
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
File: bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft (raw, json)
Hash identifier: 3grJelDGMEIzjgKBYJBHXoURbcAGCv2mRiYtlF42jZ0=
Subject key identifier: 4E:8F:75:DD:51:70:AC:A6:4D:AE:CF:8B:19:6C:C0:34:76:37:80:DC
Authority key identifier: 6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D
Certificate issuer: /CN=A9130A53/serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D
Certificate serial: 0993
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
Manifest number: 0981
Signing time: Mon 02 Mar 2026 01:16:14 +0000
Manifest this update: Mon 02 Mar 2026 01:16:12 +0000
Manifest next update: Mon 09 Mar 2026 01:16:12 +0000
Files and hashes: 1: bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl (hash: hv4xEb1M+ENHh5IzdtGCIgsam9qXRYDMG9LaKtlkd+c=)
2: F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa (hash: K9ygKHUO5qXA1XG+AYxwcORvRSOsX7Vi56bxTzrxJe8=)
3: F36A0E2EAB4B11EAA2CA585BC4F9AE02.roa (hash: 3mYXKQGPTclvrVN59MFw/zfTsvZixKAABlHasf+SFZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl
rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2451 (0x993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130A53, serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D
Validity
Not Before: Mar 2 01:16:12 2026 GMT
Not After : Mar 9 01:16:12 2026 GMT
Subject: CN=69a4e4de-847b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bd:44:f5:3c:ea:df:59:82:9d:e4:1e:33:30:
60:7e:23:a8:ee:f2:11:61:87:35:07:16:42:a7:33:
ca:ab:d1:78:32:08:fa:a3:18:7e:53:bd:df:13:29:
e4:a0:68:19:19:61:f0:15:a0:42:02:89:15:67:30:
ed:52:c2:ad:de:51:82:73:fd:b7:1f:4a:74:5d:31:
f6:d2:15:02:49:0b:5d:5e:13:64:f3:24:7a:6a:e7:
57:5f:28:b6:24:4a:c7:99:e4:73:99:0c:e5:d9:ed:
92:10:b1:59:ba:e9:bb:f1:5c:b0:af:3d:1a:2c:a9:
d9:8e:98:0f:fd:79:41:b9:76:5b:0f:7d:ae:e8:35:
0f:1a:9b:b9:75:bf:91:f0:77:d7:81:6c:d9:45:1c:
44:fa:0d:27:85:f5:b0:65:94:d4:f0:de:06:35:ed:
84:9e:8b:65:91:30:98:2c:ad:23:33:c9:a5:a4:50:
8b:db:6f:81:22:96:dd:a4:17:e9:88:9b:df:59:52:
6f:ff:b3:be:dc:36:5f:0f:03:57:18:43:08:bf:9f:
53:aa:a4:69:f2:ac:31:53:79:a4:a7:21:0d:ca:f1:
de:73:1d:5f:70:1c:5d:fa:b8:fc:19:04:0a:7a:63:
f7:3f:ce:f1:f7:c5:a4:ba:86:e3:7d:50:3a:c0:8b:
56:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8F:75:DD:51:70:AC:A6:4D:AE:CF:8B:19:6C:C0:34:76:37:80:DC
X509v3 Authority Key Identifier:
keyid:6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:bd:57:43:d1:5e:a9:9c:04:3d:c3:4a:f8:53:ed:1e:20:ee:
02:be:1f:55:54:df:5c:fc:ec:eb:fd:31:15:bd:88:c0:87:16:
db:a0:3e:9f:2b:f1:99:3f:72:4a:d4:1c:86:43:88:75:8e:4f:
7a:74:de:e0:22:69:aa:49:97:3e:35:38:df:59:41:98:4c:f5:
ad:92:3d:2a:d0:ed:d1:c3:c5:e6:0f:6b:ac:23:7d:41:3e:00:
88:e1:b1:91:c5:51:e1:b7:ac:97:e5:01:9d:91:2f:ad:92:07:
6b:ee:95:e1:69:78:0b:0b:b3:20:e3:93:c8:57:a3:78:aa:2d:
20:47:32:40:62:3e:5d:0d:c8:cf:42:d8:8f:94:3e:6e:26:54:
bf:b2:08:0f:3c:c5:73:0a:99:ef:26:0b:e6:b8:49:2a:62:1e:
b7:7c:27:33:13:31:b3:c6:c8:cd:aa:ec:4c:4d:5e:c2:49:6f:
7a:5f:d8:8c:27:58:9e:cb:a9:88:68:d7:3c:c3:fb:e8:5a:05:
e6:63:d6:47:9e:b7:1d:7f:1a:70:63:1b:92:ca:61:7a:9d:11:
69:42:90:9a:ce:c5:56:16:84:67:7b:f2:cf:45:53:57:b2:c4:
d1:97:1a:ca:75:60:08:1a:74:6e:0b:a9:f7:0b:f0:51:0c:46:
8a:ac:ce:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:14 2026 by rpki-client