
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
File: BSmF8r4ox5507_TbTHFCKEVHc1w.mft (raw, json)
Hash identifier: lS7aNLEeVYn6DjUCtSfHpbzWpgJbu7uXBKWWYKGLcxk=
Subject key identifier: EA:51:6F:2A:55:FC:DB:23:44:46:34:5E:CB:DB:1A:AE:3C:79:22:04
Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C
Certificate issuer: /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
Manifest number: 0212
Signing time: Sun 01 Mar 2026 23:37:03 +0000
Manifest this update: Sun 01 Mar 2026 23:37:01 +0000
Manifest next update: Sun 08 Mar 2026 23:37:01 +0000
Files and hashes: 1: BSmF8r4ox5507_TbTHFCKEVHc1w.crl (hash: 0p0ZXS4uA0JzVG68VS0knZPDK5KpXkcDLC/GMCrWBLs=)
2: A799F54AF1F111EE9D899046C4F9AE02.roa (hash: F5h2lYPVnQxcT3yrCUQ5TjAIUlWSj1anxEmDYlLIbCo=)
3: 00646A9CE0D511F08788B2A9556F56BC.roa (hash: DeXgdTifh854jBkbMFeU78ocUGYguPv8MU0j47e7vmI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl
rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151A79, serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C
Validity
Not Before: Mar 1 23:37:01 2026 GMT
Not After : Mar 8 23:37:01 2026 GMT
Subject: CN=69a4cd9e-8a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:93:d7:f8:b2:d8:88:e1:73:37:7c:4e:f3:e4:
43:11:98:0c:7e:b5:58:89:51:21:55:7c:00:b2:f3:
13:8c:11:3b:e4:8b:95:7e:7a:7f:94:36:58:7a:81:
5b:e0:74:2f:f2:f7:71:ad:74:4e:49:ff:b4:14:7d:
2a:56:58:14:07:28:c9:a1:bb:19:76:45:a0:98:bd:
3a:b2:7b:2d:08:f7:5c:b1:18:4d:85:58:a8:30:bc:
32:5f:48:e5:ce:23:24:b5:36:ba:b4:03:09:c9:03:
d7:b6:da:eb:b4:7d:06:13:15:46:4e:ad:7a:09:5e:
a4:f2:25:b4:49:d7:28:90:c8:14:ef:82:8e:cc:4a:
7b:6e:7e:f2:9e:f7:3b:df:e7:ab:cf:94:39:3d:3f:
e1:28:1d:f8:6c:7b:a7:a7:d3:fc:91:33:03:a4:8e:
79:c9:d8:38:f2:09:bd:cc:d6:8d:fc:b9:72:a6:70:
f3:4b:49:dd:51:e5:ae:a3:f5:d1:61:59:da:48:c7:
4f:5d:6b:9b:85:44:fa:96:62:a4:f6:5f:19:09:62:
db:01:4b:97:77:66:06:ac:f4:de:36:e1:a3:01:be:
1f:30:00:d8:1b:2d:d5:55:a8:da:1e:2f:93:66:b6:
40:7e:2b:b0:e5:c3:69:0e:f3:a1:76:96:00:17:b8:
16:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:51:6F:2A:55:FC:DB:23:44:46:34:5E:CB:DB:1A:AE:3C:79:22:04
X509v3 Authority Key Identifier:
keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:c5:7c:f8:29:bd:c7:1e:b7:fd:2f:dc:1b:f3:2d:d8:5a:97:
84:ae:ea:71:c8:11:1a:25:71:4c:e0:bb:e4:84:c3:b4:31:a2:
98:80:54:3a:b3:6a:ce:8e:df:a8:61:09:ae:44:8e:3c:d6:80:
40:f7:20:25:9b:b9:79:94:5e:38:69:48:0c:72:37:02:8f:1e:
b3:33:4b:b2:bf:1f:d2:04:ae:43:4a:b5:46:31:b6:bd:29:d2:
44:7d:11:68:74:26:0d:d9:f9:bc:9e:d6:5a:98:81:e9:36:01:
b5:19:35:d5:5b:49:8f:a9:b6:e9:6c:54:15:1f:4a:89:25:4c:
b0:88:79:4c:95:7c:6a:2a:df:3d:e1:88:09:7b:da:15:5f:3c:
b9:e9:a3:89:f8:90:ad:d0:0b:2a:d1:56:a0:a6:48:91:48:fa:
c2:9d:ae:4e:69:47:ca:d7:b5:5e:f3:18:01:88:57:87:9e:92:
b8:ab:cf:26:c2:24:4c:b1:4c:69:c1:81:79:6a:ef:08:e8:e9:
84:72:be:b0:72:dc:ea:8f:39:75:33:ca:f8:cd:ee:49:0b:c2:
97:83:88:23:df:6e:db:36:52:ce:0b:9d:7c:73:10:68:07:3c:
2f:1c:3b:37:e7:06:1e:8c:ef:5e:19:ae:37:a3:16:db:7c:e8:
04:9f:5a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:53 2026 by rpki-client