
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
File: BKAnX1srXBgOfg0Slu7WC8DPY0c.mft (raw, json)
Hash identifier: DY10QVn0Wip7uT1LzMrFDjYKqLbAIX7yzIkcfhhYoWs=
Subject key identifier: 5A:31:6D:B5:B7:AD:37:DF:B8:E7:48:EF:11:B4:C7:B8:FA:8D:1A:C3
Authority key identifier: 04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47
Certificate issuer: /CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347
Certificate serial: 11C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
Manifest number: 11AE
Signing time: Thu 16 Apr 2026 17:07:48 +0000
Manifest this update: Thu 16 Apr 2026 17:07:48 +0000
Manifest next update: Thu 23 Apr 2026 17:07:48 +0000
Files and hashes: 1: BKAnX1srXBgOfg0Slu7WC8DPY0c.crl (hash: v4WepX9ydSZ5sippAlNKYspWj8oORFIRMeWBvlsr7JA=)
2: C484F3C0B74E11F0823EBC10C4F9AE02.roa (hash: h2DwpWR+IjAMG7fxYPQ9pAtPnP4GTYNqqiG9hVcrgDE=)
3: 7F35DF3CB74E11F0B044DA80C4F9AE02.roa (hash: cXPjCHPaKFx65HIG8toHkGNypseR6/vfwRdThb3BfVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl
rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4546 (0x11c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C563, serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347
Validity
Not Before: Apr 16 17:07:48 2026 GMT
Not After : Apr 23 17:07:48 2026 GMT
Subject: CN=69e11764-34aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d0:f7:43:8f:fb:46:9c:92:b3:15:45:1f:2d:
e9:d7:7c:e9:68:0b:4b:62:47:c4:60:95:a8:fb:6a:
34:57:7b:9d:3f:a1:8a:0e:db:3e:12:78:de:90:86:
ae:c2:a1:bf:0c:d1:75:94:72:7e:74:08:0d:be:e4:
42:d8:9f:0b:9c:58:2f:07:d2:aa:fe:05:9b:65:89:
77:73:9e:a2:8e:dc:1d:81:39:96:a0:93:9e:e3:92:
05:51:e2:f2:43:a4:a9:e4:d3:4d:8c:81:47:a0:1b:
7a:4f:48:42:20:e1:13:a2:da:a7:ce:c2:b3:11:8a:
b9:29:e1:de:6b:ad:c5:9a:32:1f:e1:cf:58:20:75:
f5:54:6f:3f:53:a8:36:36:03:ae:bd:8b:45:2c:03:
60:60:d1:5a:5a:28:30:4d:43:10:65:4e:85:e3:85:
33:7f:12:ab:ed:dd:36:e5:0a:dd:9f:98:7f:13:f5:
7b:d1:20:12:91:9a:15:0b:5f:5c:58:c3:f3:9d:06:
96:a2:a4:bf:f2:e1:62:db:4b:9e:fb:32:b8:2e:5a:
c7:7b:46:15:aa:3c:8e:42:f3:d6:f1:b6:63:a1:11:
d9:e3:df:de:08:8a:09:e7:da:63:b8:d3:63:45:e9:
1d:d8:2d:71:13:d3:57:64:18:e0:75:1a:74:d2:0f:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:31:6D:B5:B7:AD:37:DF:B8:E7:48:EF:11:B4:C7:B8:FA:8D:1A:C3
X509v3 Authority Key Identifier:
keyid:04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:13:ec:5e:30:d9:00:59:cc:4b:4c:51:98:2d:ca:e8:49:14:
77:5f:b9:32:09:1e:90:d8:94:60:51:9c:0f:d6:ea:0e:96:59:
2d:bb:a4:a4:26:76:b4:0d:21:81:84:af:52:0c:68:8f:86:53:
c2:d2:2e:fa:ac:73:57:c2:71:b9:47:d9:be:da:10:4d:d9:88:
53:a0:9c:47:b7:43:ad:64:7d:51:a7:d2:35:77:4c:ce:f4:18:
d3:ab:b9:93:92:5f:bf:1e:ab:01:e4:f4:b8:d1:8f:57:d6:b2:
bc:6c:71:c4:34:64:b1:03:5e:d3:5c:1c:63:64:17:d6:65:a6:
3b:b6:d8:b4:90:9e:36:be:44:b1:6f:23:51:29:16:4b:37:c9:
13:71:6c:2a:a8:a1:73:c2:98:98:71:3d:37:af:25:6b:cf:c8:
28:f9:8b:83:4a:ae:b1:8e:3a:b9:99:c7:3c:1c:bd:14:b1:9d:
b8:09:24:eb:6d:48:55:03:6f:6b:80:86:29:25:e7:0d:80:a8:
5b:17:ce:a3:0e:7c:64:b4:93:fb:52:15:50:48:10:49:40:66:
d2:d8:ab:1b:2a:fd:af:93:86:52:dd:98:08:9a:84:18:c6:0d:
9c:e0:48:f2:1e:ba:82:a4:72:b9:8c:e9:bf:c8:17:e9:1f:06:
c6:7f:db:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:37 2026 by rpki-client