
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
File: BKm4kZsiD18-q9D03YXi9b28VQA.mft (raw, json)
Hash identifier: bLGnfmvn41QcO7lo3m2R2M+1bmYAJYBQQ2CIGpowMhQ=
Subject key identifier: 45:17:EF:A5:CE:65:CE:A5:90:13:AD:80:C7:DD:87:06:FD:6B:95:9B
Authority key identifier: 04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00
Certificate issuer: /CN=A913837F/serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500
Certificate serial: 024C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
Manifest number: 0246
Signing time: Thu 01 Oct 2026 03:15:23 +0000
Manifest this update: Thu 01 Oct 2026 03:15:23 +0000
Manifest next update: Thu 08 Oct 2026 03:15:23 +0000
Files and hashes: 1: BKm4kZsiD18-q9D03YXi9b28VQA.crl (hash: wn/25wEmQOkr2/klnfhp6sE9bpzKvYqaDbiLpS3eCOs=)
2: 3D83357646E411EE82ED8843C4F9AE02.roa (hash: M/VXx2BREvwNHgixBQpTJl5Ai6BjqeXEvNMr3p9U1X8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl
rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 03:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913837F, serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500
Validity
Not Before: Oct 1 03:15:23 2026 GMT
Not After : Oct 8 03:15:23 2026 GMT
Subject: CN=6abdd04b-2a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8c:e3:ee:4c:a8:b0:75:79:a6:16:c5:10:6f:
78:29:17:26:64:11:2b:b6:83:8e:15:58:37:3b:a7:
b7:6e:e5:c6:ae:18:b4:ed:e2:99:a3:32:d7:6b:1a:
f7:f0:81:d7:be:7b:77:02:4f:73:c2:b5:b0:c5:22:
79:89:8d:f5:b6:da:61:d9:8a:42:49:0b:98:eb:ee:
54:68:c8:52:42:69:8c:79:9e:db:a4:88:4d:f5:67:
1c:51:d0:2b:e0:32:ee:53:74:4a:a2:9d:5e:3e:dc:
cb:43:77:12:47:62:bb:7e:11:b2:1d:7f:c0:f6:22:
2d:b2:24:b6:d0:7a:31:e5:ff:39:7e:99:ff:7d:c4:
02:ec:7e:8f:3c:e2:ae:fb:cf:a5:18:49:0d:55:a8:
96:99:e6:b2:4a:26:a2:c7:a5:62:88:57:51:6c:ae:
c1:07:12:67:f1:0c:06:64:7f:9f:69:95:19:ad:05:
be:63:02:b3:23:a4:a2:e4:16:01:82:06:81:14:7d:
7a:5b:2d:96:b5:dc:19:26:72:f2:0e:3b:0e:eb:b8:
14:3e:88:04:fb:20:a2:e0:f1:6b:79:05:ef:b2:0d:
6b:25:1b:d3:2f:86:37:0c:81:8b:fd:22:70:41:68:
e3:ba:39:77:a6:f2:0a:03:06:f3:de:9a:ea:1a:ab:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:17:EF:A5:CE:65:CE:A5:90:13:AD:80:C7:DD:87:06:FD:6B:95:9B
X509v3 Authority Key Identifier:
keyid:04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:46:1e:af:96:26:98:45:59:5e:7e:fa:c8:e8:76:6b:bc:f5:
ae:01:89:61:78:b3:21:30:00:d7:7b:29:c7:e9:ea:e0:32:41:
cb:8d:57:35:71:ac:6b:64:96:1a:33:b9:30:93:5b:7f:66:b2:
db:4a:aa:be:76:e7:13:91:cc:34:6c:f8:02:4b:d6:d0:ac:49:
80:f2:1f:3c:17:22:ca:2e:84:88:07:0c:3c:d0:95:30:86:21:
ab:75:7e:78:1e:9c:c9:0d:fe:8d:55:5a:87:4f:22:4b:07:75:
61:30:59:42:dd:01:b8:de:e5:bf:c1:c2:0a:20:1c:83:8f:f5:
47:d2:01:46:fc:38:27:d2:ff:fb:f4:7a:9c:d7:02:d1:87:82:
75:61:66:4e:4f:36:d9:2f:26:7c:f5:f0:5e:25:ca:a6:24:35:
4d:e8:0c:4c:ab:37:c6:58:8a:bf:5f:33:12:2b:63:8e:21:6d:
a0:f6:71:a0:28:62:29:d1:5b:6c:4b:65:cf:19:66:9a:93:39:
b2:5b:a3:cf:cd:64:e8:b4:2b:ea:36:20:04:d4:06:96:3e:ea:
1e:04:3a:46:64:36:04:07:0f:ba:6a:6d:d6:18:bc:6b:86:63:
95:51:b9:bf:cd:36:3d:c8:21:fd:28:bd:73:68:4c:bf:d6:3b:
d9:7f:14:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 17:59:48 2026 by rpki-client