
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
File: bGZwF1JoMcwYJ1GN4StiH28_N4g.mft (raw, json)
Hash identifier: 3skvHysaZyr4GmwE9Ko4LxQVDu/ynA/QQ83dPH0IXCU=
Subject key identifier: E8:AA:1E:C5:0E:DA:FB:B0:36:D8:90:33:B9:A4:DC:7A:12:14:BF:77
Authority key identifier: 6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
Certificate issuer: /CN=A9183704/serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
Manifest number: 9E
Signing time: Mon 01 Jun 2026 08:10:10 +0000
Manifest this update: Mon 01 Jun 2026 08:10:10 +0000
Manifest next update: Mon 08 Jun 2026 08:10:10 +0000
Files and hashes: 1: bGZwF1JoMcwYJ1GN4StiH28_N4g.crl (hash: zgY2sPh+xgUFWUXzLXdksKYKBAjy5scJrIKtlqTm5FI=)
2: DC1B4E64768D11F0BC42C048C4F9AE02.roa (hash: dVCUtpZknoGOXbCPR2t9DsP1/pKxGj7UhMl3FB7miV4=)
3: 7ECD6624D8F411F0885FED3572D3641D.roa (hash: kEwnH7Od+kt8tebTEN6qNlYk79LWf5Il0l1R0uvP8ro=)
4: B25E5954768D11F091768048C4F9AE02.roa (hash: XBpapngz5dr5cXTfIZvo3z58b3+Y9S6acFpjx4E21A4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183704, serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Validity
Not Before: Jun 1 08:10:10 2026 GMT
Not After : Jun 8 08:10:10 2026 GMT
Subject: CN=6a1d3e62-b34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2e:59:5b:d6:bf:d5:59:61:0c:62:72:95:82:
95:7f:a4:7a:9e:1f:1a:e1:a4:4c:55:ce:5d:22:85:
45:9c:ca:b6:95:40:b9:55:64:8b:20:c0:70:40:0f:
57:29:cf:d3:70:7c:a9:ad:6e:f1:11:31:91:bb:16:
bc:ed:d4:d2:89:91:20:3b:49:3a:5c:8f:22:e3:7e:
b4:f6:f4:a5:91:33:ac:33:63:c8:ef:68:8e:be:b2:
83:b2:a1:7c:4f:fe:58:0c:31:21:55:cd:68:be:27:
a4:4f:55:bf:e5:65:9b:33:6b:27:87:eb:f8:5c:b5:
b0:ff:4f:a5:b0:af:0c:d8:7f:80:22:4f:b3:88:c8:
b3:85:b4:8a:a9:af:2d:c7:ad:1b:fa:65:99:e1:f8:
60:5f:58:63:61:04:27:52:03:03:65:aa:e5:67:cf:
91:13:6f:84:db:d3:25:b4:5f:73:1c:c6:7b:27:ab:
2f:ea:b0:f8:82:31:19:58:16:19:05:78:8a:ac:48:
0a:cb:cb:91:51:e9:aa:13:54:c4:48:17:a6:a3:f8:
4d:a4:98:22:61:7d:9e:d1:6c:5d:44:f1:1e:2d:59:
06:b3:13:68:fe:e2:5a:2d:0d:e2:20:79:59:1d:db:
26:fb:05:29:94:cc:b6:f6:e0:85:de:cd:8b:98:cb:
3e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AA:1E:C5:0E:DA:FB:B0:36:D8:90:33:B9:A4:DC:7A:12:14:BF:77
X509v3 Authority Key Identifier:
keyid:6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:5b:7a:83:13:a7:b6:e4:de:ed:0d:51:94:2c:a4:d0:47:49:
26:1b:09:e5:b2:5c:1a:6f:f4:dd:23:e7:13:e0:26:e1:f1:77:
f4:09:ac:e8:c3:42:9a:e3:5f:c1:e2:5d:af:1c:1b:37:46:52:
50:9e:0b:c4:e0:d3:19:8a:cc:17:b1:16:ee:7c:a7:14:90:6a:
7e:59:dd:7c:76:46:20:48:0b:a8:ea:3c:0f:8f:2d:5b:3a:93:
03:3f:e3:43:cf:a0:67:f2:3c:25:54:df:b4:83:57:32:c6:b8:
14:cf:1f:b7:e9:73:cc:99:94:2f:94:52:15:9b:c5:ed:cd:a7:
cf:f7:d6:d1:61:96:af:1b:f0:93:0e:0f:ba:69:68:b7:c3:06:
c4:8b:8f:69:9c:ef:31:ca:c9:2e:29:46:04:31:a0:04:29:9f:
b6:3d:51:52:76:af:f0:f8:13:96:37:26:fc:53:bc:fe:f8:39:
86:af:5e:f9:91:86:9e:88:97:37:b2:aa:e4:74:4d:56:ac:11:
98:1b:dd:9d:b2:ad:2f:a7:f0:a4:bd:41:07:09:34:32:a9:4d:
d9:da:d9:b2:67:e1:79:6f:76:36:10:be:c2:18:0e:54:05:27:
14:e5:cf:c6:99:6b:86:4b:f4:6d:08:9e:0e:7f:05:27:e1:55:
9c:75:0c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:34:10 2026 by rpki-client