
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
File: BKm4kZsiD18-q9D03YXi9b28VQA.mft (raw, json)
Hash identifier: eEZ+D6GDH6AZRfh9Vg/0yTd3i1RmY497sJnQ6UHzcKE=
Subject key identifier: 38:0F:AA:95:6E:F2:07:70:54:A9:D4:25:E4:A8:CD:74:29:5B:55:13
Authority key identifier: 04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00
Certificate issuer: /CN=A913837F/serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500
Certificate serial: 0245
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
Manifest number: 023F
Signing time: Thu 17 Sep 2026 02:42:10 +0000
Manifest this update: Thu 17 Sep 2026 02:42:09 +0000
Manifest next update: Thu 24 Sep 2026 02:42:09 +0000
Files and hashes: 1: BKm4kZsiD18-q9D03YXi9b28VQA.crl (hash: 5qKHOcZUepQCAGpGVjGbL5CLwDNKr4cihfXUDBh2DRI=)
2: 3D83357646E411EE82ED8843C4F9AE02.roa (hash: M/VXx2BREvwNHgixBQpTJl5Ai6BjqeXEvNMr3p9U1X8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl
rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 02:42:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913837F, serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500
Validity
Not Before: Sep 17 02:42:09 2026 GMT
Not After : Sep 24 02:42:09 2026 GMT
Subject: CN=6aab5382-3de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:c3:49:e5:77:2e:b0:59:59:69:72:cb:30:
81:1e:4c:89:e1:7d:f2:29:85:da:65:21:d0:07:4f:
5c:aa:86:83:91:71:0f:61:e4:0c:cd:af:85:62:c8:
30:8d:f0:81:7c:63:67:13:71:b6:c1:99:9b:e9:b1:
d4:0d:9a:d5:5f:a5:ae:65:56:29:12:46:4b:cb:9c:
59:07:5e:1a:f1:92:23:2d:42:a4:4a:87:1a:c3:17:
84:b2:b0:4e:aa:29:ec:fc:6f:3c:78:db:1e:9b:45:
5a:91:25:11:44:3b:58:5d:be:4b:24:22:ad:02:75:
04:3d:af:ae:c9:1c:10:ea:6d:b3:3f:e3:8d:4e:69:
95:2c:c1:ad:cf:d2:de:9a:80:52:be:42:fa:89:7f:
c6:01:45:37:26:0d:bc:61:91:7e:07:46:60:53:dd:
9f:d7:1b:0a:03:81:15:18:36:fb:ad:3e:61:7b:62:
3e:f0:8e:48:4d:3c:9d:f5:57:7a:36:48:bd:1b:a5:
5f:ea:02:c9:59:d4:82:5e:8a:07:4e:44:35:c2:7f:
27:a3:04:1a:4c:30:6c:4c:e1:52:6a:1a:8e:c0:6d:
a4:e9:a2:d9:34:87:04:9d:95:a2:74:3d:80:86:5f:
85:84:57:02:6e:62:df:ef:ad:28:39:b2:aa:df:e3:
fe:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0F:AA:95:6E:F2:07:70:54:A9:D4:25:E4:A8:CD:74:29:5B:55:13
X509v3 Authority Key Identifier:
keyid:04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:01:c3:66:23:bd:e2:db:6d:f7:c3:ac:0b:ec:19:59:eb:2a:
5e:e3:58:39:e6:f6:73:ed:d6:9e:1a:bc:c9:b2:0d:ae:d6:fa:
ea:6e:34:f2:fe:38:38:f5:fa:95:6a:60:7c:14:68:34:90:d8:
9a:3c:3b:6f:18:60:54:77:28:96:59:ca:06:50:d5:02:bb:7e:
27:12:f7:c6:45:14:43:6e:db:d3:58:2d:2a:b6:83:8a:bc:4f:
51:9c:32:78:9b:d0:1d:6a:97:8c:0a:1f:6e:4f:b9:3f:9b:d5:
b5:52:91:35:e7:b0:88:26:5d:4e:cf:13:13:a4:af:eb:e0:08:
ae:af:d7:df:4d:29:da:f7:ad:5a:a8:ed:23:5b:ad:b8:6f:54:
f1:60:d0:1a:3d:8d:59:53:21:0c:73:ec:53:42:6d:1b:39:7e:
83:ba:61:04:8a:1b:69:26:63:12:88:c2:1b:f3:d4:c0:d7:27:
52:97:2a:d0:7f:ff:b2:42:a2:92:97:78:5c:30:c6:22:9f:df:
8f:f9:06:2a:62:62:d8:93:9d:d6:2e:58:93:f6:80:a3:f3:67:
24:42:0e:7e:13:5b:a4:0f:a3:41:9f:e8:cb:95:cb:5d:68:9b:
5e:0d:af:7d:e8:dd:7a:2a:75:7c:91:bb:98:91:55:08:a4:be:
fc:c3:d4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:12:52 2026 by rpki-client