
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
File: BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json)
Hash identifier: d85m/UI1o5IttYnJnzc2NZ3whVREhkhO4mWq/o+SYS4=
Subject key identifier: AC:2D:DC:06:5E:B3:72:25:A0:C3:21:62:DF:E1:D3:9B:29:2D:16:E0
Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31
Certificate issuer: /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731
Certificate serial: 08B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
Manifest number: 08A5
Signing time: Tue 28 Jul 2026 20:58:28 +0000
Manifest this update: Tue 28 Jul 2026 20:58:27 +0000
Manifest next update: Tue 04 Aug 2026 20:58:27 +0000
Files and hashes: 1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: ooGzVV9xJ8ONj3FIUc12dG/ETtj/6KLCDfAQqhSnMGk=)
2: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: aKo7kU9VzRLVHM7TZXIM7HCq0FFfzX8NtTNUa7Z5tOk=)
3: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: NOqEaP7U/yGr1eMLYAeMdC9Ec160B/2VK+AAEC/VD28=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl
rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2233 (0x8b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731
Validity
Not Before: Jul 28 20:58:27 2026 GMT
Not After : Aug 4 20:58:27 2026 GMT
Subject: CN=6a6917f4-5c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:ee:b2:f5:f9:66:96:16:0a:64:6c:31:bb:
b5:64:fe:63:e7:f4:62:11:0a:82:6a:a4:94:1b:f9:
e7:e6:07:4d:49:01:1a:c3:d6:c9:37:fb:64:d5:74:
93:94:c7:bc:96:d7:71:5a:86:b9:54:a5:14:9c:1a:
6b:3b:76:3b:2e:22:3f:34:e8:42:67:da:ab:9e:5e:
36:84:a8:35:e2:47:68:fe:74:4d:68:5a:b0:49:92:
ed:65:cc:0f:2c:12:d5:f2:5c:6d:fc:39:09:74:06:
2b:c8:15:cf:cd:fc:09:82:fd:22:f9:08:86:de:fd:
fb:5e:ba:0a:a9:be:f2:47:6c:2d:de:cc:ce:c6:af:
dc:6f:2c:73:12:3f:dc:2a:48:8f:d3:cc:e2:82:e3:
73:44:f1:e2:a1:ea:44:e2:2b:38:58:b2:b5:80:df:
d2:dc:a1:df:7f:94:2b:3b:0c:0b:3b:7f:a3:af:c9:
aa:6a:0a:ba:d0:3e:9e:e5:0f:1e:a6:5c:af:bb:a1:
a7:94:bf:5b:49:55:12:d5:24:6a:1f:ce:cb:76:bb:
42:1c:f1:f9:96:3d:19:57:31:cc:14:d5:28:dd:29:
a9:69:a9:b9:fd:4d:48:37:58:27:0f:a6:d5:bb:7d:
23:b9:e9:1c:bd:88:21:c8:6f:56:43:4b:5e:ca:68:
19:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2D:DC:06:5E:B3:72:25:A0:C3:21:62:DF:E1:D3:9B:29:2D:16:E0
X509v3 Authority Key Identifier:
keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1d:0f:b0:f1:c5:3f:d4:8b:55:48:4c:0f:aa:89:7e:af:9b:
e7:10:5b:fe:f1:68:20:23:18:42:3b:00:27:c6:18:14:31:90:
ba:00:a3:eb:ca:fc:63:ba:c0:e6:b1:d0:00:75:ef:62:e0:bb:
a9:1d:4e:2f:b5:fb:68:b0:66:34:d0:c2:d9:31:37:fc:3f:2e:
05:70:19:9b:f5:19:6b:3d:a7:15:be:38:e1:0c:86:d8:e8:e7:
24:94:ac:e0:d6:99:9d:4c:a4:41:f4:04:6f:d6:24:cd:0c:75:
a7:ad:94:97:75:90:0b:fe:4f:cd:17:1b:44:d0:0d:12:ac:1b:
cd:f0:fa:e7:03:d5:38:0a:e5:2a:0c:8d:2d:11:ae:09:12:ef:
3e:96:0a:48:61:8d:a3:73:b2:48:8f:bc:dd:2b:8a:24:c9:b8:
68:ce:2d:b6:7e:5e:56:a2:d0:ff:66:f3:d5:84:22:87:ce:a0:
ab:50:91:27:b5:e0:d4:d3:ca:05:8f:38:71:61:ac:8c:b4:39:
6d:e9:d5:47:60:90:76:aa:fa:a0:ed:9a:a6:c5:cb:12:eb:65:
72:e6:ff:57:dd:07:0e:3d:78:87:58:e1:3e:39:c3:cc:29:41:
77:53:74:26:db:f2:56:d8:c8:0f:d6:7d:d0:94:6f:1f:12:41:
c4:bd:a6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:14:51 2026 by rpki-client