
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
File: bifP0YnuRkQx1LkBO8wHWKgCZOY.mft (raw, json)
Hash identifier: skMCgbIdZIQ9yrVlmcSw3eVj6WhGXPkONX8WoqULzRM=
Subject key identifier: BA:7C:DA:1B:90:7C:05:8A:A5:43:30:71:10:18:CC:76:DE:B3:48:14
Authority key identifier: 6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
Certificate issuer: /CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
Certificate serial: 19C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
Manifest number: 19B0
Signing time: Sat 24 Oct 2026 16:22:17 +0000
Manifest this update: Sat 24 Oct 2026 16:22:17 +0000
Manifest next update: Sat 31 Oct 2026 16:22:17 +0000
Files and hashes: 1: bifP0YnuRkQx1LkBO8wHWKgCZOY.crl (hash: Vd6bAQoEoJL8KD0+uvC06nnM0wXU4S+WqQxC6QjqIQE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl
rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 16:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6601 (0x19c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D13, serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
Validity
Not Before: Oct 24 16:22:17 2026 GMT
Not After : Oct 31 16:22:17 2026 GMT
Subject: CN=6adcdb39-818c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:80:a6:b3:45:35:88:cf:fa:28:8f:81:11:
ae:50:3d:b1:ac:ea:9c:c0:57:18:ed:5c:c6:5d:66:
34:9d:af:fe:50:80:1c:60:0d:f0:77:4d:ca:3d:5e:
f3:bb:76:a2:6c:39:2c:86:6d:54:3d:d3:65:ca:8c:
ed:bc:52:99:85:52:a9:dc:0d:cf:28:52:18:c1:0e:
f9:17:6d:ee:4f:15:28:f1:4e:e3:38:76:ed:c1:d6:
43:e1:6a:63:41:c8:6c:45:97:19:c7:3e:24:a8:f0:
37:63:17:ae:cc:64:21:48:6a:4c:d5:da:d9:6b:d0:
3c:dd:59:cd:e3:d2:d7:04:bd:84:c5:70:b9:e6:5b:
50:e8:74:5b:44:c2:be:98:b9:38:7d:3c:7e:0d:23:
4d:3e:31:26:73:76:8b:40:09:85:c1:cc:bb:20:d4:
19:09:22:4d:75:f4:3f:6b:e1:14:fa:e2:d5:9b:9f:
3e:2b:45:66:1c:b2:1a:18:16:6e:22:9e:77:43:7a:
10:15:87:f4:5c:38:11:4e:be:8a:6a:e9:cc:2d:bc:
15:e2:a3:42:c9:7b:8d:52:b0:ad:22:4c:81:1c:17:
6e:dc:81:77:5f:b9:e0:17:9b:69:3e:bd:eb:83:65:
83:f1:ef:83:8a:11:80:f5:26:49:92:be:83:04:34:
5f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7C:DA:1B:90:7C:05:8A:A5:43:30:71:10:18:CC:76:DE:B3:48:14
X509v3 Authority Key Identifier:
keyid:6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:60:5e:03:56:f5:51:d8:a8:8f:9c:b1:b5:38:b5:bb:ee:81:
df:02:ec:da:01:75:da:09:ed:ba:1d:55:09:b6:1a:0f:a6:20:
9f:32:41:f0:d7:42:04:9e:e2:93:fd:68:0b:9e:9a:0c:21:78:
54:e6:20:91:da:7c:a9:64:78:d5:f6:0f:a8:eb:65:6c:4c:a8:
02:79:40:18:32:cf:60:d5:63:f6:73:fb:da:08:32:70:ab:a0:
fd:bb:16:b3:82:21:71:73:21:72:96:c9:63:1f:0a:68:2f:46:
e2:ad:50:34:8a:e3:a7:d1:6b:b3:e1:b8:b9:03:29:ad:8f:64:
8a:9d:fa:7f:b6:6c:a8:cd:be:a3:aa:0a:c2:75:a8:23:43:56:
31:b7:54:e5:88:bf:f1:14:7b:b2:5d:47:6c:44:5d:b1:fa:48:
78:56:50:91:f1:18:00:1c:99:70:97:0e:7f:bf:3c:89:fd:3c:
01:f7:5e:5f:bf:d8:b9:ca:ab:dd:6e:53:10:d6:11:63:3f:79:
5a:98:3a:e2:ef:a7:7a:12:7e:d5:85:74:73:fc:fc:2e:04:e9:
fa:1d:fa:78:33:4f:7e:23:eb:24:77:ee:63:0f:91:b2:19:37:
25:d1:25:13:b5:b6:75:ac:d0:46:f3:4a:2f:18:0e:82:6e:21:
1b:ed:55:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:07:51 2026 by rpki-client