
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft
File: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft (raw, json)
Hash identifier: Jqg9Z0O5a6Xvm7vO77Q4aDgxIRT+FYxW0slEM6nfO8g=
Subject key identifier: 81:E0:B2:D3:7D:18:E4:B2:03:C5:E3:B7:0B:FF:FA:94:98:59:99:32
Authority key identifier: F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63
Certificate issuer: /CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63
Certificate serial: 0159
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft
Manifest number: 0154
Signing time: Wed 25 Mar 2026 04:17:44 +0000
Manifest this update: Wed 25 Mar 2026 04:17:43 +0000
Manifest next update: Wed 01 Apr 2026 04:17:43 +0000
Files and hashes: 1: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl (hash: FXRj3H8V+kqNk2gcSnS5hKJYCfr/tFHBOPxpuiidUxA=)
2: F6668BF41FF311EFB0A97A82C4F9AE02.roa (hash: eZb19K4Y/DQ/sNU4ZXv4s8zJTek1JXBNOEh4fBR+KDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl
rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57A9, serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63
Validity
Not Before: Mar 25 04:17:43 2026 GMT
Not After : Apr 1 04:17:43 2026 GMT
Subject: CN=69c361e8-410f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:aa:60:13:ec:84:3b:cf:96:a5:2e:c3:67:b0:
c0:e4:16:7a:fa:12:84:53:37:67:0c:b1:25:10:57:
f9:ca:35:26:1c:e5:06:ee:3f:dd:4d:d6:98:6c:51:
62:25:b7:7f:55:5a:2b:ba:03:f0:2c:c5:56:f0:ed:
73:86:d7:5a:40:b6:94:25:4c:ca:09:91:03:b0:02:
80:b5:f2:fe:33:80:35:c1:ae:69:e2:0e:f8:0b:73:
04:89:88:5a:2a:c7:f8:b3:73:72:b6:fc:c2:15:35:
9b:20:87:ce:78:32:4a:aa:9b:e9:3a:99:c2:3f:7c:
a4:d8:9c:a5:53:76:24:b4:bd:ab:49:8f:76:43:ee:
49:72:92:a0:fc:51:04:e4:1f:06:70:b7:bd:d0:4c:
ff:49:6b:ec:25:6b:9a:3a:2d:c9:a8:cc:43:be:0d:
e6:22:c4:d3:9c:cf:55:7e:f5:71:ef:fc:47:79:c0:
b8:1c:5a:7a:08:b8:42:17:8a:de:6e:aa:4a:1f:bb:
b3:73:c7:57:4a:a2:6a:aa:0f:02:a7:81:57:57:43:
a3:99:c9:7d:c0:ef:a1:9a:a9:f1:68:5e:3c:1a:da:
05:61:1b:fd:24:61:0b:17:7c:5d:ff:a5:6c:99:c5:
fd:1e:d3:39:29:a5:5e:f0:69:86:c9:c2:9b:00:99:
3e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E0:B2:D3:7D:18:E4:B2:03:C5:E3:B7:0B:FF:FA:94:98:59:99:32
X509v3 Authority Key Identifier:
keyid:F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:62:55:21:31:48:ed:bc:31:38:d1:24:1c:b1:01:ff:7f:46:
1d:db:43:3c:fa:b6:f6:35:f6:c7:17:30:08:b1:fb:c0:e6:65:
1c:bb:7f:6f:3f:71:31:01:f3:4a:7f:19:b4:a5:34:b0:ef:bc:
cd:dc:e3:64:3f:16:59:4e:78:3f:39:19:5a:2c:c3:d6:8f:12:
d0:53:88:6d:57:b8:41:ea:97:d0:68:5a:ed:ef:3d:f8:2b:bd:
a6:00:91:64:7d:79:a8:7d:d6:34:45:0f:e4:01:ae:ce:27:19:
d5:6c:0b:a3:ac:42:d2:c5:45:27:48:a5:0b:02:34:c0:61:66:
e7:de:7c:e5:6e:54:08:11:3a:46:bd:93:00:22:e4:2a:57:8d:
19:5b:13:9c:63:84:93:a6:65:89:3a:a8:08:19:2e:bb:30:17:
fe:4e:73:1a:3c:c7:9b:df:fc:bb:08:a1:93:33:a7:ac:09:73:
a1:b9:8d:fb:6b:6f:90:29:88:ef:60:20:32:e2:dc:ba:7f:77:
83:72:2e:46:0f:8f:67:ca:2b:e8:4a:ca:00:3c:59:02:62:4c:
66:35:80:37:1e:cf:79:8d:a3:4d:9e:6c:85:f8:43:2c:20:3f:
95:cb:af:14:0b:8a:b2:1a:62:5d:cd:c5:68:63:7d:e2:b8:f7:
2b:f9:ac:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:47 2026 by rpki-client