
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
File: BKm4kZsiD18-q9D03YXi9b28VQA.mft (raw, json)
Hash identifier: Pj2yPZKEnuHHzWYv7haMxHHRxaJDTGyFRfLevA4DgqI=
Subject key identifier: 44:1F:80:3D:B5:1F:2A:A9:21:E6:59:F5:F6:2E:41:19:EA:BD:02:6E
Authority key identifier: 04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00
Certificate issuer: /CN=A913837F/serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500
Certificate serial: 0253
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
Manifest number: 024D
Signing time: Thu 15 Oct 2026 03:11:54 +0000
Manifest this update: Thu 15 Oct 2026 03:11:54 +0000
Manifest next update: Thu 22 Oct 2026 03:11:54 +0000
Files and hashes: 1: BKm4kZsiD18-q9D03YXi9b28VQA.crl (hash: O8noh51z9aKg+HLl1pFJUaVbK1oxWIrKsnnqRXgXBF4=)
2: 3D83357646E411EE82ED8843C4F9AE02.roa (hash: M/VXx2BREvwNHgixBQpTJl5Ai6BjqeXEvNMr3p9U1X8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl
rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913837F, serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500
Validity
Not Before: Oct 15 03:11:54 2026 GMT
Not After : Oct 22 03:11:54 2026 GMT
Subject: CN=6ad0447a-a575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:00:66:fb:c1:52:d9:7c:78:00:7c:c0:73:80:
fe:6b:70:59:f8:61:eb:68:1a:61:b1:18:3d:c6:14:
10:d0:78:dc:79:f6:bf:f6:fa:67:d1:b5:61:09:32:
bd:2d:6b:f0:28:75:14:ee:be:a8:fd:51:76:bd:64:
ca:8e:cd:d8:30:8a:9f:13:0d:bd:4c:16:89:0f:b5:
cf:6d:8f:42:16:58:3d:58:f9:d7:24:fe:f1:1a:51:
61:e4:3c:a5:e2:62:a0:91:9c:a2:61:dd:bb:aa:1d:
0a:e3:11:0c:ee:ba:4d:2b:b1:60:79:2b:74:89:72:
34:ef:f1:9a:ca:69:8e:0c:f0:25:68:0f:61:b8:40:
84:4e:b6:41:98:97:a5:b8:f9:98:ea:84:74:81:e8:
84:13:45:3b:d6:a9:68:fc:48:62:b8:e0:73:76:38:
ed:f3:39:e8:7f:8f:fb:32:df:ac:e0:bf:19:f9:9c:
6c:9b:15:9d:81:e6:29:7e:a2:2c:10:e1:60:57:f0:
67:2c:65:9f:41:d0:47:0f:06:d1:a2:d7:5d:b3:47:
f9:b2:df:e4:32:0e:01:b9:39:cd:c2:6e:67:7a:9d:
f7:f6:0a:b7:ac:8f:e2:c3:65:5e:a3:c3:9e:fa:6a:
b9:5b:16:51:a2:db:7e:96:12:6f:ea:86:86:b9:c8:
33:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1F:80:3D:B5:1F:2A:A9:21:E6:59:F5:F6:2E:41:19:EA:BD:02:6E
X509v3 Authority Key Identifier:
keyid:04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c1:c1:13:a9:4a:4f:20:26:2f:8e:ea:c0:f8:c3:3c:e1:01:
8f:55:cd:4d:71:73:48:01:80:9f:f8:fd:51:03:b5:7b:a2:e8:
1b:3f:35:3c:c6:57:3a:5f:72:8e:e1:dd:49:6b:5a:33:65:17:
00:c6:88:79:bc:76:bb:65:a8:14:6c:37:91:29:14:3c:1d:56:
f3:a6:66:a8:a5:62:06:e2:d7:f6:7a:2e:20:70:0e:de:5b:f5:
2f:8c:39:20:87:b9:08:a7:cd:d9:6d:c3:23:be:c2:d4:67:46:
8f:ee:4b:2d:36:20:5b:69:c8:6e:0a:29:31:33:40:87:7b:ef:
7a:c2:63:19:0f:19:a6:1c:f3:db:3d:1b:62:b0:26:54:34:dc:
6f:e9:9c:61:4b:f5:1c:61:b2:63:d3:a3:91:1b:8f:a4:8d:0a:
0d:cb:2d:7b:87:45:ec:cc:d3:b6:1a:b1:15:9d:cb:32:58:d3:
2b:2d:57:7e:1a:28:46:db:3a:15:b0:66:b9:b2:e7:3a:b1:c0:
ea:ee:fb:ea:29:1e:cf:44:76:50:07:d6:06:32:d3:04:33:2a:
a5:5d:32:d6:46:45:fb:9e:b9:7f:1a:67:8d:e5:97:ac:b9:b9:
c9:2c:5a:11:18:03:66:17:18:16:ff:ac:2a:2e:2e:39:f0:0a:
3b:76:bf:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:43:36 2026 by rpki-client