
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
File: -bspsKvoSef-GA4znkscKCNoxSE.mft (raw, json)
Hash identifier: R7coVsRlyUSMQmZCpGijwPmqexpefboLj05nDOjOCos=
Subject key identifier: 60:63:82:E5:D9:8A:A3:A8:43:E0:AD:3C:54:13:64:CB:43:0D:F5:F6
Authority key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
Certificate issuer: /CN=A913E8F3/serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
Certificate serial: 10B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
Manifest number: 1095
Signing time: Thu 16 Apr 2026 17:18:46 +0000
Manifest this update: Thu 16 Apr 2026 17:18:45 +0000
Manifest next update: Thu 23 Apr 2026 17:18:45 +0000
Files and hashes: 1: -bspsKvoSef-GA4znkscKCNoxSE.crl (hash: 2+R2teQvw7zXKwsaMzFZJC9OwgpfV4+162WVrTbN1hc=)
2: 06093D68DC1311F09341A9F45E6F56BC.roa (hash: 38iP1UDZ5HIVswjKfNaAplI7jivkq9C797QFF0+FNg8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl
rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4274 (0x10b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
Validity
Not Before: Apr 16 17:18:45 2026 GMT
Not After : Apr 23 17:18:45 2026 GMT
Subject: CN=69e119f6-5133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:75:48:47:0f:78:0b:c0:8a:b0:13:4d:6f:41:
b5:8f:6a:7c:89:f7:a4:d7:b6:3e:38:ed:24:c3:91:
71:ad:47:79:16:12:6c:9c:84:43:8c:3f:e5:b6:70:
7c:54:8d:ec:06:82:ec:03:1a:0a:9b:6c:ef:4c:a4:
5d:1c:5c:79:22:08:f1:16:ab:e4:3e:f7:b2:75:d5:
63:4e:8c:6d:34:32:46:f9:be:17:79:c5:d7:27:42:
22:c3:f5:6a:34:05:4d:32:21:1c:ec:e9:00:9e:1b:
bb:18:bd:fc:07:67:ce:69:84:a4:78:02:ce:52:c5:
d7:67:4f:f5:52:24:99:f9:12:c5:ba:8c:cd:2f:1c:
21:5b:cd:46:ed:81:17:5f:f4:5c:63:f0:79:70:9c:
d5:5a:a0:3b:2a:93:f3:df:e9:e6:c5:6e:f4:44:67:
c0:d9:82:fa:1b:33:99:8c:be:4e:bd:ca:c3:96:6a:
fb:a3:80:f4:0d:6e:f3:d0:2d:37:69:34:5e:6a:a6:
bd:83:fa:bc:ff:55:2b:c7:30:d4:63:aa:64:ab:ef:
34:66:df:83:cf:5c:c3:70:4e:b1:22:05:53:58:99:
55:b8:4a:54:c0:1a:9e:78:7e:8d:68:17:a2:21:e9:
41:0a:aa:4f:1e:34:ef:a9:4c:24:c1:42:f1:9e:1d:
e8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:63:82:E5:D9:8A:A3:A8:43:E0:AD:3C:54:13:64:CB:43:0D:F5:F6
X509v3 Authority Key Identifier:
keyid:F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f8:7a:f2:f8:00:66:b1:f6:24:91:19:69:a7:76:17:99:57:
f9:a1:71:f2:5b:c7:d8:59:4b:ea:3a:97:5a:99:e4:2b:4f:ee:
7c:f7:cf:e2:81:92:9c:66:9d:23:96:f2:77:8d:53:09:0c:19:
6c:81:3e:a3:bf:ad:3d:94:e3:ea:5d:eb:52:3a:7a:94:f0:48:
c4:04:34:63:9c:a7:ba:96:82:2b:e8:17:68:17:b9:b6:e6:c4:
7b:00:63:5a:92:56:47:bb:04:fa:0a:6a:41:a0:c1:60:19:e1:
52:ef:81:a3:fd:07:d3:64:12:27:71:52:c8:f6:77:70:13:6d:
70:1d:cc:77:3e:b0:3b:b3:05:8c:8e:74:94:d8:a3:97:4b:42:
2c:e4:83:77:9f:a6:12:bb:b6:68:5d:87:e8:35:c5:6e:63:2a:
20:3a:47:4f:a8:95:e4:9e:1a:62:9c:93:53:09:04:17:70:2b:
f3:99:87:0b:33:6a:1e:d8:30:8c:40:59:23:95:be:ae:ca:f8:
7b:71:25:c6:10:ca:9a:d7:18:df:64:a4:b4:33:e5:27:57:fd:
9f:c8:59:65:eb:36:c7:6a:66:c8:8a:8b:41:d4:75:f3:d4:9a:
67:3f:b7:5b:44:b6:99:e6:09:7e:e5:f4:c5:9e:9f:96:68:49:
83:bd:3a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:37:05 2026 by rpki-client