
$ rpki-client -vvf rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
File: bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft (raw, json)
Hash identifier: K13ItcY1ty2JvKYZgzAqNadyE+kz8gpkDj91ltBi8v4=
Subject key identifier: FA:CE:6A:DD:FF:A2:D8:B1:1D:2A:6F:80:E0:6E:C1:71:4B:28:61:F6
Authority key identifier: 6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A
Certificate issuer: /CN=A912978E/serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A
Certificate serial: 0225
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
Manifest number: 021D
Signing time: Mon 27 Jul 2026 04:25:34 +0000
Manifest this update: Mon 27 Jul 2026 04:25:33 +0000
Manifest next update: Mon 03 Aug 2026 04:25:33 +0000
Files and hashes: 1: bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl (hash: jb8i5J44fCnlZL4FHu9rRiqwkkRYZunj+Dri+jYNdv8=)
2: 59923F2CA72011EEA63ABF4AC4F9AE02.roa (hash: jTw+k2qXsMBUja+xPqB6A7knrLM1Ewwr/1IeQgLz3tU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl
rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:25:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912978E, serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A
Validity
Not Before: Jul 27 04:25:33 2026 GMT
Not After : Aug 3 04:25:33 2026 GMT
Subject: CN=6a66ddbe-eec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:fc:80:94:97:12:ed:78:72:d9:63:e0:23:
15:7c:4c:e7:f8:61:95:ae:85:9d:2b:e0:e0:71:d8:
f4:0c:2d:2c:31:9a:b9:6a:59:49:7b:24:db:ce:91:
1b:31:91:b0:37:46:ef:9c:56:3f:52:ab:ce:fb:0c:
a1:2d:dc:07:57:c6:86:40:2f:4b:56:86:83:03:4b:
31:85:c5:5a:6b:e8:41:b8:7f:f7:ea:53:2a:16:3c:
4c:51:55:6f:23:8d:38:20:49:cb:17:32:1a:b8:a6:
56:6c:8c:bf:39:84:04:58:60:29:00:29:f1:cc:68:
c2:94:8d:ca:59:79:e2:2c:4a:e8:11:56:ef:38:4c:
dc:d0:de:a6:58:1f:31:2a:8b:e4:28:2e:bd:05:b7:
5d:94:9c:13:2d:cf:37:62:01:12:ac:59:a3:0f:09:
a0:25:4b:16:f3:c6:e3:a2:fc:27:17:3c:47:98:72:
d2:fa:47:c7:61:dd:69:21:1e:4d:b6:57:bc:e4:3b:
c8:b3:1a:a0:c8:28:46:1d:dc:10:cd:80:e7:10:9d:
bd:fa:ce:9e:44:79:96:51:ff:d0:0d:ff:28:30:3d:
d8:f4:f8:98:6a:4f:97:ca:c0:35:25:2c:d2:5f:73:
34:1e:79:e9:a2:45:9a:0d:92:e9:5b:16:c8:44:49:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CE:6A:DD:FF:A2:D8:B1:1D:2A:6F:80:E0:6E:C1:71:4B:28:61:F6
X509v3 Authority Key Identifier:
keyid:6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:c3:c7:00:ac:fc:c6:e6:e2:43:7f:f7:6d:9a:8b:c3:6f:6a:
21:38:6c:65:bb:2b:1c:a3:48:a7:8d:3e:a1:d0:d4:31:d5:47:
da:02:6f:cd:84:15:76:16:fb:27:72:46:03:f7:08:1d:63:d9:
a2:3f:eb:d3:53:e3:37:16:3f:02:09:6d:e9:95:8f:95:83:54:
aa:4e:5d:c1:17:e2:34:77:90:ab:92:10:7b:a6:8b:5a:3b:69:
b7:36:76:c9:a6:f1:dc:fc:90:c5:8f:df:1d:ca:92:d6:b8:ad:
d8:fb:b8:95:31:20:97:a8:17:f7:f2:70:3f:78:21:f4:d3:dc:
e6:c0:70:8d:86:da:ba:d7:d5:88:a1:5c:e7:f8:1f:96:5f:c3:
11:c4:5e:d8:24:93:3b:bb:c9:f2:7f:d5:00:38:ef:87:37:98:
38:2d:f5:ad:0c:62:9e:a3:a3:25:bb:36:e3:6e:c6:4e:70:0f:
78:be:c3:97:d1:9f:62:f7:fb:24:1f:66:c3:dd:65:0a:05:b5:
52:ad:58:0c:4f:a2:b9:9b:ae:26:03:86:eb:a2:e4:73:57:25:
cc:3a:49:f2:90:a7:8f:5f:4d:8b:14:6c:1a:53:f9:d5:46:0e:
98:f4:03:20:2d:97:45:99:c6:69:66:da:41:1d:11:d8:35:24:
6d:51:db:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:06:19 2026 by rpki-client