
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
File: bG1HsRFPLVgaghKAXxLDdH80r4M.mft (raw, json)
Hash identifier: jgcmGBVdoryuhk5ng/ASzelR5KcxlJKYgs9SPx+YTnM=
Subject key identifier: 5B:F6:53:A1:37:77:A8:2D:07:2D:CA:20:47:58:B5:63:95:7A:E9:70
Authority key identifier: 6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83
Certificate issuer: /CN=A91C7672/serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83
Certificate serial: DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
Manifest number: 1D86
Signing time: Tue 02 Jun 2026 16:10:44 +0000
Manifest this update: Tue 02 Jun 2026 16:10:43 +0000
Manifest next update: Tue 09 Jun 2026 16:10:43 +0000
Files and hashes: 1: bG1HsRFPLVgaghKAXxLDdH80r4M.crl (hash: 9PfHXBqFYTFmWEyaKEAmEwq50L+mBsLE787Dmr7gB54=)
2: 18BDABD2537F11F0A9531C09C4F9AE02.roa (hash: APtY/87HFPVkFCNmPABVaetDfxhkY/ZtcBEA9fzgnYg=)
3: 08F61730538311F0860B155FC4F9AE02.roa (hash: kk2jLSlA4FrkU7gdAHQq3agexNxMubpJWMW/MfDoZiE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl
rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7672, serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83
Validity
Not Before: Jun 2 16:10:43 2026 GMT
Not After : Jun 9 16:10:43 2026 GMT
Subject: CN=6a1f0084-842d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:4c:64:d2:58:21:44:36:da:db:cf:7f:3b:
36:60:6b:ee:42:6a:60:bb:10:a9:e7:f7:22:6e:4e:
67:09:16:32:05:40:ba:63:68:4d:95:e0:fd:8c:29:
d5:ab:45:46:15:7a:ab:48:1d:8c:b9:3e:48:c5:bf:
f7:61:1b:d7:42:50:c9:fa:8e:d7:3a:15:03:03:2f:
34:6c:b3:fd:df:7c:c0:8f:4f:74:15:84:1b:ef:71:
ec:2e:94:d8:d3:f2:db:26:e4:6e:c4:f8:00:bc:47:
e0:6c:6a:28:37:ee:a1:60:5c:69:d4:02:c7:80:f0:
a4:e2:1b:a4:74:36:e7:a7:0e:43:23:a3:23:54:22:
99:f8:bc:4b:6c:e1:48:be:d8:a7:11:00:77:a0:07:
e2:6d:78:73:54:55:f0:a8:1e:06:a2:3a:56:2e:26:
b9:43:bf:a0:e5:7a:32:74:3d:e7:89:1f:67:24:ff:
d3:1a:c6:bd:f8:03:9d:87:5f:c6:14:48:a9:1b:83:
d5:37:76:fb:a4:0f:f6:fa:4d:0a:3f:63:cb:4d:9c:
fc:74:ac:42:ff:ee:10:c6:51:0a:73:15:7f:e1:49:
a9:16:a1:ed:77:3b:f0:b9:69:6e:49:b9:f6:2d:e9:
d2:df:61:37:75:79:b2:9a:6b:2f:1b:ed:d4:6f:64:
22:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F6:53:A1:37:77:A8:2D:07:2D:CA:20:47:58:B5:63:95:7A:E9:70
X509v3 Authority Key Identifier:
keyid:6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:03:4c:6d:e8:fc:40:ea:c0:c6:e2:3e:76:a7:88:b5:9d:66:
ed:cc:63:e2:9e:2d:ba:bf:c6:1e:14:0e:24:65:f0:f9:c3:a6:
14:f0:3a:00:49:b3:4b:d6:86:46:7e:1b:05:49:02:28:4c:16:
9b:04:de:48:c9:55:05:82:d7:e4:cd:a4:a3:a4:0c:a6:df:0b:
12:d0:80:60:fc:b4:2a:b5:cd:af:df:55:bb:32:c6:27:80:8f:
38:da:f6:47:d3:fc:0f:b2:9d:d9:07:18:72:4c:ad:dc:35:bb:
82:c7:7e:04:78:f1:98:d9:29:a8:5a:0d:d2:61:75:67:19:46:
a6:d9:e7:c8:f0:fd:07:b6:ca:e4:18:24:9e:f6:83:19:56:6d:
75:86:42:ed:c4:1f:7c:2b:92:4f:5f:31:ac:66:3a:f6:02:9f:
6a:f6:bf:a6:b8:8f:de:d8:7e:22:58:4e:96:80:28:ab:bf:f0:
3e:05:18:f4:a7:d5:72:35:69:39:9e:97:67:04:e2:de:34:08:
1d:0f:37:1a:e1:e3:92:12:9f:80:f4:f6:56:59:22:d4:17:45:
96:13:17:f5:31:93:ca:f7:3e:dd:e3:c1:79:a1:97:6c:b9:21:
b4:a1:4b:ce:9b:c4:45:80:7a:d9:b7:6e:b7:a3:45:78:5a:59:
b2:7f:80:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:47:26 2026 by rpki-client