
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/BejGeyhlieCN1T6NfF_LGa17nWI.mft
File: BejGeyhlieCN1T6NfF_LGa17nWI.mft (raw, json)
Hash identifier: bCyA5jQXUFnYBcA3zMTX+L4Vv3h1KfsVKZex14rkGu0=
Subject key identifier: 51:C3:12:27:BF:99:DC:14:86:BE:20:00:51:A8:24:F4:56:CB:65:2F
Authority key identifier: 05:E8:C6:7B:28:65:89:E0:8D:D5:3E:8D:7C:5F:CB:19:AD:7B:9D:62
Certificate issuer: /CN=A91930DA/serialNumber=05E8C67B286589E08DD53E8D7C5FCB19AD7B9D62
Certificate serial: 13
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BejGeyhlieCN1T6NfF_LGa17nWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/BejGeyhlieCN1T6NfF_LGa17nWI.mft
Manifest number: 11
Signing time: Tue 25 Aug 2026 08:59:47 +0000
Manifest this update: Tue 25 Aug 2026 08:59:47 +0000
Manifest next update: Tue 01 Sep 2026 08:59:47 +0000
Files and hashes: 1: BejGeyhlieCN1T6NfF_LGa17nWI.crl (hash: 3q2TeT18mk+qtGf/AO1eSLf1eon41XqXXbME7ZwPjdQ=)
2: 4963B08E8BEF11F1870042623A11F970.roa (hash: AEMBzlbpiuLRvCY2ce6fFVjAW0yXmrS7aP4V+jY9Yx4=)
3: 246A33168BEF11F1ACDDCCF43911F970.roa (hash: gCFF0Q2ZwbsUUaQyHh3frrYjgtR3Y10EKfitU5Uk3LE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/BejGeyhlieCN1T6NfF_LGa17nWI.crl
rsync://rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/BejGeyhlieCN1T6NfF_LGa17nWI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BejGeyhlieCN1T6NfF_LGa17nWI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 08:59:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91930DA, serialNumber=05E8C67B286589E08DD53E8D7C5FCB19AD7B9D62
Validity
Not Before: Aug 25 08:59:47 2026 GMT
Not After : Sep 1 08:59:47 2026 GMT
Subject: CN=6a8d5983-f6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:a7:ed:bc:d1:60:c6:18:cd:af:a0:2f:08:
56:73:03:6c:7c:f1:11:c7:60:57:34:b7:88:93:dd:
eb:95:c2:4b:d6:9f:b7:ba:3a:d9:c3:a2:c1:86:2f:
4d:6b:0e:c4:1d:78:52:28:a1:a2:40:58:17:41:9c:
f7:86:b9:e9:d0:c9:fc:92:8b:30:11:31:d8:9b:dc:
4e:99:96:fb:bc:25:59:8a:3a:a8:66:33:0f:06:12:
d1:14:5b:a8:65:53:d7:9d:b2:8a:ea:4a:6e:09:db:
fb:c6:6e:2e:3f:45:e7:c7:3f:bc:e2:ea:2d:6f:15:
85:1d:d6:73:8f:31:51:b5:85:24:62:70:db:61:0c:
02:69:7c:38:49:18:22:ff:62:24:e2:2a:a5:e9:bd:
17:25:24:8f:a5:b5:73:ed:58:b1:6f:7a:cb:04:f8:
36:c6:c9:33:de:f3:56:f8:8a:08:50:cc:ad:51:d7:
49:51:3d:f6:1c:6d:72:3e:2d:76:f1:cf:d5:f3:8e:
ac:5e:1b:b4:3a:36:57:65:c6:3b:1c:55:bf:d8:1f:
61:fe:c6:29:81:45:78:e7:3f:eb:9b:1e:44:14:be:
69:38:a3:da:08:a6:a6:99:fd:52:68:e0:be:81:57:
04:09:e8:fd:58:de:d7:09:7e:31:d1:d0:6b:8b:02:
46:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C3:12:27:BF:99:DC:14:86:BE:20:00:51:A8:24:F4:56:CB:65:2F
X509v3 Authority Key Identifier:
keyid:05:E8:C6:7B:28:65:89:E0:8D:D5:3E:8D:7C:5F:CB:19:AD:7B:9D:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/BejGeyhlieCN1T6NfF_LGa17nWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BejGeyhlieCN1T6NfF_LGa17nWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/BejGeyhlieCN1T6NfF_LGa17nWI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:69:b8:09:de:95:65:6a:32:4f:e6:6b:da:91:fe:e6:e6:20:
b7:05:f5:12:b3:3f:f0:fd:98:f9:ea:9d:75:7f:14:5f:4e:3e:
9e:94:9a:b3:d3:5f:4e:e1:b6:7d:4b:00:27:29:ef:22:c5:82:
9e:a6:e8:45:bf:93:38:48:3b:9e:5b:39:8f:a7:6e:ed:49:a1:
3d:a2:ab:a1:40:80:10:c0:1c:2f:75:96:d8:70:60:de:3e:5b:
0c:1a:bc:f1:09:a0:0d:8d:4a:d6:3e:ab:75:4f:12:69:1b:d8:
32:8b:09:66:10:26:56:33:6a:68:f4:d2:70:58:b5:bd:65:8c:
a6:72:55:99:60:73:41:13:99:29:e6:c9:6a:02:ff:78:38:d9:
84:2e:6e:57:57:bc:37:54:f4:84:f8:58:41:6f:2b:af:49:0e:
2a:b4:b8:15:4c:48:3b:21:f2:71:c5:a3:cd:10:5c:4c:30:52:
96:0a:4f:26:bb:2b:34:24:83:34:7d:52:84:28:8f:c3:7c:43:
09:2a:fc:c4:37:90:ed:61:da:98:a1:11:15:50:59:a5:33:59:
0d:f4:58:6e:dd:a4:b1:89:2c:d9:27:c3:38:35:38:2f:f9:38:
38:58:bc:54:92:f3:48:30:03:9c:01:25:4b:67:63:61:c2:48:
d7:ce:60:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:26:01 2026 by rpki-client