
$ rpki-client -vvf rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
File: BFtcCGfeWB0rdIQv74BFwad76L0.mft (raw, json)
Hash identifier: A9OicVaPcSCwQAFcuGC/8xWdBnsoXmpJIM9ulVKdM90=
Subject key identifier: FE:6A:30:BC:E3:CE:DE:98:30:2C:3A:5C:28:FC:DE:AA:00:EB:17:57
Authority key identifier: 04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD
Certificate issuer: /CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
Certificate serial: 248F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
Manifest number: 2451
Signing time: Tue 24 Mar 2026 15:44:06 +0000
Manifest this update: Tue 24 Mar 2026 15:44:06 +0000
Manifest next update: Tue 31 Mar 2026 15:44:06 +0000
Files and hashes: 1: BFtcCGfeWB0rdIQv74BFwad76L0.crl (hash: y785U357CduLeRGG/48yqXmTOqRHNBFpd3P382y43Hc=)
2: FCF0A580B10D11E5894F4D1CC4F9AE02.roa (hash: H6do+iNez9/z72V5QpgnxH6535tcwrVnKoA3MCs2nME=)
3: F9ED1B16B10D11E5894F4D1CC4F9AE02.roa (hash: 3eIGkFdXCesrQan1GTwt/P2Jz7N4aTlKfgDk+FHeoyA=)
4: F8623718B10D11E5894F4D1CC4F9AE02.roa (hash: UJ3I406oaXCXKM2cbhdQ3fDZ66SAX4mHZaAKawZhny4=)
5: FB87E4C4B10D11E5894F4D1CC4F9AE02.roa (hash: 5atiiuUePKrBjgNOFvK+/VK4Q65b9pPT9OqHAMJHU0s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl
rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9359 (0x248f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917412F, serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
Validity
Not Before: Mar 24 15:44:06 2026 GMT
Not After : Mar 31 15:44:06 2026 GMT
Subject: CN=69c2b146-437e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5a:29:43:4a:bc:d4:16:47:43:1c:f8:ba:f1:
e2:ff:5e:14:2a:b4:60:25:03:e3:0a:d7:63:41:08:
3a:7e:c2:ae:81:3e:7e:ff:d9:b7:ec:4a:4d:40:81:
a1:24:0e:76:28:b3:e5:f5:32:a4:d3:b7:42:f9:ae:
95:23:b3:d8:95:d6:02:af:01:9a:ff:38:0b:00:fa:
65:66:b4:74:7d:81:80:31:b4:56:af:0a:42:ae:e7:
79:5d:6e:8b:95:98:30:5d:e4:87:5c:f1:0f:e4:e6:
f9:ee:23:0b:43:c5:43:a3:0c:d0:2a:9e:54:67:ba:
e6:5e:aa:88:2a:49:27:86:90:1d:d4:42:b2:b7:d5:
d6:e6:1a:07:a8:7b:f2:a3:41:f4:03:84:d8:fc:23:
cf:92:9f:eb:6b:35:2e:ff:5f:0e:e8:38:04:ac:37:
47:22:d2:56:b9:c7:9d:56:5c:a0:4e:a0:d8:61:d2:
42:a3:98:54:62:b7:81:f7:5c:4b:d8:49:c4:aa:ea:
36:04:3a:be:52:40:f5:2b:fe:54:19:17:59:e5:cc:
f4:01:18:c7:31:65:b2:49:24:42:e2:ad:86:6f:e6:
74:cd:65:99:5e:a4:3c:63:6b:4f:eb:77:8b:6b:cf:
32:61:74:00:a5:81:63:c7:4d:05:a4:6e:71:83:ba:
34:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6A:30:BC:E3:CE:DE:98:30:2C:3A:5C:28:FC:DE:AA:00:EB:17:57
X509v3 Authority Key Identifier:
keyid:04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:58:b7:29:5c:d1:3c:49:53:87:20:5c:4c:11:8b:19:6f:fc:
d9:4a:a5:0f:66:ec:c5:6c:11:53:58:9b:fc:bd:df:b3:c0:86:
df:0d:86:3f:a6:b7:e4:7a:fb:03:e4:ad:3b:e0:e5:c9:a3:5d:
a2:e6:d0:78:91:e4:59:b9:df:51:9c:42:f3:0e:cc:74:ef:0f:
13:c4:3c:30:61:6f:53:1a:ca:26:0a:fd:b4:a0:7a:c3:45:e3:
2c:84:f0:a0:00:ca:9e:a8:dc:85:a4:97:84:81:20:ab:69:2b:
f9:c9:ef:99:ff:de:24:5b:0a:ee:16:1c:ec:47:c7:e6:b7:04:
6a:82:c5:df:34:c8:a5:41:37:b9:4b:c8:88:2c:61:c3:d6:16:
a2:ca:30:e8:10:36:29:87:95:2e:e7:76:29:2e:28:67:1f:7f:
a2:7d:62:79:cb:4d:75:54:58:58:f7:da:ab:21:8a:08:29:6c:
93:51:79:8d:c8:8b:f6:4c:b4:fe:6b:98:1b:d8:41:8e:45:a0:
d6:a0:ce:b9:18:26:f8:1a:e8:7b:dd:99:bc:83:90:cb:0b:f8:
5f:33:ef:c3:9c:ac:62:76:e9:96:fb:0b:f6:c5:6b:f2:88:2d:
72:33:5f:5e:93:cc:8a:14:fb:f6:10:79:f2:5b:a4:45:71:c3:
ac:8c:98:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:56:29 2026 by rpki-client