
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft
File: BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft (raw, json)
Hash identifier: Wt+E0l2gRxvtsONtmFIHzq/W7dh8i84XusmP7xdK5ig=
Subject key identifier: B4:0D:F3:60:96:B5:1B:BB:1C:14:C3:D5:89:50:6A:23:F1:B4:FF:CE
Authority key identifier: 05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29
Certificate issuer: /CN=A9199B85/serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft
Manifest number: 019C
Signing time: Fri 17 Apr 2026 00:50:24 +0000
Manifest this update: Fri 17 Apr 2026 00:50:24 +0000
Manifest next update: Fri 24 Apr 2026 00:50:24 +0000
Files and hashes: 1: BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl (hash: 5eiEkedlslmSLhdnnSfPm7FvHJSOhX9K+O5Twv22vSA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl
rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:50:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199B85, serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29
Validity
Not Before: Apr 17 00:50:24 2026 GMT
Not After : Apr 24 00:50:24 2026 GMT
Subject: CN=69e183d0-dd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:8c:a2:dd:79:bd:4b:7b:04:8e:26:72:08:
c3:8e:2e:aa:34:fa:2c:e0:12:bd:76:59:40:44:4d:
a1:e0:37:ff:39:64:75:98:82:36:ee:8d:16:9f:5c:
05:5e:5e:16:ff:2d:75:6c:73:67:db:57:c0:78:71:
67:cf:90:b0:a6:c7:a3:4a:fc:34:4c:07:65:cf:2d:
ba:a2:64:8e:eb:82:96:1f:87:6f:2c:21:cf:e3:5e:
12:09:69:19:00:c5:72:7f:57:33:04:70:a9:cb:67:
43:cc:49:d4:e0:e0:76:dc:00:12:a0:8e:ff:f7:c4:
e4:ab:ab:8b:fe:83:b0:ac:4a:24:31:a3:3a:a3:78:
36:30:06:35:57:30:e8:d7:70:e5:5f:7f:b0:07:74:
7d:f1:02:85:5a:02:cd:8e:56:c2:b7:30:0c:a8:2d:
04:7f:08:e9:9b:62:25:9a:1e:9a:ee:f0:76:cb:dd:
6d:5a:56:5a:26:a2:d2:af:fc:89:b2:ea:29:6c:91:
3d:cb:f5:ae:e2:5d:bd:e9:26:dc:e0:de:c6:3a:ce:
38:9c:fa:bc:ef:e7:88:5d:55:d7:cd:69:74:2f:3f:
20:0b:17:6a:e3:ad:77:48:32:8b:2f:9f:cc:b4:8f:
8c:be:7f:2b:8a:86:1c:2f:c0:a6:e5:c8:1d:dc:d3:
c3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0D:F3:60:96:B5:1B:BB:1C:14:C3:D5:89:50:6A:23:F1:B4:FF:CE
X509v3 Authority Key Identifier:
keyid:05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:6c:ec:93:7f:13:71:cc:d1:d8:d4:68:b9:d5:1f:4f:d8:0d:
fe:e5:69:a7:60:52:7f:8a:0c:1f:39:8a:cd:62:5a:2b:50:0a:
f8:64:0d:a2:05:8a:3a:a8:94:c4:a7:40:e0:5f:0d:18:98:69:
f8:ab:dc:2c:9a:be:f0:01:38:54:d3:7c:f7:ac:b1:d0:54:ba:
bf:9b:ef:8c:8d:8a:21:a0:f6:b0:7f:f7:90:d5:13:e0:1b:13:
b7:c3:ca:3f:c3:40:d3:7d:1c:29:c8:ff:91:af:33:e6:84:c3:
43:0b:7f:0b:6c:81:59:e9:21:c6:fa:58:d2:2e:02:16:76:35:
9d:6a:85:d9:55:6f:dc:46:bb:15:16:a6:08:61:a6:40:1c:a2:
49:82:16:e2:38:8b:f8:70:05:2e:89:eb:b1:4d:42:5d:6a:5a:
6b:2e:74:d2:22:f6:e8:15:5d:a4:9c:e7:84:14:0b:3e:d0:0f:
52:5a:ce:64:86:fc:35:03:4f:cb:20:ce:8e:45:27:98:35:f0:
0a:fa:5c:b9:5f:a0:a3:a1:d8:c8:70:8e:de:36:84:d2:23:82:
12:43:98:7d:e3:63:9e:cc:13:b4:cc:82:9d:80:63:18:56:52:
7e:27:b0:21:dd:28:91:40:cb:1c:d2:85:ef:1e:dd:bb:72:ee:
8a:db:c4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:08:19 2026 by rpki-client