
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
File: BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft (raw, json)
Hash identifier: E6aSiJvsixlsEIMH4SKyaOVj78X46aPdTyAMm3celgQ=
Subject key identifier: 90:57:A1:73:0D:23:F3:85:AB:4F:9F:E2:09:CA:B1:92:0C:78:7A:03
Authority key identifier: 04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9
Certificate issuer: /CN=A9120BC1/serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
Manifest number: C7
Signing time: Fri 25 Sep 2026 06:53:55 +0000
Manifest this update: Fri 25 Sep 2026 06:53:55 +0000
Manifest next update: Fri 02 Oct 2026 06:53:55 +0000
Files and hashes: 1: BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl (hash: iqBLUtkwMwFfq3ptq21tB4EgzqAxtaBPmT9Qg64z2sE=)
2: 309260868C7311F0A82E0E57C4F9AE02.roa (hash: DfBJQ3k9mLnvtH5/59OE4Ql1Nm5pTBAatkbZQBsoojY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl
rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120BC1, serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9
Validity
Not Before: Sep 25 06:53:55 2026 GMT
Not After : Oct 2 06:53:55 2026 GMT
Subject: CN=6ab61a83-46f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:fc:4f:2f:a6:e7:c3:56:9d:09:1a:29:a7:
1a:9e:6f:5e:c8:ce:5f:7d:14:f1:7e:6a:ee:2d:eb:
70:71:24:aa:5a:54:85:e8:54:32:6b:cb:d6:d4:7d:
ab:10:e8:f2:5a:6a:f2:32:f5:4f:99:43:ac:1c:7d:
ab:c5:a5:b3:4d:89:a6:47:66:c2:e2:64:8c:43:7a:
bc:a1:86:36:fb:2b:36:9a:2c:a8:58:d1:cb:c2:f7:
cc:0c:43:75:51:3c:2b:df:f1:2a:9a:f6:2b:02:f2:
ea:dc:7b:03:cd:a8:b4:df:c3:46:8a:6f:cf:2c:c0:
3b:08:fb:b5:88:f6:47:41:6a:60:41:91:36:7e:f9:
03:6c:b7:ba:78:d2:41:a8:c5:bf:6f:c4:fb:6f:5b:
94:2e:ee:74:71:69:6d:e7:a6:00:62:12:0e:36:00:
0f:8a:e5:66:d9:65:c5:ba:1d:80:ed:ea:3d:d3:ab:
79:42:23:97:5c:dd:d0:2b:7a:ec:a5:d3:80:f1:e2:
fa:f7:fb:b0:87:b3:fb:c2:d3:ba:3b:4d:66:6b:ab:
d4:af:35:67:81:9c:61:92:f7:2b:e5:73:ba:c3:74:
6b:d6:77:65:c6:b0:27:91:de:30:df:cf:ec:bd:e8:
68:55:c1:e9:53:ae:84:cd:82:0b:57:81:60:55:fc:
01:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:57:A1:73:0D:23:F3:85:AB:4F:9F:E2:09:CA:B1:92:0C:78:7A:03
X509v3 Authority Key Identifier:
keyid:04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:43:a8:0a:b1:70:53:b8:5e:39:7c:31:88:86:a8:ea:2e:69:
15:b8:1b:06:2f:4a:dd:a8:c4:f8:ec:40:65:f6:82:76:df:b2:
89:cf:e2:2b:aa:9e:e6:02:2f:fc:c3:4d:e5:3e:53:c5:06:3b:
24:00:a7:2b:ca:71:e6:92:f2:71:de:7a:33:1b:55:92:a6:ec:
b1:3f:de:5e:92:d2:cb:2e:71:fb:68:94:70:cf:e4:67:d0:52:
ed:d7:60:24:47:69:62:d1:bb:a8:98:94:ca:c8:69:5f:05:ce:
14:cd:12:15:54:b1:60:f5:c2:60:e0:b1:e1:9b:51:f1:42:87:
c9:20:39:52:37:ce:3f:ea:08:ff:55:68:79:75:6a:3d:66:0b:
7d:01:a5:1f:25:67:c4:71:bd:1b:f5:5b:2e:9e:d8:21:c9:0e:
3e:01:3b:e5:ca:cd:98:9d:8c:03:7d:53:40:62:72:c1:17:8e:
4f:2b:08:84:62:85:23:cc:40:e6:e8:c9:fc:8c:dd:be:67:05:
16:2e:c6:88:f8:d5:7d:40:b1:86:46:91:68:a9:52:04:ab:c1:
59:25:e1:f6:4e:6c:97:93:ce:35:ab:22:8d:d9:33:12:b8:d1:
e9:6f:8a:24:85:86:e9:9b:9a:8b:4c:de:ed:7a:37:2f:c9:80:
96:a4:18:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:19:53 2026 by rpki-client