
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
File: BKAnX1srXBgOfg0Slu7WC8DPY0c.mft (raw, json)
Hash identifier: c6BtVzrPHqZP3kvOHjfmwAigogXXwWZmvFHVV6s/LRQ=
Subject key identifier: EC:5D:07:38:6B:E7:66:61:52:1C:29:46:DB:CC:C0:8C:A8:87:E1:75
Authority key identifier: 04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47
Certificate issuer: /CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347
Certificate serial: 11F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
Manifest number: 11DF
Signing time: Wed 22 Jul 2026 17:17:49 +0000
Manifest this update: Wed 22 Jul 2026 17:17:48 +0000
Manifest next update: Wed 29 Jul 2026 17:17:48 +0000
Files and hashes: 1: BKAnX1srXBgOfg0Slu7WC8DPY0c.crl (hash: kfc7/pMcNA2U6/8SwLuQMtrU0rk9unqBDz/IuldxvHg=)
2: C484F3C0B74E11F0823EBC10C4F9AE02.roa (hash: h2DwpWR+IjAMG7fxYPQ9pAtPnP4GTYNqqiG9hVcrgDE=)
3: 7F35DF3CB74E11F0B044DA80C4F9AE02.roa (hash: cXPjCHPaKFx65HIG8toHkGNypseR6/vfwRdThb3BfVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl
rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4595 (0x11f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C563, serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347
Validity
Not Before: Jul 22 17:17:48 2026 GMT
Not After : Jul 29 17:17:48 2026 GMT
Subject: CN=6a60fb3d-d00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:38:ea:09:ca:d2:ec:eb:05:0c:12:12:15:d9:
23:d7:63:31:b8:2b:c7:61:2d:e4:88:12:fd:e9:2f:
51:47:0a:41:c9:bc:8b:dc:e2:6a:d7:d1:d1:a6:aa:
fb:7e:7c:fa:15:f1:1f:d4:b7:36:25:0a:26:6b:94:
22:3e:63:01:be:dd:9a:4c:f2:72:97:eb:d0:29:8e:
68:5a:9d:af:6e:1d:bf:1c:4b:37:8c:1e:10:89:9b:
3a:f0:f6:bd:6e:bd:eb:8d:00:ad:23:57:12:2f:4e:
0a:7d:b5:1d:55:5a:b3:97:54:bb:c6:c7:64:db:55:
b9:86:ab:cf:e4:3b:58:fc:56:ab:dd:9f:4b:34:00:
6a:3e:50:dc:98:ed:57:ce:a3:0c:76:f7:4a:c4:4b:
1c:63:a4:3a:47:b9:65:b2:78:92:10:05:89:de:da:
1e:94:fa:fb:78:cc:3a:27:46:19:4a:35:ff:d1:1b:
0b:ec:dd:09:db:9b:cc:83:14:94:59:e6:ce:7d:0a:
05:6a:75:07:0a:0d:86:3b:fb:97:a3:7d:76:f5:8e:
18:f2:a8:b0:33:d0:4e:7f:07:3d:d6:8a:d8:98:d9:
70:ff:7d:3c:fd:27:23:6a:ea:e9:ae:b1:55:51:3c:
90:0f:20:21:31:6a:14:4e:57:6a:98:f4:2e:47:c8:
f8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5D:07:38:6B:E7:66:61:52:1C:29:46:DB:CC:C0:8C:A8:87:E1:75
X509v3 Authority Key Identifier:
keyid:04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6b:0f:03:9c:76:cc:8e:33:1d:33:06:d5:94:83:70:34:66:
5e:18:f7:d6:dd:46:80:5d:10:36:2b:d0:b1:97:da:dd:28:df:
94:4b:cb:ec:95:d8:ff:db:ae:ba:43:7f:ca:4b:bc:b4:13:ab:
e9:c4:7f:e8:b9:72:78:af:df:21:fd:86:2b:f3:f6:dc:8a:3e:
ab:1b:32:bd:b3:a3:c4:47:fa:7a:6f:86:cd:ae:58:0d:61:ef:
f0:68:46:99:f6:26:8b:1f:92:ea:e9:f7:61:b8:e0:fb:fa:4d:
3a:04:5c:12:16:fa:22:27:e1:ea:70:e9:4a:47:ea:74:72:79:
b2:07:74:3d:52:ce:da:34:96:12:54:b1:7b:e5:ee:b4:61:34:
cd:b4:96:3e:1c:2f:f6:3e:f5:05:a6:89:93:c6:70:1d:56:47:
1b:19:d1:eb:b9:03:b2:08:c7:3b:7f:cf:ef:97:7d:40:d6:45:
99:ac:b2:e5:0a:c2:0f:83:bb:68:d6:f3:95:69:2c:19:af:35:
22:94:cd:b0:64:5e:18:24:c9:43:d9:30:46:d7:93:f8:c8:38:
20:60:4f:97:52:7c:37:8d:96:0b:90:31:db:36:9d:0d:1d:cc:
22:6d:4e:b5:67:ad:f5:c0:af:95:e5:ca:25:b0:22:95:f7:31:
39:df:6c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:46:07 2026 by rpki-client