
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
File: BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json)
Hash identifier: VzToYf/lqzsRC/EhbX2xoEaFfngcxf6NdGIZxdyKAr4=
Subject key identifier: 97:08:D9:F0:32:97:6C:F4:A3:85:BC:7C:02:23:32:0F:B4:8C:6D:03
Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31
Certificate issuer: /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731
Certificate serial: 086D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
Manifest number: 0859
Signing time: Mon 02 Mar 2026 02:55:47 +0000
Manifest this update: Mon 02 Mar 2026 02:55:46 +0000
Manifest next update: Mon 09 Mar 2026 02:55:46 +0000
Files and hashes: 1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: bIADePacYDyFAsnm+oUqPPitE/RQt617YdeDy01ACc4=)
2: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: NOqEaP7U/yGr1eMLYAeMdC9Ec160B/2VK+AAEC/VD28=)
3: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: aKo7kU9VzRLVHM7TZXIM7HCq0FFfzX8NtTNUa7Z5tOk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl
rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:55:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2157 (0x86d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731
Validity
Not Before: Mar 2 02:55:46 2026 GMT
Not After : Mar 9 02:55:46 2026 GMT
Subject: CN=69a4fc33-5b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:6b:63:1d:6d:32:61:e5:b0:0b:11:50:3a:
19:f1:ef:31:69:89:df:88:d6:e1:47:63:50:f2:fe:
c2:05:19:34:61:63:bd:a0:03:50:0b:53:a7:4d:f3:
59:c8:1b:83:23:3f:77:e9:e3:eb:5d:2a:73:86:41:
c7:9c:c1:b9:0b:30:ea:a8:b5:f0:77:c8:f0:97:a0:
3e:25:b1:f2:a9:a9:83:f4:a4:93:f8:5f:4e:d4:15:
19:34:bf:b8:30:1b:33:02:87:71:cf:8f:3d:a0:11:
10:4e:0b:76:8d:d8:85:9a:0b:ff:3d:15:24:a3:2a:
38:e5:7e:7b:48:05:64:82:a8:d1:de:00:3f:d8:73:
3a:56:ac:f4:4e:4f:35:5c:e3:27:bf:7d:c5:e1:32:
f4:72:4d:5c:5e:62:ba:85:6f:45:43:b3:da:69:8c:
a2:21:25:ba:21:c9:33:33:ed:61:23:59:be:01:58:
94:d7:22:ae:00:85:d7:b1:18:b6:ac:34:1c:11:87:
64:5e:3e:99:52:c3:d9:07:c2:a7:22:fe:81:70:80:
66:49:6c:b6:4b:30:ff:da:12:ab:b5:11:88:da:75:
fb:39:8a:43:b1:ff:ea:86:01:c4:63:38:86:90:db:
4f:d3:94:38:2f:60:ae:50:ee:9f:97:aa:87:89:96:
6f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:08:D9:F0:32:97:6C:F4:A3:85:BC:7C:02:23:32:0F:B4:8C:6D:03
X509v3 Authority Key Identifier:
keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:91:e8:36:2d:c0:c2:4f:19:6f:ae:1e:18:56:b3:d9:f2:42:
d0:bf:80:28:51:f2:9d:b6:60:7c:5e:45:93:49:05:87:85:0f:
62:51:c5:8b:c1:cd:b7:80:ef:68:dd:b7:0a:97:dd:e8:1f:31:
96:eb:6b:68:21:f2:63:8a:a8:16:5b:8e:0d:33:5f:d7:de:a7:
e8:ee:63:51:1d:30:38:3d:ed:3a:6c:8f:4c:f6:37:4b:2e:5d:
e0:b7:f5:34:9e:59:8b:80:79:ca:01:37:13:a9:bd:61:4f:b0:
9b:77:e6:0f:28:2e:fc:53:a9:f5:4c:13:8e:3b:72:17:9c:25:
70:a0:40:e6:84:fa:55:fe:a4:b5:1a:d2:75:69:77:73:48:04:
d9:b2:80:17:09:cf:fb:cc:8c:39:66:2c:c2:f2:2b:cf:5c:17:
47:93:9d:b0:33:21:4a:21:aa:db:e7:69:16:3f:bf:b6:99:51:
0c:f8:e6:11:49:5f:ad:d4:56:de:75:79:d4:bf:3a:24:78:29:
4b:63:3a:9d:cc:32:06:a6:95:70:b6:90:d4:ad:a4:6b:3a:04:
11:ce:dd:ff:b4:e4:f1:42:ec:4a:9b:c9:fb:01:bd:66:41:89:
11:8d:7a:c6:c1:ee:cd:3d:94:49:2f:85:42:e8:0d:bf:9e:cc:
54:c2:c7:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUYzMTYxMTAvBgNVBAUTKDA0MjkwQ0IyNEVFRUYwQTNBNzg3MTg3Q0I0RkZDNzQ3
REU4NjE3MzEwHhcNMjYwMzAyMDI1NTQ2WhcNMjYwMzA5MDI1NTQ2WjAYMRYwFAYD
VQQDEw02OWE0ZmMzMy01YjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyuhrYx1tMmHlsAsRUDoZ8e8xaYnfiNbhR2NQ8v7CBRk0YWO9oANQC1OnTfNZ
yBuDIz936ePrXSpzhkHHnMG5CzDqqLXwd8jwl6A+JbHyqamD9KST+F9O1BUZNL+4
MBszAodxz489oBEQTgt2jdiFmgv/PRUkoyo45X57SAVkgqjR3gA/2HM6Vqz0Tk81
XOMnv33F4TL0ck1cXmK6hW9FQ7PaaYyiISW6IckzM+1hI1m+AViU1yKuAIXXsRi2
rDQcEYdkXj6ZUsPZB8KnIv6BcIBmSWy2SzD/2hKrtRGI2nX7OYpDsf/qhgHEYziG
kNtP05Q4L2CuUO6fl6qHiZZvTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJcI2fAy
l2z0o4W8fAIjMg+0jG0DMB8GA1UdIwQYMBaAFAQpDLJO7vCjp4cYfLT/x0fehhcx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjMxNi8yODFCOUQ2MEY2
RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThLT25oeGg4dFBfSFI5NkdG
ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JDa01zazd1OEtPbmh4aDh0UF9IUjk2R0Z6RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RjMxNi8yODFCOUQ2MEY2RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThL
T25oeGg4dFBfSFI5NkdGekUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEpHoNi3Awk8Zb64eGFaz2fJC0L+AKFHynbZgfF5Fk0kFh4UPYlHFi8HNt4Dv
aN23Cpfd6B8xlutraCHyY4qoFluODTNf196n6O5jUR0wOD3tOmyPTPY3Sy5d4Lf1
NJ5Zi4B5ygE3E6m9YU+wm3fmDygu/FOp9UwTjjtyF5wlcKBA5oT6Vf6ktRrSdWl3
c0gE2bKAFwnP+8yMOWYswvIrz1wXR5OdsDMhSiGq2+dpFj+/tplRDPjmEUlfrdRW
3nV51L86JHgpS2M6ncwyBqaVcLaQ1K2kazoEEc7d/7Tk8ULsSpvJ+wG9ZkGJEY16
xsHuzT2USS+FQugNv57MVMLHaA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:19:08 2026 by rpki-client