
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
File: BKAnX1srXBgOfg0Slu7WC8DPY0c.mft (raw, json)
Hash identifier: HRjF7k1jSrzgHhqeoO2n2LtyP9QFmNaKAyHFbsROncU=
Subject key identifier: 9A:41:FA:03:8B:03:37:BC:1E:B4:8F:29:D2:24:45:DF:C5:82:D0:28
Authority key identifier: 04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47
Certificate issuer: /CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347
Certificate serial: 1216
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
Manifest number: 1201
Signing time: Sun 20 Sep 2026 17:07:39 +0000
Manifest this update: Sun 20 Sep 2026 17:07:39 +0000
Manifest next update: Sun 27 Sep 2026 17:07:39 +0000
Files and hashes: 1: BKAnX1srXBgOfg0Slu7WC8DPY0c.crl (hash: AfqP1kRpWOcAYDYau+X8rS6gD0mGFeXk9NAUDoNQcoI=)
2: 7F35DF3CB74E11F0B044DA80C4F9AE02.roa (hash: eFLyDCdarX3BPuP+3Za6l81hsCe/zpHRVU46U5QQdqg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl
rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4630 (0x1216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C563, serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347
Validity
Not Before: Sep 20 17:07:39 2026 GMT
Not After : Sep 27 17:07:39 2026 GMT
Subject: CN=6ab012db-3896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:d5:27:94:c1:f6:85:f1:bd:62:68:e6:20:
61:e2:19:c3:b2:48:c1:6f:5e:9b:35:88:73:b5:96:
a8:7e:e2:0e:c2:96:be:7a:11:ce:a4:27:0e:2d:72:
0c:4e:f8:2b:76:4a:9e:7d:bb:ce:f8:e8:7c:c7:ab:
fe:21:3e:b7:b4:c9:3a:e5:4d:3b:08:aa:d3:6e:f3:
40:6e:76:a2:61:be:a8:ed:81:64:21:61:33:d0:55:
39:38:49:98:bc:86:67:05:0f:55:d5:76:7d:e9:c2:
d4:1e:e7:8f:b1:ca:c3:ff:8f:d9:64:4d:64:d7:ca:
fc:cc:f5:05:43:92:f4:76:42:83:18:e8:e1:0f:ef:
99:f2:e7:c0:66:a5:07:56:9b:2a:9e:ae:2f:28:8a:
c3:65:d5:27:21:da:f3:11:ef:38:5d:e9:64:e8:5c:
82:d2:b0:5a:38:75:df:d3:81:3e:a8:89:ba:31:05:
d5:af:43:77:98:30:00:5b:11:e1:4e:c4:d8:60:33:
7f:21:64:5a:eb:89:69:0a:99:8d:d2:f4:05:46:f8:
9c:30:70:74:72:b5:18:71:5e:e1:3a:b0:d8:6f:6f:
17:b8:68:12:06:04:7c:a7:ee:38:df:6b:54:c9:a3:
41:f2:75:23:09:33:70:ff:c6:84:44:04:2a:10:ba:
5d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:41:FA:03:8B:03:37:BC:1E:B4:8F:29:D2:24:45:DF:C5:82:D0:28
X509v3 Authority Key Identifier:
keyid:04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:66:2f:6c:0b:ff:12:ab:7e:86:71:31:db:6d:b1:02:0d:f0:
00:55:c5:f0:36:6a:70:e2:8e:0c:2c:bb:73:2d:61:45:4d:7f:
04:9c:8f:e0:cd:fc:d9:16:d5:7b:62:7b:46:b3:e8:c4:49:45:
e3:5f:91:2e:95:d4:7b:04:a5:bb:a7:36:57:2a:a7:59:3d:e6:
17:1d:3d:a6:54:04:19:0b:3e:3c:27:ff:35:32:a4:d1:d7:06:
ee:c5:81:2f:f9:23:1b:ef:71:58:30:57:b4:4a:c3:d0:69:8e:
b6:18:aa:4a:a4:bd:2c:77:fc:6d:00:54:d1:e0:17:fe:28:33:
7d:03:b3:33:c6:de:03:58:50:16:85:4f:0a:fe:31:c9:f6:40:
cf:e6:00:c4:15:3e:04:ea:86:1a:c9:7e:7b:f9:9a:0a:7a:93:
7b:b2:54:89:7e:7e:ca:5a:49:a3:91:61:f4:44:7f:ed:7d:33:
e6:10:a1:56:5c:9d:77:c4:8b:70:9b:1f:7c:c4:92:39:75:bd:
45:59:3f:3e:c3:85:97:fb:52:37:8d:76:6c:f2:ab:a3:f6:e5:
f2:2a:8a:f8:2d:7d:1c:0a:d8:f3:01:a8:f2:4f:45:63:0a:58:
88:a8:cc:4c:79:4f:3b:03:09:35:bd:f5:5e:25:70:67:1a:3c:
11:54:f0:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUM1NjMxMTAvBgNVBAUTKDA0QTAyNzVGNUIyQjVDMTgwRTdFMEQxMjk2RUVENjBC
QzBDRjYzNDcwHhcNMjYwOTIwMTcwNzM5WhcNMjYwOTI3MTcwNzM5WjAYMRYwFAYD
VQQDEw02YWIwMTJkYi0zODk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvcjVJ5TB9oXxvWJo5iBh4hnDskjBb16bNYhztZaofuIOwpa+ehHOpCcOLXIM
TvgrdkqefbvO+Oh8x6v+IT63tMk65U07CKrTbvNAbnaiYb6o7YFkIWEz0FU5OEmY
vIZnBQ9V1XZ96cLUHuePscrD/4/ZZE1k18r8zPUFQ5L0dkKDGOjhD++Z8ufAZqUH
Vpsqnq4vKIrDZdUnIdrzEe84Xelk6FyC0rBaOHXf04E+qIm6MQXVr0N3mDAAWxHh
TsTYYDN/IWRa64lpCpmN0vQFRvicMHB0crUYcV7hOrDYb28XuGgSBgR8p+4432tU
yaNB8nUjCTNw/8aERAQqELpdnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJpB+gOL
Aze8HrSPKdIkRd/FgtAoMB8GA1UdIwQYMBaAFASgJ19bK1wYDn4NEpbu1gvAz2NH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzU2My8xMUI2MzM2NDE3
QzExMUU5ODEwODBGNkNDNEY5QUUwMi9CS0FuWDFzclhCZ09mZzBTbHU3V0M4RFBZ
MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JLQW5YMXNyWEJnT2ZnMFNsdTdXQzhEUFkwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzU2My8xMUI2MzM2NDE3QzExMUU5ODEwODBGNkNDNEY5QUUwMi9CS0FuWDFzclhC
Z09mZzBTbHU3V0M4RFBZMGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo2YvbAv/Eqt+hnEx222xAg3wAFXF8DZqcOKODCy7cy1hRU1/BJyP4M382RbV
e2J7RrPoxElF41+RLpXUewSlu6c2VyqnWT3mFx09plQEGQs+PCf/NTKk0dcG7sWB
L/kjG+9xWDBXtErD0GmOthiqSqS9LHf8bQBU0eAX/igzfQOzM8beA1hQFoVPCv4x
yfZAz+YAxBU+BOqGGsl+e/maCnqTe7JUiX5+ylpJo5Fh9ER/7X0z5hChVlydd8SL
cJsffMSSOXW9RVk/PsOFl/tSN412bPKro/bl8iqK+C19HArY8wGo8k9FYwpYiKjM
THlPOwMJNb31XiVwZxo8EVTwig==
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:37:40 2026 by rpki-client