
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
File: BgI9tGNNXG41YYCoL7vPgLlHir4.mft (raw, json)
Hash identifier: CsMUTFzHx3MiTaeJEU54xKv3J4Fxy4EPU0hey05jnKE=
Subject key identifier: A7:1E:CC:3D:DE:81:3C:FE:E0:93:59:1A:F6:DD:F2:70:E9:3E:89:C8
Authority key identifier: 06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE
Certificate issuer: /CN=A91490F7/serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE
Certificate serial: 0253
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
Manifest number: 0253
Signing time: Mon 05 Oct 2026 02:37:53 +0000
Manifest this update: Mon 05 Oct 2026 02:37:52 +0000
Manifest next update: Mon 12 Oct 2026 02:37:52 +0000
Files and hashes: 1: BgI9tGNNXG41YYCoL7vPgLlHir4.crl (hash: b4m1wsi71MxQdSN2DN8+l9PrZ10YwOUz6D+SotBoH9k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl
rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 02:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91490F7, serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE
Validity
Not Before: Oct 5 02:37:52 2026 GMT
Not After : Oct 12 02:37:52 2026 GMT
Subject: CN=6ac30d80-3027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:a1:c1:c0:9d:0a:36:ce:82:e9:3a:76:cb:
86:c8:35:4e:09:0b:8e:bb:67:5f:7f:87:c6:84:6e:
57:03:fe:ff:56:54:f6:6e:7b:e8:0e:59:03:ed:09:
8c:f7:28:1c:23:7b:f0:2c:83:08:de:a8:27:1e:ec:
8b:20:33:d8:92:32:dc:c4:35:08:ff:50:1d:ae:1b:
1d:35:6a:e0:36:f2:2b:37:0c:e9:de:47:74:46:19:
00:82:27:3d:6b:0a:c9:d3:e1:29:22:9f:75:d8:09:
5f:23:c7:ea:42:1d:e9:c6:92:6d:b5:4c:04:5e:7a:
94:34:3c:79:57:d7:a6:35:11:20:7a:90:83:3d:8f:
ba:72:4b:4a:c8:aa:be:5d:54:11:13:9b:a4:34:3b:
d0:64:b1:44:39:e8:01:91:d0:02:37:b5:ce:1c:6e:
d4:a1:d0:0c:2f:2b:5f:c1:54:e3:4b:8f:da:d0:9b:
b9:af:c0:ba:16:40:ee:68:9a:32:f7:82:e0:99:33:
f0:5c:98:52:24:61:f6:23:47:7c:26:b9:6f:6e:38:
2e:d9:9c:16:5e:9b:19:92:c2:cf:4c:44:f5:ee:ce:
41:32:55:b5:b0:6d:0a:ec:4f:22:53:c0:f1:a1:66:
99:bb:04:70:45:f9:57:b1:85:97:f8:85:2d:ce:c2:
42:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1E:CC:3D:DE:81:3C:FE:E0:93:59:1A:F6:DD:F2:70:E9:3E:89:C8
X509v3 Authority Key Identifier:
keyid:06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:bb:f8:31:54:9b:38:41:e2:42:58:11:20:73:99:05:38:c9:
b6:a8:a0:37:f3:e0:4d:49:9e:41:71:ae:c3:28:bd:aa:fa:b0:
bc:6f:ad:60:13:42:77:bd:ef:98:ab:a6:fe:e4:92:fe:79:18:
63:7f:8a:bb:9b:e7:30:48:92:8c:92:4d:d1:e4:70:27:19:53:
41:39:4a:89:73:30:41:1b:25:cf:96:53:64:c0:27:9d:62:b4:
83:91:2e:c0:11:0c:16:0b:dc:11:1e:6d:ff:6b:0c:2b:86:a3:
34:e9:4d:ce:a6:14:7f:d8:c5:e6:9c:fa:15:79:d1:e4:53:15:
a0:ed:c1:bb:6b:f1:21:9b:8e:26:b5:2a:27:f2:cf:b5:4c:6c:
71:09:cd:11:5e:50:06:f2:2c:39:44:e5:80:c4:80:e4:f0:a7:
8b:be:61:e2:e0:3e:5f:a7:19:06:fa:10:f1:cb:d9:6c:6d:d8:
15:ed:b4:96:c2:98:ce:fc:af:f5:64:9c:7f:f3:64:5d:26:b9:
4e:42:c6:73:6f:4b:12:b5:2f:f3:98:54:cd:8f:08:72:7a:c5:
e0:2b:fa:c1:19:3c:69:90:e0:74:c7:aa:e2:2c:c2:6c:b9:a4:
1c:55:32:b1:85:c7:ef:aa:f2:2b:f2:a7:4c:a4:b9:f4:ec:fb:
0b:04:86:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:51:58 2026 by rpki-client