
$ rpki-client -vvf rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
File: BKVferOuOZ1PJX1P0omxBYCOXDw.mft (raw, json)
Hash identifier: JMl8+f4bylLIMbQuedHy74hRdaXRclAtW3VVpsC66Ds=
Subject key identifier: 8C:35:13:21:5F:2E:BB:48:46:AB:FD:CD:4B:25:DA:E5:29:FA:C6:3F
Authority key identifier: 04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C
Certificate issuer: /CN=A916002E/serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C
Certificate serial: 01AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
Manifest number: 01A6
Signing time: Wed 25 Mar 2026 03:29:30 +0000
Manifest this update: Wed 25 Mar 2026 03:29:30 +0000
Manifest next update: Wed 01 Apr 2026 03:29:30 +0000
Files and hashes: 1: BKVferOuOZ1PJX1P0omxBYCOXDw.crl (hash: PZDETVXyQcHwMWqjFu6hNBE04y7Y8uVEzZyn0zpMCDY=)
2: F9B8A0AEB04911EE98449A2BC4F9AE02.roa (hash: XupmD5TBiS9JMjUhz9mbvfPUNMko6I+6VjCMW5Hs+CA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl
rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916002E, serialNumber=04A55F7AB3AE399D4F257D4FD289B105808E5C3C
Validity
Not Before: Mar 25 03:29:30 2026 GMT
Not After : Apr 1 03:29:30 2026 GMT
Subject: CN=69c3569a-9df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:f1:fb:ff:62:d5:5b:3e:c6:92:cf:87:91:
7b:e1:79:89:2d:92:2d:56:8e:d5:b7:c1:3b:17:66:
35:f5:f5:db:1d:57:e3:a1:2c:55:8f:0d:3b:1d:a7:
47:a3:f7:0b:f3:17:75:80:91:00:c9:e8:6e:16:a1:
11:e6:11:98:71:08:96:0a:43:b3:cc:63:5f:37:25:
a4:81:42:57:0d:a5:ff:f0:7c:85:6d:d8:45:20:32:
b0:76:ca:a2:91:3d:41:0a:87:16:58:b5:73:9d:a1:
d3:6e:82:fe:1a:79:f2:3c:c3:a6:d2:51:e0:d3:b0:
91:1f:21:2e:22:8e:dc:6e:3c:78:cc:32:b3:73:c1:
e1:93:43:d2:ca:d9:fc:81:57:37:77:ba:9d:7c:00:
da:a5:66:43:f2:4e:4e:3a:3c:dc:4f:0d:40:9d:05:
8b:03:13:21:11:33:3f:13:e0:1b:10:5d:35:d9:9f:
54:47:c3:9d:f3:bb:0c:07:f3:30:0e:da:53:d3:21:
63:46:09:89:d4:ce:87:ca:53:15:54:92:64:39:2a:
d6:b5:88:ad:a1:35:fb:d6:a9:a1:f7:07:11:55:0c:
f7:aa:e3:fd:cb:5d:a5:5a:37:8a:0b:20:75:e0:66:
b5:07:8e:1c:15:41:c9:eb:63:4e:f4:ad:dc:8f:8e:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:35:13:21:5F:2E:BB:48:46:AB:FD:CD:4B:25:DA:E5:29:FA:C6:3F
X509v3 Authority Key Identifier:
keyid:04:A5:5F:7A:B3:AE:39:9D:4F:25:7D:4F:D2:89:B1:05:80:8E:5C:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKVferOuOZ1PJX1P0omxBYCOXDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916002E/F287D30AB01111EEBC586964C4F9AE02/BKVferOuOZ1PJX1P0omxBYCOXDw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:49:59:36:79:fc:0b:88:6d:e8:97:fc:f9:c0:d6:1b:38:2a:
a9:3b:3a:f9:0c:e4:15:47:fb:c1:bd:03:1a:9f:05:4f:ea:7f:
1b:5c:e4:6c:2a:65:d0:d7:71:cc:3b:a6:f9:8a:d4:11:9d:ff:
86:ba:6e:b5:9e:22:6a:33:35:fa:85:41:35:73:3e:9f:63:c8:
9d:8b:6e:d5:29:69:47:8b:33:f0:1b:b8:c8:70:1a:66:c3:83:
d7:49:db:d5:aa:0e:90:9f:98:39:ed:56:9e:a4:aa:2e:cf:be:
52:84:2e:56:06:42:67:93:dd:0f:7d:89:a3:c5:7f:ce:c5:eb:
34:84:63:4b:a8:a3:4a:f3:6e:0d:66:e7:be:d4:46:56:ec:d2:
62:1c:2d:b0:97:e8:4a:e0:14:3e:6a:32:2d:bb:f4:93:35:88:
01:80:c0:8e:ae:fd:e7:f7:43:a4:bc:17:aa:a8:a3:90:9b:0b:
d7:d6:c0:0a:31:96:bd:9b:cb:59:aa:83:5b:65:a8:7b:ec:1f:
18:53:00:22:79:f2:f5:4e:64:58:ad:91:5d:ff:9e:22:0b:50:
43:84:e0:01:2c:6f:55:99:61:f9:d8:a2:80:07:8c:49:39:87:
aa:15:99:1b:13:b3:79:1d:09:86:a6:aa:c3:5f:9e:25:7a:99:
fb:ad:d0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:34:15 2026 by rpki-client