
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
File: bGZwF1JoMcwYJ1GN4StiH28_N4g.mft (raw, json)
Hash identifier: QY5xY8UiuaKaZZPJV5kvzqSvRpW0xgZI8IMTO1JDtiA=
Subject key identifier: 5F:CB:9C:9C:6F:98:67:C3:73:F1:26:40:26:97:1A:CB:DF:22:01:85
Authority key identifier: 6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
Certificate issuer: /CN=A9183704/serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Certificate serial: D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
Manifest number: CB
Signing time: Mon 31 Aug 2026 07:16:50 +0000
Manifest this update: Mon 31 Aug 2026 07:16:50 +0000
Manifest next update: Mon 07 Sep 2026 07:16:50 +0000
Files and hashes: 1: bGZwF1JoMcwYJ1GN4StiH28_N4g.crl (hash: DpDz20F9xHSS9LA3AuNmNXWRsx4Db1mrFOpmjCA8buU=)
2: 7ECD6624D8F411F0885FED3572D3641D.roa (hash: kEwnH7Od+kt8tebTEN6qNlYk79LWf5Il0l1R0uvP8ro=)
3: DC1B4E64768D11F0BC42C048C4F9AE02.roa (hash: dVCUtpZknoGOXbCPR2t9DsP1/pKxGj7UhMl3FB7miV4=)
4: B25E5954768D11F091768048C4F9AE02.roa (hash: XBpapngz5dr5cXTfIZvo3z58b3+Y9S6acFpjx4E21A4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 07:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183704, serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Validity
Not Before: Aug 31 07:16:50 2026 GMT
Not After : Sep 7 07:16:50 2026 GMT
Subject: CN=6a952a62-f54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:a1:88:e4:a7:bb:77:4d:8c:08:94:1a:8e:
97:f7:96:0c:12:1f:8c:66:4f:20:b1:6b:54:69:48:
48:0b:b0:1f:a8:56:f7:5d:33:ee:7b:42:45:8e:d7:
db:a6:e9:83:32:e9:fd:fe:1f:fc:1d:81:fa:e4:87:
7a:d7:e1:4d:de:43:4b:b4:7a:08:54:97:1f:89:54:
96:90:18:1e:69:46:0e:63:69:01:99:2f:63:65:e9:
2a:9f:cb:2d:8e:25:dd:c9:c8:2e:15:5d:04:00:bd:
a8:aa:73:3a:db:1b:a7:9f:fa:4a:33:d2:59:82:6c:
78:8f:4f:15:72:0c:fc:44:69:94:7b:7a:96:c2:3a:
ed:77:b8:74:a7:25:dc:56:8f:60:a4:6f:8d:fa:ca:
58:df:1b:c6:51:24:60:4b:10:58:30:3f:c7:be:bb:
f5:1c:9f:95:0b:5b:cd:1f:8f:19:e2:e2:0d:00:52:
8a:ef:66:de:2d:aa:e0:70:96:23:54:f1:e3:9a:df:
42:a3:73:4c:be:42:0f:c7:a4:d1:14:96:3c:bb:9e:
6c:3c:a1:80:9e:f5:7b:64:3d:9c:b6:00:08:d9:e5:
8d:5a:cc:bb:c7:eb:94:45:b6:f6:98:37:aa:71:ca:
a2:93:8e:5f:04:28:22:93:2f:44:b5:e6:45:ea:68:
ee:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CB:9C:9C:6F:98:67:C3:73:F1:26:40:26:97:1A:CB:DF:22:01:85
X509v3 Authority Key Identifier:
keyid:6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d5:72:fe:40:29:88:46:64:24:86:9e:70:69:56:7e:90:c9:
60:f4:79:65:1e:e8:70:9a:e3:a8:26:26:e7:75:b3:b1:76:7c:
85:89:ad:21:26:41:64:51:96:a4:bb:d1:50:f5:af:07:3c:5d:
a3:24:eb:26:96:23:8b:f8:4f:d6:60:b8:ee:97:71:63:9c:d6:
03:92:22:08:1c:9f:8f:5b:0c:16:c7:c0:e4:0f:b6:bd:fd:d2:
cd:10:0a:07:a6:5c:90:66:3f:ce:b2:e9:c5:06:f7:fd:9a:ff:
97:e6:47:ea:be:5f:f1:06:af:6f:2a:3e:1a:27:f3:0d:63:82:
b3:8e:a1:bf:54:18:fd:84:75:ce:03:84:a3:ef:0c:69:43:b0:
a3:29:85:4a:5b:f9:41:e8:06:65:12:a0:3e:fc:9c:64:fd:e9:
d1:67:34:53:f4:2a:50:ea:d8:80:7f:3e:20:00:e4:6d:68:6a:
95:02:41:c9:b7:fd:41:51:46:2e:92:9e:94:df:99:d7:8e:e0:
1f:54:ea:7d:7d:26:2a:89:40:8c:ea:a2:76:1f:01:51:9f:b9:
db:b7:91:f4:a4:77:00:aa:2e:b2:4c:2f:75:ba:31:1e:21:df:
79:b4:b4:de:9e:1b:22:2e:d3:e8:cb:0a:aa:24:0d:f5:ec:ea:
3e:8f:0a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:55:15 2026 by rpki-client