
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
File: BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft (raw, json)
Hash identifier: 1o4rITgD8v5wY+LfMqXssO0mUk71aV+KlbvId2fh/oA=
Subject key identifier: 68:AA:E2:AB:D2:EC:79:90:CC:CA:EA:F9:55:2C:52:D1:66:61:36:81
Authority key identifier: 04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9
Certificate issuer: /CN=A9120BC1/serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9
Certificate serial: 96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
Manifest number: 91
Signing time: Thu 11 Jun 2026 09:46:28 +0000
Manifest this update: Thu 11 Jun 2026 09:46:28 +0000
Manifest next update: Thu 18 Jun 2026 09:46:28 +0000
Files and hashes: 1: BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl (hash: sCQb6wWepRcJH5JUrA47L8euhogjTK4SojC0gkok56s=)
2: 309260868C7311F0A82E0E57C4F9AE02.roa (hash: DfBJQ3k9mLnvtH5/59OE4Ql1Nm5pTBAatkbZQBsoojY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl
rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 09:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120BC1, serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9
Validity
Not Before: Jun 11 09:46:28 2026 GMT
Not After : Jun 18 09:46:28 2026 GMT
Subject: CN=6a2a83f4-3f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:37:4d:d0:10:44:04:79:fe:24:83:df:a8:
8f:28:ce:35:25:46:21:3e:cd:a9:32:ca:c1:86:57:
27:6c:e5:25:ff:38:d7:21:40:4a:a5:49:b1:1f:4d:
6a:ee:2b:0e:9d:cd:60:68:77:26:d3:09:fb:8c:dc:
38:16:38:f3:65:26:96:a0:a8:91:00:2a:e5:58:a5:
59:ca:46:24:5c:3e:a5:3d:a4:eb:91:b1:ac:2b:d5:
8d:50:72:e9:ea:b9:d9:d9:60:0b:9d:71:37:49:21:
df:d9:a6:ad:39:66:74:f2:1f:de:90:06:09:ec:dd:
4e:de:62:eb:72:f8:27:66:a2:8d:09:06:96:1f:8e:
59:db:01:ef:d6:b7:f2:cd:e8:77:61:f6:8a:68:0f:
9a:33:f2:0d:05:62:43:9b:8b:f4:6a:02:70:e0:db:
39:25:3d:00:6e:a8:b9:57:ae:c4:3f:92:5d:60:fd:
50:2f:d4:5c:70:71:ab:22:ce:db:a3:0f:26:38:b9:
46:6f:1d:eb:b3:3b:2c:bc:c2:c0:f3:42:53:08:86:
8c:ca:fa:7a:28:23:31:e7:70:cc:b3:c4:b1:2b:7a:
69:b4:b8:fa:8f:2f:c6:44:81:f7:d4:af:b0:47:91:
7f:72:d2:e7:bd:d4:12:f0:0e:11:ff:df:f1:7f:19:
03:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AA:E2:AB:D2:EC:79:90:CC:CA:EA:F9:55:2C:52:D1:66:61:36:81
X509v3 Authority Key Identifier:
keyid:04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a0:29:fb:4c:89:fb:82:9b:8d:ea:54:af:fc:c7:09:3e:ef:
d6:e6:3a:f7:88:8a:86:28:f7:2d:da:e0:3f:86:1f:e6:41:42:
6c:3e:db:48:29:dc:fd:f6:ab:f1:66:56:89:9e:8e:a6:a5:49:
e6:36:0c:4c:4e:34:dc:30:a0:66:99:eb:bc:ea:8d:09:88:ae:
3c:4d:f6:75:f3:49:69:e9:e9:02:76:5c:ef:64:f4:40:0b:c0:
a0:69:dd:c7:a9:77:72:a2:33:d7:eb:42:5b:8b:a3:43:98:65:
e6:ef:50:79:49:b0:36:07:28:df:9d:5c:1d:01:07:92:ff:c5:
29:d5:68:3c:f6:4b:66:c1:91:30:1d:a7:ca:37:23:17:74:0e:
84:46:ff:6d:ae:94:80:69:42:2c:50:94:92:9f:33:fb:96:ae:
ec:b2:89:ba:21:52:6d:4d:fc:19:c6:5a:e7:60:b0:d4:dc:71:
a4:bc:eb:40:89:20:fd:db:94:c0:c6:3d:48:80:cd:97:b2:c8:
a2:07:ca:f8:c7:1f:6a:8d:9d:e3:1a:cb:f2:33:0c:42:34:3b:
da:f9:0e:0e:e9:d9:9e:c8:05:96:d1:7d:b6:64:dc:c3:63:74:
5b:4f:d3:1c:e1:bb:e7:2f:74:29:f0:90:12:51:7c:10:ca:d2:
46:87:fb:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBCQzExMTAvBgNVBAUTKDA0QThGMjhGNTI3RTE4OTE2N0FDQzkwMzBDQkVEQUQ4
QTlDNDE3QjkwHhcNMjYwNjExMDk0NjI4WhcNMjYwNjE4MDk0NjI4WjAYMRYwFAYD
VQQDEw02YTJhODNmNC0zZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxgY3TdAQRAR5/iSD36iPKM41JUYhPs2pMsrBhlcnbOUl/zjXIUBKpUmxH01q
7isOnc1gaHcm0wn7jNw4FjjzZSaWoKiRACrlWKVZykYkXD6lPaTrkbGsK9WNUHLp
6rnZ2WALnXE3SSHf2aatOWZ08h/ekAYJ7N1O3mLrcvgnZqKNCQaWH45Z2wHv1rfy
zeh3YfaKaA+aM/INBWJDm4v0agJw4Ns5JT0Abqi5V67EP5JdYP1QL9RccHGrIs7b
ow8mOLlGbx3rszssvMLA80JTCIaMyvp6KCMx53DMs8SxK3pptLj6jy/GRIH31K+w
R5F/ctLnvdQS8A4R/9/xfxkD2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGiq4qvS
7HmQzMrq+VUsUtFmYTaBMB8GA1UdIwQYMBaAFASo8o9SfhiRZ6zJAwy+2tipxBe5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEJDMS9EQUM2MDM4ODhD
NzIxMUYwQTJCMEFFNTZDNEY5QUUwMi9CS2p5ajFKLUdKRm5yTWtEREw3YTJLbkVG
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JLanlqMUotR0pGbnJNa0RETDdhMktuRUY3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MEJDMS9EQUM2MDM4ODhDNzIxMUYwQTJCMEFFNTZDNEY5QUUwMi9CS2p5ajFKLUdK
Rm5yTWtEREw3YTJLbkVGN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC6Ap+0yJ+4KbjepUr/zHCT7v1uY694iKhij3LdrgP4Yf5kFCbD7bSCnc/far
8WZWiZ6OpqVJ5jYMTE403DCgZpnrvOqNCYiuPE32dfNJaenpAnZc72T0QAvAoGnd
x6l3cqIz1+tCW4ujQ5hl5u9QeUmwNgco351cHQEHkv/FKdVoPPZLZsGRMB2nyjcj
F3QOhEb/ba6UgGlCLFCUkp8z+5au7LKJuiFSbU38GcZa52Cw1NxxpLzrQIkg/duU
wMY9SIDNl7LIogfK+Mcfao2d4xrL8jMMQjQ72vkODunZnsgFltF9tmTcw2N0W0/T
HOG75y90KfCQElF8EMrSRof7Qg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:00:58 2026 by rpki-client