
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
File: BKAnX1srXBgOfg0Slu7WC8DPY0c.mft (raw, json)
Hash identifier: 7D/OSCj6+KbUT3wrDHY2VzZieAaRDIvjJpBzJmiWqHI=
Subject key identifier: 6B:AB:B4:D0:72:0A:B1:5C:97:9A:3C:78:EF:DC:89:7A:EF:31:33:FA
Authority key identifier: 04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47
Certificate issuer: /CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347
Certificate serial: 11A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
Manifest number: 1194
Signing time: Sat 28 Feb 2026 17:18:31 +0000
Manifest this update: Sat 28 Feb 2026 17:18:30 +0000
Manifest next update: Sat 07 Mar 2026 17:18:30 +0000
Files and hashes: 1: BKAnX1srXBgOfg0Slu7WC8DPY0c.crl (hash: 0Gg+KfWFx5adjCKff0fgYiWh8cMDp2w6/zwY5ywNo+U=)
2: C484F3C0B74E11F0823EBC10C4F9AE02.roa (hash: U/S7CWTLY0CZuROoIY8JGqBwFqO/5bH5CEGav6c/kXM=)
3: 7F35DF3CB74E11F0B044DA80C4F9AE02.roa (hash: 6JeSlg1pK35m2jwrXAt2088RL1BuDvd/WzU5x7QS2dI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl
rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4516 (0x11a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C563, serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347
Validity
Not Before: Feb 28 17:18:30 2026 GMT
Not After : Mar 7 17:18:30 2026 GMT
Subject: CN=69a32367-8541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:6a:1e:dc:6a:91:80:ba:03:00:5b:2d:88:
82:af:5d:5e:0b:8b:6f:ff:64:40:3f:db:96:29:a1:
a4:2b:2b:14:a0:83:58:dc:87:e3:1a:55:d6:03:80:
2c:62:e3:6b:6d:c4:09:b1:a1:38:57:6e:7b:ab:72:
bd:fc:b9:c7:b9:4f:7b:17:91:a9:c8:31:9e:79:16:
d6:a0:31:ba:77:89:cd:77:87:f2:aa:df:b4:9b:4d:
8e:e0:f1:3e:ff:4e:7f:ad:04:1b:3b:df:c9:9b:fb:
25:f3:c7:63:c5:1a:38:fd:a7:af:f1:8f:40:25:03:
b1:16:8a:e2:56:d7:87:6f:93:8b:a8:2e:98:77:45:
43:13:44:6f:0d:60:74:7f:59:c3:6c:42:43:50:f8:
a7:eb:c7:3f:34:1d:5c:8b:14:89:98:60:98:25:08:
41:13:07:3f:37:d9:de:8f:dd:d2:6b:85:52:8d:34:
a0:e1:1f:9c:b7:9e:42:e5:ed:bd:0e:a1:75:24:cc:
bc:93:bc:f4:92:8d:e2:84:e3:6b:11:e7:f5:b3:c6:
3b:33:4f:9b:43:70:19:4c:4a:3b:07:60:d4:e3:c0:
63:ce:93:fc:ea:95:2e:8f:bd:8b:9e:a1:32:46:e7:
ef:2d:0f:8e:6b:b8:c5:0c:7d:ae:5f:47:d3:ee:fd:
76:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AB:B4:D0:72:0A:B1:5C:97:9A:3C:78:EF:DC:89:7A:EF:31:33:FA
X509v3 Authority Key Identifier:
keyid:04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:5b:fa:69:2b:09:22:de:4a:49:98:eb:15:72:32:2d:95:24:
d2:5a:66:c4:50:d7:fa:61:4a:80:da:a0:2c:7f:aa:a0:67:b1:
a7:c3:e8:34:41:cc:97:f3:ed:e9:ac:fd:95:3c:6d:31:45:9e:
ed:04:6e:44:36:9a:30:b2:8a:8b:cc:59:8a:3e:ff:b8:19:b8:
11:04:29:01:a7:15:52:46:3b:5d:9e:b4:92:8b:a3:a1:68:80:
e3:70:2e:ab:2b:a0:bb:a1:c3:53:db:ae:47:32:d6:73:cb:31:
24:f3:38:45:e5:c3:ec:44:21:8c:ac:c3:8e:76:aa:af:d1:49:
b2:5d:ff:e4:5b:fd:6b:fd:dc:95:9e:28:04:ee:69:8a:36:3a:
93:de:b1:ef:c6:d4:18:54:fc:b6:02:04:cf:f2:af:4f:0b:c3:
9a:11:97:65:86:62:11:61:f9:6d:51:41:40:7c:a9:ed:54:67:
11:1e:b9:65:6f:fd:3f:41:c4:b1:17:68:da:1c:0c:72:66:c1:
78:88:43:43:ab:b4:f4:7e:8e:3e:84:e1:b5:c0:8e:db:07:fe:
62:e4:48:b8:16:db:90:c2:50:cc:92:8d:90:a1:e8:76:b3:af:
4f:d9:07:73:d2:a2:5a:fb:7d:b8:14:40:77:54:f3:aa:dd:0b:
69:ef:d7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:30:17 2026 by rpki-client