
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft
File: Bmy1pxYud36-c45cu4Dn9JRwzCE.mft (raw, json)
Hash identifier: /WL6tTJ0HAyTUSIxb4PeOiUjldhBnBa9PYOXBugXeeM=
Subject key identifier: D4:00:62:E8:C3:4B:67:CE:9C:D9:DE:C6:D4:25:1F:EB:96:18:72:7C
Authority key identifier: 06:6C:B5:A7:16:2E:77:7E:BE:73:8E:5C:BB:80:E7:F4:94:70:CC:21
Certificate issuer: /CN=A9134FAF/serialNumber=066CB5A7162E777EBE738E5CBB80E7F49470CC21
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft
Manifest number: 8A
Signing time: Sun 01 Mar 2026 08:52:52 +0000
Manifest this update: Sun 01 Mar 2026 08:52:52 +0000
Manifest next update: Sun 08 Mar 2026 08:52:52 +0000
Files and hashes: 1: Bmy1pxYud36-c45cu4Dn9JRwzCE.crl (hash: Oxl9vjmkLOunwPfqu46Er2KsiXDv5OJoMFfGQZ13Sds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.crl
rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134FAF, serialNumber=066CB5A7162E777EBE738E5CBB80E7F49470CC21
Validity
Not Before: Mar 1 08:52:52 2026 GMT
Not After : Mar 8 08:52:52 2026 GMT
Subject: CN=69a3fe64-21eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:ca:c4:33:d1:4d:76:f2:1d:42:09:f8:bf:
ea:e1:9d:24:4b:10:d8:6b:8a:6f:d3:5f:fd:b2:12:
b6:1c:48:02:83:b4:2d:4a:82:dc:6c:3b:10:19:9e:
63:41:9a:1e:5e:56:db:b1:49:43:c2:5a:82:cf:c8:
e5:09:a9:8f:a8:6a:72:f6:89:74:1a:84:03:a1:97:
f6:7a:ce:e0:c5:e3:e2:1c:d4:6b:9b:f0:92:61:15:
24:2f:d8:90:1f:c4:bb:a8:7a:6a:ff:63:19:48:aa:
5d:96:a8:31:b2:6e:c0:c4:46:59:a9:78:38:88:1d:
13:f6:0b:be:93:b5:09:b9:86:ee:f1:ea:6c:9c:8d:
67:52:60:a8:ac:c5:04:8b:a7:b3:c7:0a:c5:15:36:
bf:78:b5:91:27:8a:0b:ea:f1:b9:a4:cb:56:ba:a9:
ff:94:ed:a0:3a:04:17:ce:f7:b0:b2:63:3b:1b:dd:
57:90:2b:5c:81:cd:05:d5:1f:f4:d1:c8:77:d1:97:
f4:af:b1:85:06:2c:90:82:35:ad:07:c1:8b:33:5a:
39:94:8d:38:16:17:2e:09:6d:68:15:f6:d1:06:2f:
87:b1:fb:b3:e5:7d:fb:5d:df:64:4b:fa:c9:3a:4e:
d6:d8:cf:38:b5:b6:e9:b8:9b:eb:b5:4a:ea:da:53:
1a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:00:62:E8:C3:4B:67:CE:9C:D9:DE:C6:D4:25:1F:EB:96:18:72:7C
X509v3 Authority Key Identifier:
keyid:06:6C:B5:A7:16:2E:77:7E:BE:73:8E:5C:BB:80:E7:F4:94:70:CC:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:54:5f:3b:89:22:86:51:aa:fc:c8:58:61:cb:34:cc:fb:d1:
4a:6a:52:b0:54:9e:24:b2:bb:20:19:e5:0b:e9:36:38:7b:da:
c2:5c:32:09:ff:3a:e9:2c:66:05:c6:81:b9:a1:80:95:5d:f0:
0b:8d:29:86:43:82:95:d5:fa:4f:7c:59:38:06:bd:ab:2a:88:
e7:ab:e6:6d:74:37:be:16:08:ad:af:d1:0c:05:ab:2f:77:de:
f7:31:9f:49:18:84:72:d5:4a:ff:dc:65:5d:2f:93:9f:cf:4a:
b5:90:89:11:f3:12:92:eb:24:cd:00:50:b3:e0:82:3f:d9:8a:
21:6c:b1:81:01:58:57:d7:c7:98:cb:81:48:46:a8:ae:ce:c3:
b1:67:b4:6f:a9:ed:ce:09:30:b1:73:81:ca:9a:b3:e9:54:65:
4a:95:12:8a:3a:01:c1:e0:39:27:33:11:f4:44:85:d1:b7:5a:
94:23:c6:da:f4:9a:28:b6:e6:23:9e:61:30:e1:c4:15:55:ad:
6a:77:3e:e3:0e:9a:c6:ae:9a:80:ea:ef:b7:0e:27:f9:73:00:
75:e3:ba:f8:1e:cf:e4:20:10:11:68:ac:94:c6:2f:f4:dc:b7:
3d:3a:34:c7:1c:7d:28:9d:0a:3a:3a:49:22:d5:5d:82:fb:13:
92:34:c3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:42 2026 by rpki-client