
$ rpki-client -vvf rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
File: bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft (raw, json)
Hash identifier: /03TTDX/mI+QVZbMjjfXoSo3ZUn6Gpeg/7RSfZkTuTo=
Subject key identifier: C5:4A:E5:6E:68:08:39:ED:D1:AC:84:AB:87:3D:7D:FE:96:09:A8:A9
Authority key identifier: 6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A
Certificate issuer: /CN=A912978E/serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A
Certificate serial: 01F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
Manifest number: 01EC
Signing time: Sun 19 Apr 2026 03:05:36 +0000
Manifest this update: Sun 19 Apr 2026 03:05:35 +0000
Manifest next update: Sun 26 Apr 2026 03:05:35 +0000
Files and hashes: 1: bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl (hash: BoUb7zkUSEgtS9tHQ5F8qYs0dLeHT42OBpNNpO6pvXg=)
2: 59923F2CA72011EEA63ABF4AC4F9AE02.roa (hash: jTw+k2qXsMBUja+xPqB6A7knrLM1Ewwr/1IeQgLz3tU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl
rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 03:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912978E, serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A
Validity
Not Before: Apr 19 03:05:35 2026 GMT
Not After : Apr 26 03:05:35 2026 GMT
Subject: CN=69e4467f-d36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:f9:91:f4:14:d6:df:b1:90:4e:bd:2d:7b:
6f:a4:40:af:6b:a1:57:9a:d8:37:aa:8d:9c:12:4f:
be:b6:e9:a1:07:81:97:b9:e5:bb:33:06:c7:3e:4e:
5a:61:3c:69:19:7a:c2:8d:63:15:03:0e:c3:13:45:
9c:0f:83:8f:e7:89:44:b0:25:47:49:be:ad:c7:99:
52:93:e0:8e:9a:6b:68:11:bc:d8:73:bf:d4:ce:2a:
c6:d1:62:07:4d:9e:40:2d:05:1a:27:03:bc:43:86:
2f:60:ac:72:58:08:a6:fe:ff:01:ca:4d:7d:cb:76:
ce:b5:5b:89:d6:66:ad:7f:29:47:ec:79:6d:de:5d:
c5:05:1d:7d:98:26:d5:ae:71:b3:f2:80:ec:d0:c7:
37:9b:92:53:bc:5a:4c:a7:ef:f4:13:95:30:20:5e:
4f:70:d3:dc:f0:91:de:49:d5:ba:ac:93:1a:6f:77:
6d:61:99:d3:03:a1:25:a0:4a:cc:9e:f9:78:25:05:
d8:73:c0:88:57:21:3f:9f:c4:8a:b4:2c:fc:cf:7f:
1f:95:4c:07:e3:25:f3:ec:0f:78:2c:2f:9f:6f:d9:
d8:7c:6c:45:c9:34:20:13:23:dd:bf:77:4d:5c:e2:
cb:96:86:3a:e9:16:2f:6f:f7:1b:cd:ba:c2:24:72:
45:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4A:E5:6E:68:08:39:ED:D1:AC:84:AB:87:3D:7D:FE:96:09:A8:A9
X509v3 Authority Key Identifier:
keyid:6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:11:d2:35:7f:ee:64:21:62:15:92:b1:b7:4f:71:3c:99:d1:
3c:bd:f4:a3:72:4b:b7:d6:94:62:3d:2f:9c:0a:eb:b1:13:3e:
09:d3:9f:76:ea:7f:ed:d6:23:cc:ee:9e:5c:92:f9:08:9b:f6:
eb:f4:f7:3c:11:94:04:c1:dd:d2:e3:ca:e6:80:40:72:bf:76:
1b:17:47:2d:f2:a2:59:37:48:dd:73:0d:5d:59:1b:9c:1f:b0:
b1:16:d7:99:45:1d:56:6d:51:b5:59:a5:8c:f8:18:50:92:12:
a9:4d:e3:1b:03:fa:80:68:6b:b5:bf:01:04:32:1a:71:66:af:
5b:08:cd:8f:28:00:9f:e0:e3:96:ff:af:a4:3b:19:ae:7c:14:
cb:c6:56:a1:03:ae:fd:55:04:fc:3c:c5:46:ef:59:16:49:70:
49:9d:fb:ff:04:f3:ba:69:08:ea:41:6b:0c:73:2f:7d:87:17:
9e:c9:53:62:3a:0c:50:3a:41:ca:77:37:08:b9:9e:b0:d2:aa:
39:bf:bb:26:8b:61:22:11:4e:d3:99:9e:c5:39:87:85:b5:06:
b3:30:85:ea:b1:71:b7:97:c7:cd:da:1d:71:05:e0:6e:cc:b2:
55:1e:33:dc:77:47:78:98:7e:e3:4e:c7:9c:d9:c8:f7:6f:7a:
0b:5f:fd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:02 2026 by rpki-client