
$ rpki-client -vvf rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
File: BgI9tGNNXG41YYCoL7vPgLlHir4.mft (raw, json)
Hash identifier: OWXDzBHKhtRVlf3+6i4JOgmCgrA5Oq5itXqWDRbmf4Y=
Subject key identifier: 7E:D1:29:37:CB:5F:F2:F1:7B:C3:57:7F:32:D8:5F:4E:98:09:C4:E6
Authority key identifier: 06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE
Certificate issuer: /CN=A91490F7/serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE
Certificate serial: 023A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
Manifest number: 023A
Signing time: Wed 19 Aug 2026 03:06:43 +0000
Manifest this update: Wed 19 Aug 2026 03:06:42 +0000
Manifest next update: Wed 26 Aug 2026 03:06:42 +0000
Files and hashes: 1: BgI9tGNNXG41YYCoL7vPgLlHir4.crl (hash: GvC1+KcMzaQ9+VZkIoNeatJKO/xn+DRxyThg0Hb5qV4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl
rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91490F7, serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE
Validity
Not Before: Aug 19 03:06:42 2026 GMT
Not After : Aug 26 03:06:42 2026 GMT
Subject: CN=6a851dc3-3ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2f:88:a0:71:8f:14:ea:1a:2f:7d:d0:20:79:
39:b0:ca:95:47:42:44:8a:b3:5b:6d:ed:72:66:d7:
bf:10:49:13:4b:d7:8f:c4:9e:f8:2b:79:39:27:0d:
e3:86:5a:4c:c2:ea:24:11:db:3a:59:67:42:7d:7d:
76:44:4b:20:a0:97:83:f9:59:60:58:6f:8b:8e:4d:
ba:60:74:a8:ff:b1:05:18:9f:d3:8d:8f:ce:fd:97:
bf:50:81:94:97:69:eb:4f:83:79:39:5e:9f:ed:7c:
92:52:ed:98:74:07:c4:14:0b:4d:df:41:7f:d9:42:
1d:6b:6a:9f:8f:d8:52:4b:eb:81:de:98:47:2f:29:
01:e0:08:d0:43:d5:01:5f:56:a6:de:a4:2c:93:e0:
1c:c2:1f:0f:0d:53:fc:86:1c:e6:7d:70:be:cb:a0:
1b:8b:2e:0a:d0:12:44:1b:8e:a1:f8:5f:c3:0e:f4:
9b:b1:fb:33:a5:1b:ec:9f:e1:4c:60:25:5b:0f:6f:
8c:10:2c:28:e6:98:79:79:75:1e:ea:b7:1b:1c:43:
a8:71:4d:b2:1e:70:eb:a4:5f:7d:16:13:88:1a:8f:
f9:03:f6:f9:58:8c:9b:57:80:42:98:32:c9:99:82:
b2:95:b9:0a:bf:bf:21:a2:aa:ac:b2:d1:3c:53:1d:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D1:29:37:CB:5F:F2:F1:7B:C3:57:7F:32:D8:5F:4E:98:09:C4:E6
X509v3 Authority Key Identifier:
keyid:06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1c:69:ee:1d:4d:09:8d:c5:5f:98:c0:ff:38:d0:07:9b:3c:
68:41:99:1f:80:02:c9:0d:5a:5e:3d:b6:34:91:54:e3:24:d5:
08:ac:99:de:f4:20:3d:75:38:59:7a:1b:7e:18:ea:5c:7f:e8:
aa:91:49:ab:40:d0:5f:ef:3e:df:3d:ee:88:ae:91:90:0e:6c:
08:d1:49:ad:de:a9:19:71:f4:b1:49:81:ca:3f:f9:cc:60:6c:
c8:1b:dd:5c:90:e6:ee:63:38:1c:48:e3:d9:4e:6a:5e:5e:d9:
21:f2:2f:ec:8a:01:76:68:57:f0:7e:e5:d9:80:03:fe:44:61:
ec:25:85:cf:84:f2:9d:14:99:53:e4:55:12:7b:5e:23:7b:67:
97:80:e1:7e:27:aa:30:c1:fd:00:78:b3:4d:56:58:36:08:bb:
cc:74:34:4a:7b:4c:45:81:09:5e:10:f4:76:f4:f8:e7:7d:0a:
25:ac:45:7a:db:83:f4:e6:8b:d5:13:e3:0f:6d:cb:b4:e2:55:
1d:7e:56:3c:d9:1c:c0:ab:19:32:d0:cb:f7:87:c0:a3:46:4a:
20:31:a6:e8:f9:07:38:0e:c9:13:bc:d6:e1:fd:7b:78:a4:24:
ab:81:20:4b:89:e3:e6:a0:9b:0c:ce:de:c5:6c:8d:0c:30:c4:
05:cd:c9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:45 2026 by rpki-client