
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
File: bGZwF1JoMcwYJ1GN4StiH28_N4g.mft (raw, json)
Hash identifier: r/kBsaNAQ4UouSGnPGyMkQFVqyU/oOy/vPI1uqV44IQ=
Subject key identifier: 99:9F:C3:01:AC:EC:CD:FA:D8:95:19:D8:B6:30:96:53:CA:6E:AA:D3
Authority key identifier: 6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
Certificate issuer: /CN=A9183704/serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
Manifest number: 81
Signing time: Sun 05 Apr 2026 07:05:32 +0000
Manifest this update: Sun 05 Apr 2026 07:05:32 +0000
Manifest next update: Sun 12 Apr 2026 07:05:32 +0000
Files and hashes: 1: bGZwF1JoMcwYJ1GN4StiH28_N4g.crl (hash: M8QdTwDHqdCXIMQY0620UWYjJFj0YseOSTRtxuy1OeA=)
2: 7ECD6624D8F411F0885FED3572D3641D.roa (hash: kEwnH7Od+kt8tebTEN6qNlYk79LWf5Il0l1R0uvP8ro=)
3: B25E5954768D11F091768048C4F9AE02.roa (hash: XBpapngz5dr5cXTfIZvo3z58b3+Y9S6acFpjx4E21A4=)
4: DC1B4E64768D11F0BC42C048C4F9AE02.roa (hash: dVCUtpZknoGOXbCPR2t9DsP1/pKxGj7UhMl3FB7miV4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183704, serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Validity
Not Before: Apr 5 07:05:32 2026 GMT
Not After : Apr 12 07:05:32 2026 GMT
Subject: CN=69d209bc-c2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:b8:0a:bb:9b:1b:a1:24:48:51:5b:bc:0c:
78:c5:e7:17:22:a0:67:e7:b1:97:61:a1:9b:34:60:
31:d1:b3:8f:df:e0:d5:a7:9c:37:7f:dc:2d:cd:81:
cf:fe:9c:20:3a:c5:f7:02:5c:ab:ef:91:df:17:1c:
98:3e:00:82:51:9d:a1:ac:94:00:ea:a9:fe:67:0d:
96:9f:94:1a:e4:c8:a6:2d:60:8c:fa:c7:81:12:5e:
cc:11:25:b5:91:78:6a:cb:66:33:82:16:b7:ec:8e:
15:07:c5:3f:1f:58:ef:6f:75:30:7e:ba:d9:e3:84:
49:f7:51:85:29:5b:bb:3d:87:26:0c:e8:7d:09:d7:
d5:7a:e7:ef:f2:23:b4:a1:5c:db:bd:02:7b:69:7d:
d2:95:5e:bb:9d:10:6c:14:14:81:ba:e1:52:9b:05:
32:80:df:a3:00:8b:77:95:66:79:76:43:b3:ac:3b:
96:e0:5a:94:23:2a:09:b5:f7:3e:4c:6d:37:4f:c2:
82:8e:cf:c1:c5:d5:cd:10:7c:78:6b:61:b7:1c:cf:
13:e1:58:9d:1e:a6:9b:69:da:7c:02:47:9e:b7:25:
75:a9:ae:1c:04:56:79:38:7a:fa:75:fc:96:b7:63:
80:b2:5a:fe:b9:64:a7:5e:51:f2:8e:ea:f7:83:b4:
12:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9F:C3:01:AC:EC:CD:FA:D8:95:19:D8:B6:30:96:53:CA:6E:AA:D3
X509v3 Authority Key Identifier:
keyid:6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:9d:84:f8:61:73:8a:9e:c0:fb:f9:47:5c:c4:55:c2:b8:ac:
f9:53:59:cc:b5:06:c9:15:54:e7:cf:ac:0c:3c:8a:95:be:86:
e9:7d:31:8f:84:22:1d:8c:89:7e:f9:56:a9:98:ce:3b:c4:29:
39:b8:c5:db:e0:8b:01:1a:8d:43:2a:e7:57:bd:45:2c:6a:b8:
a7:1b:ab:49:e3:22:71:90:fd:8a:0d:0d:09:6f:d2:e3:8c:21:
f2:98:1c:79:a5:a5:2b:08:52:78:5e:89:80:a6:68:90:d9:28:
74:07:71:2a:91:14:ee:79:fd:5b:29:f5:a3:50:a7:3e:23:44:
ee:d4:af:cc:f3:5b:45:93:da:37:5e:2e:46:31:96:6f:b2:5b:
d9:57:47:e0:2f:d2:d7:8e:35:27:a3:99:14:7f:0a:1b:41:f7:
f5:4b:ea:25:2f:3a:ba:62:3f:e0:b1:bf:06:28:52:0e:93:50:
69:c3:ae:cd:73:6d:ff:2c:58:86:3a:5a:ea:92:7d:42:08:58:
9e:2b:27:7b:6c:1a:c7:40:20:e9:5e:81:d0:8a:ed:21:c8:df:
75:49:6a:bc:7a:23:5e:40:46:1a:12:cb:7e:3e:8f:85:15:a3:
53:ea:7a:b3:58:91:6c:9c:63:3a:27:85:43:13:c0:06:f5:e8:
e3:85:dd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:38 2026 by rpki-client