
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
File: -bspsKvoSef-GA4znkscKCNoxSE.mft (raw, json)
Hash identifier: vTctC6HDuyqUcy2dTgliXuP/JHSKYRt02rKo06+s6RA=
Subject key identifier: C9:D9:6D:B7:67:BD:91:77:37:CE:98:4A:2B:AC:69:AD:3A:21:40:D1
Authority key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
Certificate issuer: /CN=A913E8F3/serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
Certificate serial: 10A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
Manifest number: 1089
Signing time: Tue 24 Mar 2026 17:16:27 +0000
Manifest this update: Tue 24 Mar 2026 17:16:27 +0000
Manifest next update: Tue 31 Mar 2026 17:16:27 +0000
Files and hashes: 1: -bspsKvoSef-GA4znkscKCNoxSE.crl (hash: h0uiPZgScI9SHJ/yPfdB1GZ3Oi8xvO4Y4OLj8wpT37g=)
2: 06093D68DC1311F09341A9F45E6F56BC.roa (hash: 38iP1UDZ5HIVswjKfNaAplI7jivkq9C797QFF0+FNg8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl
rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4262 (0x10a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
Validity
Not Before: Mar 24 17:16:27 2026 GMT
Not After : Mar 31 17:16:27 2026 GMT
Subject: CN=69c2c6eb-48b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:21:e6:53:3f:42:a5:ab:c9:2f:37:46:67:
f0:62:14:3a:da:99:c1:a3:4c:e6:9c:d0:b7:7a:40:
96:73:2c:ca:7d:e9:94:96:d0:35:b2:71:d2:ca:21:
e4:9d:09:3c:52:d8:46:62:df:e3:38:d2:c5:f1:e1:
ab:3c:4a:4d:83:51:f7:44:5f:b0:d6:87:7b:5a:1d:
dd:72:ca:ce:e5:e9:64:05:46:da:81:04:f0:40:e2:
dd:c1:a7:24:d7:7d:89:9b:93:88:1a:83:b8:55:a1:
03:47:a5:b9:5e:aa:d9:fc:1b:4c:11:32:d5:f5:c2:
37:7e:d0:58:c0:e0:2a:b5:cc:a5:3f:36:78:c8:18:
23:2c:4e:6f:0b:09:d6:f0:46:bf:01:24:62:12:18:
fe:67:ec:01:b6:f0:e2:92:2f:4a:7e:96:2a:4f:de:
e7:54:33:07:3c:8d:69:df:2f:cb:54:f0:7d:05:c7:
61:10:11:a8:af:34:77:06:4a:e8:7c:7e:5a:02:95:
42:4b:0c:ac:e3:c8:ab:2d:d4:78:9f:e6:67:9e:4d:
01:d0:87:76:3e:ec:06:44:85:a7:f9:38:07:f6:a5:
67:d8:5e:75:36:dc:82:2f:20:5a:55:f7:e6:d6:11:
48:fe:58:bc:9d:cb:5f:18:fe:cf:68:a5:73:1d:25:
6f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D9:6D:B7:67:BD:91:77:37:CE:98:4A:2B:AC:69:AD:3A:21:40:D1
X509v3 Authority Key Identifier:
keyid:F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ff:9a:61:f7:0c:04:d3:53:cd:b7:e7:be:d9:e3:70:38:b4:
f3:21:ec:81:d4:d4:92:d0:c4:4a:02:bb:4a:f6:00:40:6f:d4:
e1:ce:1b:0f:f5:89:25:ed:fe:64:8a:88:99:45:9e:17:9c:9b:
b6:4d:44:a9:41:1e:3f:aa:dd:57:e6:48:22:48:c5:ce:c8:b5:
a0:5b:0e:a7:33:09:35:76:cc:28:8e:f5:50:b6:01:78:27:98:
1e:10:65:cb:1c:4d:9b:70:07:81:29:7c:79:25:ee:f7:88:8a:
a7:81:f0:45:a5:94:f2:49:5c:20:72:23:32:4e:02:cf:28:94:
3f:3b:9c:4d:6a:ff:74:bd:88:ab:fe:5a:48:15:7b:60:1c:3b:
2e:a3:77:44:f2:0d:f7:96:dc:86:ce:07:61:a7:93:a5:f9:9b:
25:38:aa:96:50:2e:94:19:43:c4:bf:be:4e:18:5f:83:6c:18:
ca:4d:bf:77:48:ac:63:d5:7c:66:47:ee:5d:4b:c6:b6:7f:71:
d0:e9:e9:ae:f3:56:2a:80:f4:86:60:d9:2c:34:a3:78:73:45:
de:f6:97:8f:87:2f:7b:f3:af:e6:60:e3:e2:0f:0e:72:73:f7:
b1:1a:e0:a8:c9:0a:be:9e:b1:1c:71:d0:d9:27:74:25:d4:54:
fc:b1:04:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:35 2026 by rpki-client