
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft
File: BKM4-nsSbgfA74urj33BycGsMiE.mft (raw, json)
Hash identifier: q5mggcdEUwIDnPLTZTjfWSKnzL92/2O3K0Mclyu5vpY=
Subject key identifier: EC:53:65:B0:E1:30:77:DA:A5:69:28:3F:BE:1B:D4:CA:45:D9:17:88
Authority key identifier: 04:A3:38:FA:7B:12:6E:07:C0:EF:8B:AB:8F:7D:C1:C9:C1:AC:32:21
Certificate issuer: /CN=A91C146D/serialNumber=04A338FA7B126E07C0EF8BAB8F7DC1C9C1AC3221
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft
Manifest number: 011F
Signing time: Wed 23 Sep 2026 05:38:48 +0000
Manifest this update: Wed 23 Sep 2026 05:38:47 +0000
Manifest next update: Wed 30 Sep 2026 05:38:47 +0000
Files and hashes: 1: BKM4-nsSbgfA74urj33BycGsMiE.crl (hash: weQ7/Y23kJknX+lrTzIWBWhvnhtCLmath6kKuPmBHpU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.crl
rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:38:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C146D, serialNumber=04A338FA7B126E07C0EF8BAB8F7DC1C9C1AC3221
Validity
Not Before: Sep 23 05:38:47 2026 GMT
Not After : Sep 30 05:38:47 2026 GMT
Subject: CN=6ab365e7-3f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:73:ac:cd:ad:e6:95:82:d8:4a:a8:f6:c1:f4:
c0:2c:33:da:bb:9b:84:28:c9:68:5e:19:f2:51:a0:
5d:d7:74:82:d7:ce:e2:87:b5:24:5f:e3:9d:8b:39:
eb:13:21:f9:4f:2b:ed:2b:a3:d4:c2:ba:c3:2e:d3:
34:a3:54:e3:c4:34:2c:bd:a3:28:e3:89:89:1d:51:
b6:9b:70:bd:4c:be:5c:eb:4f:b3:62:d3:de:9a:8b:
23:bf:6e:9e:53:61:31:ae:c4:37:ba:6b:0e:d0:c3:
a1:a7:71:b9:f1:5a:cc:bf:fb:37:74:20:e4:fb:ff:
0a:3b:15:ba:e5:21:fa:4f:e8:05:b9:78:71:ad:5b:
b0:da:59:66:bd:6a:88:60:b6:50:1e:52:ca:9a:d7:
3e:04:c9:73:3f:ec:e1:07:72:20:58:ad:da:24:58:
a9:b1:9a:c4:48:91:95:c0:0d:3f:9c:69:1e:0d:7f:
53:e3:21:1f:89:2f:a5:0b:1f:7c:60:1e:71:27:04:
51:db:fb:18:3a:b3:b9:c9:a5:8c:90:68:d3:56:26:
43:c4:66:48:eb:7c:c2:3e:1a:1b:1e:c0:05:24:b9:
cd:23:67:be:92:19:ea:58:a9:ad:8b:27:87:e0:a7:
15:a1:62:a9:6e:3a:cf:bc:39:5a:43:c9:48:78:fe:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:53:65:B0:E1:30:77:DA:A5:69:28:3F:BE:1B:D4:CA:45:D9:17:88
X509v3 Authority Key Identifier:
keyid:04:A3:38:FA:7B:12:6E:07:C0:EF:8B:AB:8F:7D:C1:C9:C1:AC:32:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ca:15:48:12:1a:5d:15:a0:00:e9:a4:1a:80:7e:93:80:8f:
dc:c8:8e:91:c0:9d:a2:37:b5:b9:9c:09:d2:db:af:28:22:7e:
33:5c:e4:2d:08:18:94:5f:2f:0d:25:17:c2:00:6e:df:03:38:
87:ba:c1:cf:8b:32:43:65:0c:31:1a:94:81:5e:d8:65:15:5a:
53:6d:a9:fd:ce:a7:48:d1:76:56:82:c1:e3:be:08:07:66:cf:
11:e8:05:98:5d:d1:17:ad:a6:9f:c8:2c:67:ce:65:f9:c2:7f:
c3:fa:67:bb:44:78:b4:d8:7a:88:77:38:2c:a5:4e:09:2f:e9:
ce:c2:e9:2e:8d:a2:6f:f3:1a:8a:4b:85:5e:a2:61:bc:95:53:
e1:64:b9:12:14:a4:e2:c1:b1:fc:b5:15:72:86:95:34:6a:39:
51:0b:84:d7:10:62:2e:97:5e:f6:5c:c8:0d:5a:35:83:19:09:
b9:07:8d:61:23:fc:02:4c:66:0b:e3:71:f2:d0:05:05:8d:17:
69:fb:bf:bb:e4:2d:75:8f:e4:f9:f8:9e:31:23:42:b5:eb:8b:
a4:82:93:64:66:03:fc:09:91:79:e3:11:92:99:30:13:a6:ca:
58:34:c8:6d:59:d4:c0:64:fc:d7:78:d0:32:0a:cc:1d:49:5e:
47:d4:61:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:20:03 2026 by rpki-client