
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
File: BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft (raw, json)
Hash identifier: vVH22wYvBxfzrvMDlrOyusQqG+4yMw03jgxBp2lb4Xw=
Subject key identifier: A0:AE:CA:2A:49:44:EE:52:53:64:5B:C7:CC:81:4E:5D:F9:72:81:40
Authority key identifier: 04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9
Certificate issuer: /CN=A9120BC1/serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9
Certificate serial: 63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
Manifest number: 5E
Signing time: Sun 01 Mar 2026 09:30:04 +0000
Manifest this update: Sun 01 Mar 2026 09:30:03 +0000
Manifest next update: Sun 08 Mar 2026 09:30:03 +0000
Files and hashes: 1: BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl (hash: FDpv2lig6IvvRgDtsdgw5OiwuucS7eqXIS05kFSvByo=)
2: 309260868C7311F0A82E0E57C4F9AE02.roa (hash: DfBJQ3k9mLnvtH5/59OE4Ql1Nm5pTBAatkbZQBsoojY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl
rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120BC1, serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9
Validity
Not Before: Mar 1 09:30:03 2026 GMT
Not After : Mar 8 09:30:03 2026 GMT
Subject: CN=69a4071b-3a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:d9:50:58:69:13:f2:eb:1b:82:d7:b9:bc:
f2:f1:f7:17:46:97:51:ea:7c:da:a0:43:f4:f4:40:
1d:48:e0:be:a6:97:af:58:0c:37:de:c3:c0:4f:79:
5b:be:d2:d9:4c:34:eb:e9:1f:ea:02:57:7d:a9:34:
45:0d:e5:5f:eb:27:ef:28:e2:3f:a0:e7:ef:e9:fb:
10:63:c0:01:f6:c2:74:9a:8b:dc:d1:ac:c2:f1:03:
6c:4e:6a:7d:18:71:f6:9f:58:5c:a6:f1:81:4f:eb:
47:11:32:52:58:9a:c4:c6:b9:ec:ed:ba:13:ac:de:
da:7e:93:a2:87:6e:6c:ba:9b:b5:9a:70:70:d5:2c:
f0:23:29:8c:5a:3d:3c:dd:ab:5b:47:a0:20:ea:5c:
18:6f:4d:7f:cc:94:0d:e3:ae:db:67:b1:73:b2:19:
1d:bf:6a:44:57:3d:d6:c8:27:21:6a:05:ad:ea:af:
69:30:f3:ff:86:43:9d:f7:12:6c:68:32:de:f8:51:
d8:f1:4b:f5:3e:4a:90:17:ba:ea:09:bf:cc:61:63:
ee:7b:99:51:5c:70:5e:c2:68:f9:1a:13:df:1f:de:
a1:a4:37:73:26:d1:30:21:8b:45:4a:cf:74:a3:27:
4e:2c:0a:fe:d0:48:76:0a:dc:4c:75:e5:ed:aa:af:
90:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AE:CA:2A:49:44:EE:52:53:64:5B:C7:CC:81:4E:5D:F9:72:81:40
X509v3 Authority Key Identifier:
keyid:04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:43:b4:40:3a:d4:44:8c:09:59:13:43:94:07:c5:1a:ab:99:
06:09:56:b3:70:9f:45:72:29:52:53:ea:8a:9f:73:10:5c:f9:
20:b2:a8:1a:4a:af:7e:b9:b3:da:59:e1:e6:94:7c:91:0a:a6:
56:cd:7c:aa:ca:54:f3:1f:a9:df:5f:86:d4:86:b1:a4:c0:bb:
33:58:43:f1:a5:54:e7:d9:03:ed:be:99:8d:0b:a2:e9:a1:5e:
4e:69:b0:d5:39:66:07:70:3a:5d:2e:91:de:9c:e1:3c:ed:5a:
71:40:38:3e:92:9a:14:11:95:5c:3f:49:d9:5f:54:f2:85:9d:
66:a6:87:2c:ec:d3:f1:4d:c0:c8:fb:92:49:68:25:16:09:fd:
95:c2:b8:39:07:14:c7:b9:2a:4a:db:ce:73:f9:00:ac:60:ac:
45:ae:0e:27:a1:9a:c3:ce:8e:2e:3a:4b:c2:91:27:ac:49:c7:
63:ae:db:14:b1:09:f3:dc:cc:9f:05:9c:2c:49:56:e4:20:6f:
e1:5a:52:c6:20:65:d0:8d:51:6e:5a:b1:d8:08:cc:57:1d:65:
42:0c:78:a2:61:7e:90:af:fa:07:61:4b:54:96:73:01:cb:0c:
1a:48:3f:df:1f:6b:94:bc:52:a0:24:4b:c6:ca:cc:ef:32:ac:
ce:17:ab:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:07:49 2026 by rpki-client