
$ rpki-client -vvf rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
File: BFtcCGfeWB0rdIQv74BFwad76L0.mft (raw, json)
Hash identifier: GD+Tb4jyWEJtYNC8r6QBVdftbCQco/fTQFzhdszRZ6A=
Subject key identifier: 33:5A:EB:43:25:0C:54:70:60:B6:67:D9:1F:D3:4A:7E:88:E3:EF:28
Authority key identifier: 04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD
Certificate issuer: /CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
Certificate serial: 247D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
Manifest number: 2443
Signing time: Sat 28 Feb 2026 15:49:07 +0000
Manifest this update: Sat 28 Feb 2026 15:49:07 +0000
Manifest next update: Sat 07 Mar 2026 15:49:07 +0000
Files and hashes: 1: BFtcCGfeWB0rdIQv74BFwad76L0.crl (hash: EwwCyZap3I0FDfUzXvIaBh3sN59cUkhbhFWvaFidm/c=)
2: FCF0A580B10D11E5894F4D1CC4F9AE02.roa (hash: +2MMI4KCUim/55I1v/CcFFWM8c4do3z3Prc4iRx7/lQ=)
3: F9ED1B16B10D11E5894F4D1CC4F9AE02.roa (hash: fkO78SaWxLHL6UEeOmDkgAwdKa1QD3bVWVMip2dHju0=)
4: F8623718B10D11E5894F4D1CC4F9AE02.roa (hash: 2VqKtLp4I4n3i3xfxJ0a0zauep05yhz4m6vcbsayeiY=)
5: FB87E4C4B10D11E5894F4D1CC4F9AE02.roa (hash: Xr4axXAE5xhZlqvtubxZ2pb3RMbCF82Tss/A5eKchFs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl
rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9341 (0x247d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917412F, serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
Validity
Not Before: Feb 28 15:49:07 2026 GMT
Not After : Mar 7 15:49:07 2026 GMT
Subject: CN=69a30e73-2ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:aa:30:9c:d1:05:09:1b:de:d9:39:63:ec:08:
1d:25:bf:b1:4c:ef:29:d4:a0:d5:8f:40:b3:bf:df:
21:a4:db:57:57:76:55:2d:c4:6d:bf:ee:b1:da:b6:
c2:07:3e:49:12:3e:9e:fc:11:21:64:99:b4:ff:ec:
6b:58:67:05:60:c6:b3:9c:64:62:8a:c3:01:17:c3:
6e:13:f9:85:d7:14:fe:c4:ab:91:8b:dc:88:cc:76:
90:44:43:22:97:5d:e6:12:b3:27:eb:01:c0:f4:d7:
ae:be:c1:d6:0a:a1:39:bd:82:6a:a0:50:80:ff:d7:
46:20:91:ac:cf:71:35:47:8f:50:35:9e:e2:f0:f4:
2f:57:9e:6c:94:39:d7:f4:2c:3b:94:f6:ed:e8:91:
8b:0c:39:fb:51:18:a1:6b:9c:5e:a0:7d:c3:7c:c4:
d0:a6:16:f8:52:ba:b4:1f:63:f0:3a:fb:4f:d9:31:
8b:b2:7a:12:5c:f3:32:ff:b7:6a:90:61:55:e1:ce:
91:25:92:02:27:97:dc:53:37:78:fc:19:1e:57:8c:
e0:b7:60:9c:60:f6:80:03:50:02:21:b0:15:5a:24:
ed:48:0a:24:18:37:4e:49:98:14:2a:26:15:e2:cd:
37:7e:c2:8a:19:b3:bc:af:7f:0e:00:97:40:6b:5d:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5A:EB:43:25:0C:54:70:60:B6:67:D9:1F:D3:4A:7E:88:E3:EF:28
X509v3 Authority Key Identifier:
keyid:04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:06:a8:ed:8b:92:ad:9b:b9:24:6f:51:2d:d5:27:78:13:a1:
84:21:63:11:63:fb:0f:1b:2d:18:8b:87:8c:88:0a:f5:7b:ce:
fa:61:3f:6b:f1:c5:36:12:bf:11:53:a2:2d:6b:ca:95:7f:c9:
60:43:10:14:a7:b1:e6:a8:50:3a:bb:61:ea:ce:73:ae:74:e3:
97:0c:ca:16:40:72:f3:f2:6a:6b:13:87:e9:32:79:95:f5:bf:
ad:6c:67:2c:18:46:bd:51:da:fc:68:f0:2e:eb:f7:d0:67:68:
49:e1:03:fc:22:0c:f4:4a:c4:f8:09:f0:f4:45:de:79:df:2c:
c2:ac:60:74:88:21:3c:0f:46:bc:d7:81:24:68:a0:a1:73:ca:
95:34:17:23:88:c3:2f:e9:c9:10:98:5f:9a:25:a9:99:63:71:
4a:45:0f:74:5b:42:d8:e5:c4:ac:c9:55:15:33:4d:43:70:7e:
ed:12:1e:f7:b3:94:bf:02:d1:b2:e9:2b:a9:3a:90:2b:bf:9b:
c4:6d:a8:34:71:04:61:e4:54:1c:be:2d:e5:fd:ad:67:c1:48:
5d:9b:ce:06:e2:ae:dc:42:4e:21:de:8b:49:59:91:53:e5:c7:
e7:6a:fd:43:e1:26:c4:31:8e:4f:a3:52:34:e1:43:3b:6f:3d:
da:48:97:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:35 2026 by rpki-client