
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
File: Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft (raw, json)
Hash identifier: Oq/QScCeo4GwTPA79cQXXvAbbhMdMDmiYSbDt5F0zb0=
Subject key identifier: BE:13:89:A5:83:16:A2:2D:FB:4E:97:C6:D0:19:82:39:A3:06:7B:4B
Authority key identifier: 06:2D:31:3B:09:9A:E8:6B:3F:4F:E2:E2:0B:B4:5F:8E:86:53:62:73
Certificate issuer: /CN=A919AFBE/serialNumber=062D313B099AE86B3F4FE2E20BB45F8E86536273
Certificate serial: 6F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
Manifest number: 6D
Signing time: Mon 01 Jun 2026 08:38:22 +0000
Manifest this update: Mon 01 Jun 2026 08:38:21 +0000
Manifest next update: Mon 08 Jun 2026 08:38:21 +0000
Files and hashes: 1: Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl (hash: OFRj/zSKi+I6rgEaYpRPfPnthdubTMap4zDr2MpNQVQ=)
2: 4F172076BA1F11F08DD0CE3CC4F9AE02.roa (hash: otJtZV8aWxED8Ots8vZzliR1uFIMPOI3+2ENrD6egEA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl
rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AFBE, serialNumber=062D313B099AE86B3F4FE2E20BB45F8E86536273
Validity
Not Before: Jun 1 08:38:21 2026 GMT
Not After : Jun 8 08:38:21 2026 GMT
Subject: CN=6a1d44fe-d65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:cb:6c:e8:e5:2d:4d:2f:d9:a0:f8:a5:20:
41:c0:62:f5:a4:89:99:e9:53:cc:94:50:51:2d:ed:
af:95:87:c5:95:c0:67:bf:cb:6a:63:53:e1:fb:0b:
30:5a:0a:46:53:69:63:8c:3b:ff:40:95:b5:d5:98:
11:7f:95:6a:5d:88:04:20:26:2d:19:b7:82:58:e8:
51:e0:0a:60:51:9c:9c:7d:29:50:0c:06:f5:e2:ce:
65:72:0a:4b:d5:62:60:cd:45:a1:1e:84:aa:50:dd:
b1:df:bd:36:83:0e:cc:4a:70:90:3b:ff:15:f1:2b:
f0:9e:76:ce:95:f2:08:29:92:5c:2f:bd:77:0e:52:
5b:4c:27:24:92:92:bf:c6:ee:d3:c6:fb:4e:f0:9a:
e8:a6:62:42:c2:80:45:59:de:42:84:e8:cb:e6:72:
24:2c:78:3d:ce:7f:6b:fe:6d:93:c3:67:e5:b0:c4:
a1:5b:b6:b8:92:a6:c6:fb:63:47:98:07:6e:3e:05:
77:cd:9b:52:c8:6a:2a:4f:70:fa:da:95:f2:25:1f:
6a:06:10:ac:30:39:76:48:61:7a:aa:65:81:a4:2a:
dd:4d:ee:d1:50:33:2b:7e:40:1e:a9:56:97:60:82:
50:85:27:98:38:71:1c:c3:62:e1:2a:35:fd:0a:4b:
43:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:13:89:A5:83:16:A2:2D:FB:4E:97:C6:D0:19:82:39:A3:06:7B:4B
X509v3 Authority Key Identifier:
keyid:06:2D:31:3B:09:9A:E8:6B:3F:4F:E2:E2:0B:B4:5F:8E:86:53:62:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:fa:75:2b:be:37:dc:e6:83:07:49:3b:fc:a9:d6:16:74:b5:
87:ab:b4:cf:6c:fd:8e:a6:1f:c6:0c:82:07:ac:78:cd:d4:26:
52:c2:1e:22:ca:4e:2b:5a:fa:8b:27:85:ae:a7:36:c2:23:e7:
9f:72:46:54:43:3c:43:f7:19:90:c3:db:1f:fd:d3:28:8a:d4:
2a:a1:4f:29:44:07:3d:6d:09:86:f3:41:38:20:07:71:ad:18:
09:93:0a:e8:75:75:11:db:7f:5c:fa:f5:8c:2c:cb:f1:b7:6a:
30:9f:bf:b3:cd:9d:3d:96:69:bf:7c:8b:cb:0a:ea:17:e1:5d:
99:40:17:a5:51:11:0c:b6:6f:33:64:46:2c:e1:05:64:35:b0:
83:ae:44:50:ef:04:a6:df:48:26:ed:72:39:56:cc:fa:1a:d7:
9a:2b:2c:de:8b:55:61:bd:16:bc:ca:d7:af:36:7a:3a:dc:1e:
e8:33:13:06:7f:c3:43:19:cd:9c:99:29:95:74:07:27:d2:de:
b4:38:84:8a:1a:95:25:3f:91:f5:b7:37:2d:08:77:bf:55:cf:
ad:83:07:19:16:a0:be:73:3e:3e:59:25:15:d7:bd:d1:8b:33:
45:51:bf:aa:0b:7f:82:3f:c1:2a:c3:05:91:48:10:47:1f:9a:
fc:8e:0a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:59 2026 by rpki-client