
$ rpki-client -vvf rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
File: BKm4kZsiD18-q9D03YXi9b28VQA.mft (raw, json)
Hash identifier: o8h8u/+r2KJ/5FgZbkwj/qJKTIRgmANrU2uRGzSA6mg=
Subject key identifier: 7E:79:D4:63:BB:CC:E6:2B:7F:C2:D4:A4:6B:51:DF:7A:E1:E8:EF:D3
Authority key identifier: 04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00
Certificate issuer: /CN=A913837F/serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500
Certificate serial: 022B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
Manifest number: 0225
Signing time: Wed 29 Jul 2026 03:50:54 +0000
Manifest this update: Wed 29 Jul 2026 03:50:54 +0000
Manifest next update: Wed 05 Aug 2026 03:50:54 +0000
Files and hashes: 1: BKm4kZsiD18-q9D03YXi9b28VQA.crl (hash: CUi/eCbzHYJAW54RR1h+b7YALpyvnBruwgGNOzppStM=)
2: 3D83357646E411EE82ED8843C4F9AE02.roa (hash: M/VXx2BREvwNHgixBQpTJl5Ai6BjqeXEvNMr3p9U1X8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl
rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 03:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913837F, serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500
Validity
Not Before: Jul 29 03:50:54 2026 GMT
Not After : Aug 5 03:50:54 2026 GMT
Subject: CN=6a69789e-55d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f4:67:57:b1:4a:c3:14:1d:51:cc:69:ad:19:
e8:3b:d0:f7:8a:40:11:8c:b5:c6:5c:63:8c:6d:18:
8f:77:bd:7e:65:e5:b5:14:4f:2d:ed:e8:f4:15:53:
ac:a8:c5:88:83:42:a6:f4:64:7d:76:40:a5:0e:60:
2c:7e:a4:e4:f7:5e:f2:d3:6b:19:dc:9a:fd:72:99:
3b:2f:23:15:dd:ff:ec:bc:f7:4d:da:4a:af:26:46:
e6:67:3c:c0:0c:8e:e5:0a:bf:64:71:d4:c1:8c:30:
96:c9:96:ce:85:1f:a4:0c:e1:1e:94:e4:46:fc:68:
ab:25:4f:56:51:df:8e:1f:c4:03:ce:72:30:1e:e9:
2d:2c:31:f7:51:26:18:83:5d:96:72:3d:1e:c3:73:
f8:4c:32:ad:b3:ee:06:de:73:6e:89:54:46:38:3a:
8f:41:1d:0f:b3:16:1d:51:ac:0b:48:ba:5f:be:e9:
a0:de:b8:47:92:61:59:69:70:6c:b0:06:b3:a3:58:
7a:52:10:15:f8:fe:c7:b9:82:56:36:1c:e8:38:87:
89:5d:09:7b:83:f3:8d:cf:3f:bb:6f:a6:8d:51:21:
17:55:3c:c1:2b:38:95:18:8a:a2:da:ae:7f:4d:0d:
32:e2:75:f2:4c:b8:5c:83:06:c5:59:a8:27:65:1b:
c2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:79:D4:63:BB:CC:E6:2B:7F:C2:D4:A4:6B:51:DF:7A:E1:E8:EF:D3
X509v3 Authority Key Identifier:
keyid:04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:03:31:c9:1a:e0:cb:03:01:c1:16:c0:db:be:3b:7a:7b:b7:
d0:56:e9:b2:f3:a4:39:3f:af:39:36:89:d1:73:85:65:c1:bd:
a3:53:fe:03:ee:aa:fe:48:5f:85:57:ec:38:4f:d1:b2:a8:d2:
db:f5:ba:c1:01:1a:cc:13:0f:65:ee:16:1c:46:76:97:e9:d5:
64:60:23:45:c2:28:cd:59:1e:b7:0a:36:20:a2:2e:62:e7:fc:
a8:4a:eb:07:ad:0a:f5:ea:89:d9:86:5d:92:b7:38:99:a8:62:
9f:36:83:76:41:5e:88:c2:2f:5e:09:40:c4:30:27:ab:36:a4:
eb:b9:be:0f:44:45:9a:a7:3c:98:0d:30:4b:57:4b:16:3c:c1:
ab:76:44:91:6e:fd:a2:58:de:90:61:b2:1d:86:1b:08:10:a7:
46:97:d9:e9:d4:ce:e0:d3:50:f4:6b:94:8b:74:36:43:88:30:
c8:2b:66:f4:de:ea:52:de:52:b6:61:aa:0c:a9:77:d7:8c:dd:
de:53:c5:6d:d8:29:af:87:36:b7:2d:d7:78:11:a9:af:45:5d:
72:9e:f0:16:4c:f1:4b:ba:e2:8d:59:8b:6d:87:d8:20:8d:32:
39:9c:97:03:83:26:8a:40:2c:f4:5b:6f:b4:82:04:79:dd:0d:
54:20:66:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgzN0YxMTAvBgNVBAUTKDA0QTlCODkxOUIyMjBGNUYzRUFCRDBGNEREODVFMkY1
QkRCQzU1MDAwHhcNMjYwNzI5MDM1MDU0WhcNMjYwODA1MDM1MDU0WjAYMRYwFAYD
VQQDEw02YTY5Nzg5ZS01NWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAovRnV7FKwxQdUcxprRnoO9D3ikARjLXGXGOMbRiPd71+ZeW1FE8t7ej0FVOs
qMWIg0Km9GR9dkClDmAsfqTk917y02sZ3Jr9cpk7LyMV3f/svPdN2kqvJkbmZzzA
DI7lCr9kcdTBjDCWyZbOhR+kDOEelORG/GirJU9WUd+OH8QDznIwHuktLDH3USYY
g12Wcj0ew3P4TDKts+4G3nNuiVRGODqPQR0PsxYdUawLSLpfvumg3rhHkmFZaXBs
sAazo1h6UhAV+P7HuYJWNhzoOIeJXQl7g/ONzz+7b6aNUSEXVTzBKziVGIqi2q5/
TQ0y4nXyTLhcgwbFWagnZRvC0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH551GO7
zOYrf8LUpGtR33rh6O/TMB8GA1UdIwQYMBaAFASpuJGbIg9fPqvQ9N2F4vW9vFUA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODM3Ri82NDU5MEMxMjQ2
RTMxMUVFQjVFNDE2NDJDNEY5QUUwMi9CS200a1pzaUQxOC1xOUQwM1lYaTliMjhW
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0JLbTRrWnNpRDE4LXE5RDAzWVhpOWIyOFZRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODM3Ri82NDU5MEMxMjQ2RTMxMUVFQjVFNDE2NDJDNEY5QUUwMi9CS200a1pzaUQx
OC1xOUQwM1lYaTliMjhWUUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuAMxyRrgywMBwRbA2747enu30FbpsvOkOT+vOTaJ0XOFZcG9o1P+A+6q/khf
hVfsOE/RsqjS2/W6wQEazBMPZe4WHEZ2l+nVZGAjRcIozVketwo2IKIuYuf8qErr
B60K9eqJ2YZdkrc4mahinzaDdkFeiMIvXglAxDAnqzak67m+D0RFmqc8mA0wS1dL
FjzBq3ZEkW79oljekGGyHYYbCBCnRpfZ6dTO4NNQ9GuUi3Q2Q4gwyCtm9N7qUt5S
tmGqDKl314zd3lPFbdgpr4c2ty3XeBGpr0Vdcp7wFkzxS7rijVmLbYfYII0yOZyX
A4MmikAs9FtvtIIEed0NVCBmRQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:52:21 2026 by rpki-client