
$ rpki-client -vvf rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
File: BKm4kZsiD18-q9D03YXi9b28VQA.mft (raw, json)
Hash identifier: mSlrI9iV3HQE0Xk/TYN6Mkb4m30cvIWvsneCJTJUhjM=
Subject key identifier: 36:20:AE:34:0B:19:6F:75:15:B2:06:B9:60:6C:A1:FB:A7:10:0B:E4
Authority key identifier: 04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00
Certificate issuer: /CN=A913837F/serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500
Certificate serial: 022E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
Manifest number: 0228
Signing time: Mon 03 Aug 2026 03:47:25 +0000
Manifest this update: Mon 03 Aug 2026 03:47:24 +0000
Manifest next update: Mon 10 Aug 2026 03:47:24 +0000
Files and hashes: 1: BKm4kZsiD18-q9D03YXi9b28VQA.crl (hash: 5nWSzUHBzpSaAtVI7YN+F3uQJEd+7Q7tdeNpxacdQPY=)
2: 3D83357646E411EE82ED8843C4F9AE02.roa (hash: M/VXx2BREvwNHgixBQpTJl5Ai6BjqeXEvNMr3p9U1X8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl
rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Aug 2026 03:47:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 558 (0x22e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913837F, serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500
Validity
Not Before: Aug 3 03:47:24 2026 GMT
Not After : Aug 10 03:47:24 2026 GMT
Subject: CN=6a700f4d-8d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:00:80:42:8c:5d:a0:f2:6a:aa:72:2d:51:f7:
28:f6:23:a4:dc:cc:af:5f:99:90:c3:c2:fe:a8:b5:
81:f6:25:ef:e1:b1:09:e7:c5:76:3f:42:dd:c6:e2:
16:15:8c:2f:36:ef:82:ff:5c:35:ea:af:9b:94:3f:
fe:77:50:91:08:4a:16:25:99:96:a9:95:0c:7e:0a:
34:3d:03:3d:79:3c:6a:6c:12:6e:88:32:5e:e1:55:
01:68:d3:18:1a:08:4c:ed:47:13:42:38:c1:8d:0a:
90:40:92:dc:2d:89:1e:b0:55:e5:ab:82:40:91:0a:
9d:0d:99:55:79:56:0a:ed:c5:30:de:0b:a7:b3:9e:
39:7f:b8:9e:ce:fa:42:48:bd:3c:54:19:a9:aa:a6:
63:24:e6:33:c6:d2:79:1a:98:66:77:08:ed:d7:5a:
9f:92:cf:2c:81:4a:81:5a:d8:97:0a:15:34:94:bf:
4f:cf:75:94:c5:c8:6f:17:00:d9:77:ea:07:f0:9b:
7a:5b:02:40:3c:e2:a6:87:a3:ac:44:ec:67:c1:57:
18:92:2c:83:39:e9:df:6e:65:e7:45:4a:4c:47:ba:
bd:0c:33:65:5a:3f:1d:f6:ab:c8:c9:e0:7c:2c:c6:
67:0c:02:b4:de:b7:44:2f:03:62:08:20:a3:7c:29:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:20:AE:34:0B:19:6F:75:15:B2:06:B9:60:6C:A1:FB:A7:10:0B:E4
X509v3 Authority Key Identifier:
keyid:04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:32:05:ef:43:f6:0a:eb:4a:2e:f3:60:83:3d:30:73:0a:16:
a5:2f:bf:cc:cb:f7:d7:3a:5e:49:40:6e:eb:ab:4a:0d:ce:ea:
ed:e6:88:0e:ca:d7:9b:59:37:b7:fa:6d:93:bf:f5:12:cf:9c:
a6:ea:1c:2b:28:0f:87:68:70:c4:eb:40:19:cb:15:25:fc:23:
a9:f8:34:08:55:49:74:b3:42:c4:5a:3c:c0:13:ac:18:e8:d4:
32:b6:60:be:2a:e1:76:d3:13:61:04:44:53:22:32:98:1d:ee:
74:d0:a8:0c:07:c3:9c:2a:6b:6d:5e:be:e1:d7:b2:39:9e:92:
67:b3:19:07:98:d8:2b:f7:65:0b:b7:1d:fc:5c:d0:ff:ce:74:
d0:a8:9f:3e:c8:78:ba:0c:e8:f2:5a:6b:49:15:9a:7c:a1:9e:
7b:b1:44:07:a1:1e:2d:93:a0:7a:93:bb:9e:6a:01:6e:d3:09:
4d:05:39:b5:39:1a:5e:0d:f8:1e:04:11:46:9b:52:c1:90:8e:
07:6b:f1:2e:3f:e8:97:33:3d:6d:97:56:d5:02:f3:3f:71:59:
b7:89:b9:d0:82:aa:b6:0d:44:86:46:d0:38:2c:41:bf:06:ef:
70:3e:38:dd:4e:83:4b:13:30:93:7d:9f:53:0a:78:f6:e6:c9:
a6:f7:98:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 17:29:14 2026 by rpki-client