
$ rpki-client -vvf rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
File: bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft (raw, json)
Hash identifier: yQxHRQIrTkClxzW+8qLkcFHj4RG9VliszFVANuJAb/A=
Subject key identifier: 43:0B:9C:73:AA:A9:70:51:45:46:A5:02:13:C1:F8:91:31:FD:A6:3E
Authority key identifier: 6C:22:97:F8:2E:21:83:74:94:13:92:65:2C:9C:8B:30:55:C8:63:A2
Certificate issuer: /CN=A912781D/serialNumber=6C2297F82E218374941392652C9C8B3055C863A2
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
Manifest number: 66
Signing time: Sun 19 Apr 2026 07:32:13 +0000
Manifest this update: Sun 19 Apr 2026 07:32:13 +0000
Manifest next update: Sun 26 Apr 2026 07:32:13 +0000
Files and hashes: 1: bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl (hash: r+7aMnUjNPvKTcaTx54QXcW8cibkrA72a2oybBLbuPo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl
rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912781D, serialNumber=6C2297F82E218374941392652C9C8B3055C863A2
Validity
Not Before: Apr 19 07:32:13 2026 GMT
Not After : Apr 26 07:32:13 2026 GMT
Subject: CN=69e484fd-b5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:d4:68:a3:3a:ad:92:dd:74:13:d9:b1:2d:
71:38:71:8d:6f:f4:b4:89:34:eb:78:f7:aa:79:f9:
c5:e5:0d:f1:6d:e4:c2:64:ca:36:32:c7:e0:da:08:
25:7e:f9:f1:fd:ed:c6:41:4f:69:46:74:87:50:8c:
18:67:1c:42:2e:3f:f1:fd:2a:8f:a9:1b:8b:a6:c6:
1d:f1:1b:a8:00:6f:d5:ef:83:55:85:d1:9c:f8:b6:
30:62:7c:7b:53:0e:8d:9f:f7:cc:30:14:44:a4:26:
b2:4e:eb:d4:9c:20:ef:17:25:ea:d4:ab:81:03:fe:
44:8f:a8:32:d8:26:7f:35:e2:2a:8f:ca:50:3d:f6:
96:c2:33:c4:e3:61:83:55:ef:cf:24:53:c6:cc:ad:
8c:48:66:40:92:ec:f3:5d:cb:e0:38:9d:12:72:c4:
07:94:d4:53:06:aa:93:67:cd:b6:97:d9:b8:fa:c9:
33:83:73:89:a9:f7:a9:cc:0a:5f:68:4a:13:93:e6:
27:c8:39:d6:15:ae:0b:44:ba:54:6c:9f:4b:ad:51:
44:d5:8b:28:1e:62:5d:7d:fc:47:15:26:b5:90:94:
4e:7f:52:df:92:08:b2:af:1f:a0:d1:ef:ab:cd:5d:
9a:50:5d:a6:2e:67:1d:06:7a:d6:43:9d:5f:a8:3e:
f6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0B:9C:73:AA:A9:70:51:45:46:A5:02:13:C1:F8:91:31:FD:A6:3E
X509v3 Authority Key Identifier:
keyid:6C:22:97:F8:2E:21:83:74:94:13:92:65:2C:9C:8B:30:55:C8:63:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:7d:81:4d:19:2c:ab:b8:74:e5:4c:c8:5b:9e:89:dd:be:f0:
e6:60:3e:88:bd:c3:f9:94:81:b4:91:1d:5c:4e:e0:8a:13:bc:
e9:b6:cd:71:fa:04:52:3a:40:d8:99:da:b7:56:4a:97:ca:15:
90:64:52:05:6b:07:c0:fa:01:27:36:49:d1:49:79:e0:cb:2d:
9e:3b:c1:c5:be:67:fd:1f:57:ce:70:14:b5:67:05:07:2a:71:
dc:70:b5:ad:7c:3a:2b:50:ef:38:e3:1f:d1:41:08:64:a4:58:
b9:e4:38:96:9e:0c:d9:92:a6:46:40:c0:35:06:41:7d:07:87:
b4:8e:cf:01:0f:db:50:0c:f2:45:3e:e5:62:77:4e:be:4b:07:
9f:20:db:fd:fd:1f:19:2a:7e:80:b3:35:63:bb:7a:d0:aa:1b:
9f:30:ab:40:ff:b4:49:9d:21:e2:a1:40:f2:27:85:6c:29:d3:
f8:06:ed:fd:bc:4c:19:87:d6:ed:12:0b:73:54:9a:ad:2a:17:
4d:e6:8a:5c:a9:c9:d4:a6:a0:3a:20:1f:1b:d8:3c:12:53:9e:
b8:8a:2e:4b:af:62:60:d0:f3:cd:ae:b0:4f:0f:74:6a:e7:6d:
86:68:3a:2c:2f:15:f5:9f:84:c4:9a:12:d9:2d:7e:d0:d9:bc:
20:1e:02:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:46:46 2026 by rpki-client