
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
File: -bspsKvoSef-GA4znkscKCNoxSE.mft (raw, json)
Hash identifier: Qf42k4ucjjX1ugVs9JQh15CCZGDs+4dqlBRfQJH14pI=
Subject key identifier: 3A:8E:99:D2:84:ED:C6:9E:9B:21:A5:A0:18:D3:0A:C4:C2:70:62:60
Authority key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
Certificate issuer: /CN=A913E8F3/serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
Certificate serial: 1109
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
Manifest number: 10EB
Signing time: Mon 28 Sep 2026 17:24:03 +0000
Manifest this update: Mon 28 Sep 2026 17:24:03 +0000
Manifest next update: Mon 05 Oct 2026 17:24:03 +0000
Files and hashes: 1: -bspsKvoSef-GA4znkscKCNoxSE.crl (hash: ouD7gtO6vMEIZnn9Pmi6txK2vnUcu+8Jnq9X9YG5qz4=)
2: 06093D68DC1311F09341A9F45E6F56BC.roa (hash: j3Nn2rD47TD3zcYvMKT9rzy2XYP0c6frj7kn6Jpdzzo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl
rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 17:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4361 (0x1109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521
Validity
Not Before: Sep 28 17:24:03 2026 GMT
Not After : Oct 5 17:24:03 2026 GMT
Subject: CN=6abaa2b3-522e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:9b:86:27:94:1c:1b:ec:ee:18:d6:7d:83:
ae:93:28:f5:dc:5d:fc:bb:f6:d8:36:f0:de:ce:99:
f9:7c:7c:c1:87:92:02:c3:74:b0:65:43:ef:e3:44:
89:00:03:cc:3a:08:87:5a:97:ea:80:9f:95:3f:5f:
c6:63:8a:97:29:2d:2a:f1:f0:f8:c6:72:8d:ad:9a:
f2:80:48:2e:00:f0:ce:f7:e6:c2:fa:8e:ef:eb:73:
e1:b1:04:72:d2:56:bc:11:bf:71:eb:6b:53:5a:e4:
4c:30:e2:9e:3d:46:09:f6:96:16:54:b4:64:a4:10:
d8:fe:23:51:8b:40:b5:20:12:ed:99:00:b2:39:a5:
85:14:fe:41:82:88:0c:db:8f:79:89:9a:04:9d:cb:
d7:ba:2a:f6:f1:e3:0a:27:3e:5c:53:62:f2:8a:57:
d4:07:21:d6:31:cb:88:8f:70:67:f5:eb:80:b0:db:
d8:78:1f:7a:da:00:57:47:57:2d:08:a6:4c:1f:f1:
4a:6a:1f:96:0e:24:2e:82:05:de:e1:cb:89:3d:80:
92:80:f0:cc:36:18:25:a8:82:ba:b3:76:ac:50:b6:
30:2a:cc:31:5a:e3:bd:6f:b2:11:bd:31:02:60:c4:
e0:72:33:d2:ee:9f:48:a3:a8:aa:98:6c:43:a4:24:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8E:99:D2:84:ED:C6:9E:9B:21:A5:A0:18:D3:0A:C4:C2:70:62:60
X509v3 Authority Key Identifier:
keyid:F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:9a:b0:cf:13:af:2d:f1:c8:16:a9:49:d0:9c:64:96:d9:40:
02:66:3d:14:c5:4d:4d:51:b9:c4:78:57:54:68:f1:fb:07:b0:
d0:57:7c:f1:67:61:44:f2:7d:41:af:45:1f:a4:cd:75:dc:1f:
b5:4f:5d:74:5b:4b:ce:62:8b:36:ac:e7:5d:69:76:7d:bc:bc:
89:f3:79:2d:47:c1:0c:b8:0b:90:31:ea:c2:29:e8:67:9f:57:
a1:54:d7:87:0c:e9:58:ce:c8:62:df:36:fa:f8:f4:ed:47:d4:
f8:87:ef:90:07:dd:3b:71:55:cd:c3:85:4f:12:f6:47:63:89:
ae:96:16:af:4f:6f:c3:b6:99:79:70:15:8e:38:22:87:af:70:
7a:88:ad:b6:e0:47:16:48:22:ff:bf:77:19:35:55:06:b6:fd:
84:2c:18:b9:5c:b6:fb:51:d7:23:41:af:96:66:f6:4a:2f:0d:
e6:df:ba:4e:ec:1b:38:eb:6b:bd:f6:30:8d:84:76:cd:f0:f8:
4c:9f:65:5b:34:a9:3d:f3:2a:e9:5c:26:da:b9:88:47:a6:19:
ed:1f:5e:9e:9c:20:67:e1:6f:55:1d:96:c2:25:29:06:05:aa:
6f:cb:48:d7:3d:41:2c:11:4c:36:23:e9:45:42:f9:71:03:d1:
b7:c8:25:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:51:46 2026 by rpki-client