
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
File: BhgYSeLF-TE-pgozl9xhRyrBGw0.mft (raw, json)
Hash identifier: zdi9CTgsZptLVRPpHnhKVuQy5v2llEbD6o9AX8Y6Efg=
Subject key identifier: 7B:4E:75:DB:FC:DC:FD:F4:EF:61:79:E3:34:5E:69:98:B7:1F:BD:4A
Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
Certificate issuer: /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Certificate serial: 0794
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
Manifest number: 0771
Signing time: Mon 26 Oct 2026 21:44:21 +0000
Manifest this update: Mon 26 Oct 2026 21:44:20 +0000
Manifest next update: Mon 02 Nov 2026 21:44:20 +0000
Files and hashes: 1: BhgYSeLF-TE-pgozl9xhRyrBGw0.crl (hash: kohzGKFi4zsfAI8+jPW1XDtO9ORWLZpFcx0sVRnc0Fs=)
2: EB67F10ACF0C11F1AD21C26F2266CEF9.roa (hash: qFoFZl4nuEXjbLOyR2LpUkQ22C9p85+Ot3eFrRVw6KU=)
3: C18726F486D711EBA06B0E64C4F9AE02.roa (hash: GyALuDHToHrHzVvWuUIXCDTOPrYATDjL1eGhC/dCRwY=)
4: wnsIOTKEHJ8ZQTUgJ2Z7wMWS9IU.asa (hash: JPDKMK38Yr60E8SgSzFd3Vf+kQnN9/9WW59vIaH82sU=)
5: Siq8LB5WFqeqeF_iQkLhKmC5CpI.asa (hash: exxz/DCWwMPQqM3gqMsg0vLDiZzyONe0TvFBIR2yIfY=)
6: C3A0796CCF0C11F19B4CBB6D2266CEF9.roa (hash: 7OabV4OeRPNazzD2YAUuHOjx22k8qOLek+HYC2xyr2c=)
7: HXPkKAogJJB0IZmAMj0KAoE8oog.asa (hash: IgafWRZKP47VSRtlw+REEeqoYU63ntmjNmXyAH7AhiM=)
8: 4F1694B4C87B11ED981CC523C4F9AE02.roa (hash: Z4GMryMw3HLfh78F49vUfH5AisNPN7v/Lh1b+aK9Cdg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 21:44:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1940 (0x794)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183BBC, serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Validity
Not Before: Oct 26 21:44:20 2026 GMT
Not After : Nov 2 21:44:20 2026 GMT
Subject: CN=6adfc9b5-d162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b3:f6:33:2a:ac:31:bf:89:4a:b5:cc:b0:59:
cf:b2:f3:d6:af:e5:40:65:cf:a8:0b:38:43:12:d3:
ab:b7:6b:01:21:a7:73:bc:a7:83:1b:7a:9a:f5:0a:
c5:50:17:54:b8:8e:0d:50:3b:05:c1:05:86:bd:85:
5c:ea:62:0d:3c:98:4c:9c:8c:47:e6:76:e2:6f:84:
4e:5e:c6:43:92:42:f8:47:b7:af:8c:8c:c4:b5:b9:
df:f4:15:63:66:03:2b:4e:f9:53:69:ae:fe:45:4f:
74:ef:7e:3b:1e:db:6a:29:42:62:7f:47:39:f7:a2:
88:1b:c6:81:d7:12:c3:16:70:4e:d2:cd:61:2d:69:
4a:c4:40:03:db:8b:88:51:30:02:cf:e7:bf:37:bb:
a5:80:8b:be:1f:80:df:77:11:42:83:b2:c1:92:25:
11:0b:6d:50:b1:eb:fa:ab:61:73:a9:3c:14:8e:84:
2b:55:0f:3a:a8:d4:59:cc:e4:4b:e1:8f:44:41:7e:
63:c9:7f:7c:0b:f1:fe:72:4a:92:be:51:51:0e:ff:
6b:d8:f4:fb:95:9a:b9:05:dd:5b:32:50:39:73:50:
52:4a:c6:7e:f9:be:2a:18:4a:82:67:19:74:ea:3a:
32:4c:8f:c4:c6:79:fb:b0:d2:99:0c:80:61:63:82:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4E:75:DB:FC:DC:FD:F4:EF:61:79:E3:34:5E:69:98:B7:1F:BD:4A
X509v3 Authority Key Identifier:
keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b0:1c:00:fc:6d:a2:9c:53:e7:f4:f0:72:65:99:b0:82:af:
77:25:4f:ea:0e:cd:3a:5c:f5:76:53:24:5c:67:c8:14:20:ab:
77:cb:79:4f:0a:50:d2:f8:7d:61:90:c6:a9:c5:a4:74:4e:1a:
6a:d0:4b:38:3d:c8:04:31:27:24:6e:af:10:cd:03:bf:d3:bf:
50:42:63:3a:0f:78:6d:2a:12:ef:a0:e1:c1:b4:43:c6:9d:52:
c7:82:d1:92:41:64:51:c3:bf:b4:a1:4b:4e:d0:51:4e:90:ef:
47:72:92:dc:50:f2:18:ad:48:bf:da:a3:90:1c:fe:dc:68:70:
75:dc:ca:fc:f3:88:7f:7c:91:14:32:85:78:2c:e2:9f:2e:b2:
48:8f:9e:44:b8:1e:03:66:73:ca:74:5e:4a:ad:21:05:9a:ec:
25:46:6d:ea:14:b2:1b:cb:25:bc:bc:a5:33:12:16:b2:48:e5:
a0:51:8f:91:23:f7:f1:5a:a7:0d:a4:e6:90:32:02:89:c2:f7:
f6:59:c6:13:01:22:5c:48:2f:9a:38:83:71:5e:26:82:7f:c4:
a0:85:e9:0a:9b:a4:7d:4a:25:65:b8:66:56:84:11:97:6b:fe:
e7:48:53:e8:7f:0e:bd:a9:67:a3:9c:a5:07:e7:5f:76:ab:b9:
ec:58:49:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 23:45:41 2026 by rpki-client