e:3c:
92:71:93:d9:a5:74:35:e8:e5:6e:77:cf:1b:02:de:9a:24:d6:
84:33:1d:cf:ec:eb:83:8b:14:d7:39:13:51:1a:a7:97:65:28:
d3:34:69:6c:4c:83:9c:5b:e6:df:df:37:9d:dd:eb:05:0d:3e:
f8:17:6f:63:92:a9:83:06:29:3b:ca:67:de:3a:8a:e2:ba:48:
1b:92:99:a0:8c:f9:99:9b:b2:63:41:51:15:ce:b0:3d:d8:aa:
44:55:a5:b0:c0:a7:0d:2d:d7:d3:65:7c:54:4a:c9:29:cf:15:
f3:85:7a:aa:91:c1:d1:24:ca:32:ad:a6:cf:60:96:fe:50:2a:
c0:46:68:c7:16:ef:b7:03:a2:fb:fb:20:40:8d:9c:27:43:40:
58:1d:1d:54:b3:e8:14:37:42:0d:ce:92:e4:e7:ab:11:2a:88:
ae:90:25:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:57 2026 by rpki-client