
$ rpki-client -vvf rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
File: bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft (raw, json)
Hash identifier: S/U3dHgJDiLo/VSjl/ou4xhrr+6/uYt7dChwoeYbfXc=
Subject key identifier: 56:64:A4:12:38:8A:8A:AD:36:0E:CE:D3:75:75:89:90:7A:B9:51:34
Authority key identifier: 6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A
Certificate issuer: /CN=A912978E/serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A
Certificate serial: 020F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
Manifest number: 0207
Signing time: Sat 13 Jun 2026 03:06:30 +0000
Manifest this update: Sat 13 Jun 2026 03:06:30 +0000
Manifest next update: Sat 20 Jun 2026 03:06:30 +0000
Files and hashes: 1: bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl (hash: yvyYedUySDZ0ve6QaTl79kDpf3tso6KrTl0xus6lp9E=)
2: 59923F2CA72011EEA63ABF4AC4F9AE02.roa (hash: jTw+k2qXsMBUja+xPqB6A7knrLM1Ewwr/1IeQgLz3tU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl
rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912978E, serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A
Validity
Not Before: Jun 13 03:06:30 2026 GMT
Not After : Jun 20 03:06:30 2026 GMT
Subject: CN=6a2cc936-0f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:70:c2:60:1e:fb:3d:dc:70:47:fb:68:a5:
90:f2:1b:29:ec:20:15:e6:65:af:50:0b:6b:19:36:
04:6f:9f:50:52:2f:9e:7c:1d:f6:93:2f:84:4e:06:
8e:67:65:86:15:14:11:ba:9f:e1:e0:a4:f0:e6:71:
b6:05:7e:f0:5c:71:89:2d:50:c5:64:62:f2:f1:bc:
9b:34:5c:ee:d0:b7:35:29:61:b8:cd:fc:18:ca:0b:
15:c1:b9:b5:b4:b4:55:10:74:3c:08:65:d8:4c:e5:
80:41:aa:30:d4:83:9c:ca:08:ca:26:98:fc:55:bc:
de:a9:e0:5b:5e:57:57:e8:fd:65:27:d9:9e:47:ec:
32:71:6d:15:04:0e:e0:74:c9:b1:0e:9a:8a:09:14:
65:41:48:d0:0a:69:7a:50:26:3e:4b:d3:f0:69:66:
24:82:d8:19:2f:36:e2:cd:1f:b6:d6:7f:3a:d1:d0:
19:1f:f5:20:f8:54:f3:61:01:60:ae:0d:0d:5c:e0:
69:ac:4d:7a:6d:6f:c9:34:d4:fe:51:31:a4:b9:22:
a7:be:5a:9f:f8:f3:50:b1:ab:31:6f:48:92:d9:25:
83:a7:63:91:5a:97:c3:2a:62:83:c0:b8:88:72:c0:
20:07:13:5a:5a:e2:75:48:30:52:15:ff:c0:0f:1e:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:64:A4:12:38:8A:8A:AD:36:0E:CE:D3:75:75:89:90:7A:B9:51:34
X509v3 Authority Key Identifier:
keyid:6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:21:bd:1c:03:cf:a6:7c:13:3b:96:d1:92:39:ca:e2:d2:a1:
01:ad:b0:8e:ad:fe:89:76:5e:6d:2f:7f:5a:8d:97:6e:db:17:
95:ca:1d:a4:4d:f9:8b:4f:14:d1:c9:10:cd:a6:7b:74:20:c1:
d5:bc:00:e5:b4:22:dd:ec:e5:24:24:52:83:1e:01:46:08:4b:
95:fe:b6:3f:b1:e4:77:a7:f1:65:c7:fa:27:4f:6d:d8:03:5b:
b4:13:cc:e8:ff:3b:f7:82:a3:b7:78:6b:10:1e:75:42:61:24:
00:f5:31:ff:5f:61:dd:cb:d2:56:e4:74:0f:eb:67:5a:c8:07:
8a:e1:b2:24:ce:a7:15:bf:4b:04:e3:04:15:e3:95:c5:32:cd:
3a:d1:c5:39:1c:28:e5:30:6b:d3:cf:31:7b:fe:e9:c9:de:88:
26:ea:ef:fb:1f:6e:92:f1:3b:98:5d:69:41:33:31:a3:cc:73:
57:7c:66:b5:bc:5f:2d:bf:13:e4:da:eb:0f:db:0b:70:e7:ad:
92:35:3f:64:a5:2d:57:bf:6c:b2:ee:d9:80:51:5c:44:21:55:
4a:22:91:32:a6:b6:01:16:bb:9e:93:1e:63:94:a7:cc:0d:5e:
ed:da:f5:5b:50:b6:11:9f:10:c5:60:a0:3a:e7:8e:e3:bf:e7:
0d:33:96:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:17:10 2026 by rpki-client