
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
File: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json)
Hash identifier: dB+YQclyj5izambN9eyFm6zbboL/VDNpNErR/JZfN6M=
Subject key identifier: D1:D7:7E:6F:B9:F5:6D:1F:9A:C9:F9:4F:DD:B6:B3:87:78:87:BF:53
Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6
Certificate issuer: /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
Certificate serial: 0291
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
Manifest number: 0285
Signing time: Tue 29 Sep 2026 02:15:20 +0000
Manifest this update: Tue 29 Sep 2026 02:15:19 +0000
Manifest next update: Tue 06 Oct 2026 02:15:19 +0000
Files and hashes: 1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: MsLTtXck+DVWoYMB0BkqarSTIsXks0CDPZyVsYROLgA=)
2: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: yifIUTqbn7Wd/uULyvr6BJeOjGF176Fhn2BVhJf8YA0=)
3: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: /jnNf6yhC1u/KapU+QnPIqPvCzJZYcUOSV+8kDzVszA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl
rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 02:15:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657 (0x291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126B7C, serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
Validity
Not Before: Sep 29 02:15:19 2026 GMT
Not After : Oct 6 02:15:19 2026 GMT
Subject: CN=6abb1f37-4436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:e6:0e:6e:3d:15:84:5b:a4:d1:ba:2d:f9:
6e:05:6f:7a:40:8f:a5:70:7e:19:c5:d9:95:5c:f1:
cc:18:59:b3:37:ad:18:bc:25:3d:98:21:c5:30:92:
c8:e0:90:cd:f5:a9:cd:71:d4:d7:e5:1a:fa:1f:9c:
50:5c:f3:91:34:34:0f:2f:0d:9e:b2:c7:68:cf:fa:
34:02:b9:5a:a0:df:d3:f3:ba:ab:09:fd:67:79:08:
e3:6a:68:46:40:2e:fe:2c:8a:9e:84:18:23:83:18:
82:d6:45:a3:87:e1:07:21:cb:21:00:8d:f6:2f:72:
c3:80:d0:5d:5e:91:96:34:66:41:1a:64:e1:08:d3:
10:37:7d:74:18:10:5b:9e:38:7a:86:81:72:92:a4:
b1:98:33:2b:d0:0a:2d:2a:14:70:8a:46:d7:09:84:
78:ef:5d:18:2a:b7:ac:c5:74:ac:13:bb:50:17:ec:
e6:1e:14:94:e9:3e:b1:79:4f:6c:81:1a:e7:c3:2f:
09:c0:6d:44:e2:7c:df:12:2f:a7:69:50:12:09:84:
c6:f5:99:f6:3f:0b:9e:9e:85:b5:cf:e9:11:92:21:
e4:4b:a6:ee:5c:d7:e6:03:75:80:64:ac:1f:63:70:
b5:ab:58:c6:41:ad:4a:2f:46:68:a6:d3:7b:58:50:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D7:7E:6F:B9:F5:6D:1F:9A:C9:F9:4F:DD:B6:B3:87:78:87:BF:53
X509v3 Authority Key Identifier:
keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:8c:85:a7:f2:5f:7a:4f:bb:a0:85:ea:b8:44:8d:9f:5e:53:
24:7b:d8:24:b9:d7:21:54:cd:90:b8:40:09:49:14:3c:4b:f8:
f4:20:f6:83:bd:b7:65:b1:43:ef:c7:8a:3a:7a:03:36:b0:b6:
6d:22:9d:cc:5a:0d:c3:e2:b0:bf:64:38:3c:7f:eb:50:56:4a:
0a:fe:c6:e7:cb:f0:8b:6d:d4:30:bf:f7:ab:cf:f6:b1:e0:85:
0f:6f:59:bc:8b:42:35:ab:ba:99:4d:84:ca:b0:03:f9:0b:fa:
0f:f4:a9:de:54:a9:46:7e:9e:27:8b:38:8d:1c:76:21:ec:42:
5a:e5:92:28:36:7f:26:16:73:84:4a:f3:5e:ef:06:38:d6:88:
27:e0:10:c6:d8:e9:28:59:44:7f:d5:b2:1c:e4:7c:ed:81:b8:
ba:3f:c1:13:80:02:d2:9c:d8:69:7e:19:22:67:c7:96:4e:7d:
82:03:30:2f:63:24:e3:d9:03:26:5d:1c:36:56:28:c3:81:e3:
bf:93:0e:59:f4:38:90:86:bb:99:3c:b8:92:0a:f2:72:36:91:
2d:0e:63:90:86:36:e5:45:ea:e5:c3:24:d4:d6:4f:d0:bb:1f:
9a:40:fb:01:79:dd:d5:04:23:52:c6:f7:7d:58:eb:61:85:cb:
01:44:56:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:56:15 2026 by rpki-client