
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
File: bkVzNIaAMm09remFIV0iZii58Ws.mft (raw, json)
Hash identifier: 6MQffS87eJzf9eHjjbrWh+mT/b/KSL2FzzUt2a/zHY4=
Subject key identifier: B7:DC:DA:40:74:9B:7B:0A:C0:C4:73:17:7F:DC:79:C2:0D:89:DE:52
Authority key identifier: 6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B
Certificate issuer: /CN=A915A0FB/serialNumber=6E4573348680326D3DADE985215D226628B9F16B
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
Manifest number: 017B
Signing time: Fri 17 Apr 2026 04:23:48 +0000
Manifest this update: Fri 17 Apr 2026 04:23:47 +0000
Manifest next update: Fri 24 Apr 2026 04:23:47 +0000
Files and hashes: 1: bkVzNIaAMm09remFIV0iZii58Ws.crl (hash: iZiJxfpiAMMpvSR25VTneCgVwPv6YZ9kNdWKBMuajbc=)
2: 47B1ABEA005711EF9DA70542C4F9AE02.roa (hash: gVmzpA9zRHnYukGpUCnMcrjZvxQuC2VsY3N1/rrLsw0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl
rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0FB, serialNumber=6E4573348680326D3DADE985215D226628B9F16B
Validity
Not Before: Apr 17 04:23:47 2026 GMT
Not After : Apr 24 04:23:47 2026 GMT
Subject: CN=69e1b5d3-920d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:6d:8e:20:be:c2:cb:61:cb:fe:5f:33:2b:
8a:23:c6:f8:b6:bb:94:55:09:3b:bd:eb:9b:07:8c:
d5:8b:27:b1:ba:96:f5:75:b0:27:c1:bd:a6:b3:4c:
9b:4e:e3:bb:ad:b6:79:df:19:01:1d:d8:63:67:c3:
99:ae:72:6b:95:af:63:e9:4b:01:9f:2b:53:e2:78:
f9:da:3e:ee:50:e3:aa:c2:56:37:8d:e4:9e:92:35:
94:a7:2b:27:81:ac:c7:59:74:43:5d:19:dc:0f:f5:
e2:fc:88:3a:18:59:03:d1:df:f0:dc:91:ab:78:75:
bf:21:fb:fa:c9:bb:4d:43:19:75:30:3c:3c:1e:12:
53:bf:9b:30:18:fe:ef:5a:87:51:44:0e:1d:c3:54:
e9:9e:98:50:48:8d:57:22:17:3e:ec:fe:06:45:d7:
ab:0e:30:61:7b:71:54:08:fd:ba:34:97:e0:7a:63:
b7:09:28:9e:1e:ff:e9:ff:9d:82:b1:00:49:0e:64:
3e:35:19:f1:ff:c9:89:34:9c:b3:7f:d6:51:5b:28:
23:f3:e1:c1:d0:9b:c8:c5:29:71:9a:94:a2:14:83:
a7:d3:7e:c1:80:0d:c3:ea:c6:bd:da:24:d3:5c:d1:
ff:f2:8e:44:a9:e1:cb:0b:66:e1:36:0c:78:45:26:
18:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DC:DA:40:74:9B:7B:0A:C0:C4:73:17:7F:DC:79:C2:0D:89:DE:52
X509v3 Authority Key Identifier:
keyid:6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:72:7e:50:bd:5a:68:d9:aa:e8:88:8a:61:f1:14:db:f6:c2:
bf:70:97:11:73:d7:a1:6e:83:41:d2:d9:01:67:97:56:a4:33:
ea:40:25:44:ce:02:5d:69:39:75:79:5b:26:5e:9a:a4:b9:e1:
fb:d5:ea:94:af:dc:2e:06:80:81:bd:48:04:4d:1c:a0:3b:e5:
67:54:4b:1c:f0:c7:bf:33:e7:aa:23:26:95:91:e1:52:b8:2e:
aa:82:f7:93:c8:ea:12:ed:e5:8b:90:88:89:c2:8f:da:62:17:
d4:f0:91:90:2f:4b:3a:ef:34:5d:9a:f3:0b:e6:01:2c:cd:5a:
56:81:77:8e:d4:7b:32:5a:d4:6b:b8:d4:d0:24:04:0a:16:7a:
14:81:b3:74:89:3c:15:2a:3d:22:75:80:72:a3:3d:55:96:ad:
3f:79:88:4a:dc:fb:8f:cc:d3:70:b9:15:94:a6:4f:b4:b4:18:
a9:b0:14:46:b2:0a:0a:ef:d8:c7:1a:99:93:2d:8a:4f:c0:10:
3a:73:ec:6b:95:80:08:93:ce:76:73:89:13:84:cb:59:0b:6a:
78:29:fe:e7:2e:79:78:c9:8c:e2:ae:37:3a:7d:0e:7e:09:af:
7e:9b:8f:93:f5:53:fc:49:c6:8b:3f:9a:f2:d8:c2:32:cd:5e:
25:d4:09:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:03:36 2026 by rpki-client