
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
File: bGgIQDgcHvMtPI2786zECCz2pbM.mft (raw, json)
Hash identifier: 94wLsQBpH7qM7BvWyW2srvBEWX3KECCMmsu5C7yge04=
Subject key identifier: 83:8D:24:07:0D:A4:B6:DB:D1:B3:94:34:E1:6D:20:FA:5C:57:E0:F7
Authority key identifier: 6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3
Certificate issuer: /CN=A91E734C/serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3
Certificate serial: 0B51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
Manifest number: 0B03
Signing time: Tue 18 Aug 2026 19:38:51 +0000
Manifest this update: Tue 18 Aug 2026 19:38:50 +0000
Manifest next update: Tue 25 Aug 2026 19:38:50 +0000
Files and hashes: 1: bGgIQDgcHvMtPI2786zECCz2pbM.crl (hash: yofZa972/UjeV4pwpCCFtrgMBHwQsywFKFsdmKljlik=)
2: A32546F8A3DB11EA98BC5D48C4F9AE02.roa (hash: O9t3MGde1CPLLyHzaHW4c/VnESPgcMHRUVCLnNs5iqg=)
3: 2131145E9E4C11EABF30421BC4F9AE02.roa (hash: L46lyNGF7xref2PgtpwYQAu20HQOQ2fkzes7fFR03pE=)
4: A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa (hash: 00l1R5FwZcWzFUVZ2aqvW97Qwqjz6xknwlkADPfSXV8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl
rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2897 (0xb51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E734C, serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3
Validity
Not Before: Aug 18 19:38:50 2026 GMT
Not After : Aug 25 19:38:50 2026 GMT
Subject: CN=6a84b4cb-a282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:42:d4:a7:fe:11:ef:41:88:7d:3c:b3:64:
0b:b6:cb:fa:29:d7:8c:96:e9:dd:8a:f7:5c:bd:9a:
5b:d3:f8:ab:52:ad:dc:ea:96:0f:84:df:9b:03:fd:
e4:ec:43:e3:7e:ed:7c:b3:e5:78:5d:c0:2e:18:66:
af:28:bc:b1:e1:8f:c4:42:22:de:15:71:6e:67:ff:
94:eb:fd:28:30:90:08:df:a2:bf:56:7d:47:e3:38:
67:4a:18:e5:56:83:81:48:00:9c:4f:35:1e:8d:0f:
ce:05:9c:0a:33:52:7c:04:74:0a:81:b7:45:da:77:
be:bd:22:d7:ea:29:3a:d2:5c:5e:b4:01:ba:70:4b:
8d:8e:ed:02:a0:7e:b1:6e:78:ce:70:0e:1b:ea:57:
c5:66:28:63:1e:41:db:cf:02:d5:11:a7:3f:1d:bf:
c5:ba:a3:4c:b0:7c:ed:cf:ca:d2:0f:11:b0:e9:b5:
97:30:9b:b1:3f:20:5b:62:56:5e:3d:07:ef:64:d2:
5c:45:85:59:ad:d3:b9:d3:3e:da:56:a2:91:5e:e4:
99:18:07:e4:08:79:2f:5b:fe:a0:f8:76:22:6e:0a:
6d:bb:06:2d:6c:95:f3:52:1c:41:14:e1:dc:f0:f1:
22:48:dc:3c:88:85:ff:b1:d0:05:00:0f:3d:c7:eb:
b8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8D:24:07:0D:A4:B6:DB:D1:B3:94:34:E1:6D:20:FA:5C:57:E0:F7
X509v3 Authority Key Identifier:
keyid:6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:89:b5:58:86:93:bb:17:db:19:91:dd:87:e6:9b:ae:54:2a:
e8:8c:0f:62:f3:93:e7:4d:6d:c5:66:3a:7c:fc:e6:42:01:20:
28:e6:9e:bd:c8:75:e2:24:8a:02:92:e3:bd:b1:08:91:3f:9b:
31:c8:0c:3b:09:f3:69:bf:6a:78:ae:12:58:db:90:22:a5:f9:
e8:8a:82:17:ca:8f:34:ac:0c:06:48:c2:4e:73:65:90:85:e9:
50:c9:d9:f9:16:d5:97:5b:7c:8a:38:5b:55:96:3f:8a:5b:fa:
a6:15:d7:cf:c4:07:2b:f1:35:18:c1:98:f3:f6:c4:be:97:d4:
21:3b:94:d3:bd:f4:d7:93:f6:cd:3a:ac:11:94:88:37:bc:4c:
96:9e:77:6e:dc:49:4c:70:5f:b0:ab:c1:9f:66:bf:9b:9b:d7:
a2:9d:4b:46:71:69:35:99:1b:79:31:60:c6:65:8b:6f:72:52:
00:2f:a8:ce:06:b5:65:c9:a8:32:d8:5b:20:89:3a:75:65:f3:
b7:54:2b:e9:6e:dd:37:8d:c0:67:92:6f:f1:63:69:d4:61:92:
d3:3d:41:54:63:4a:f0:31:ac:7f:18:47:37:04:8b:a0:8f:7f:
5f:eb:46:70:0b:e8:a3:fe:01:15:5a:dd:45:59:02:58:aa:a0:
7d:55:34:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTczNEMxMTAvBgNVBAUTKDZDNjgwODQwMzgxQzFFRjMyRDNDOERCQkYzQUNDNDA4
MkNGNkE1QjMwHhcNMjYwODE4MTkzODUwWhcNMjYwODI1MTkzODUwWjAYMRYwFAYD
VQQDEw02YTg0YjRjYi1hMjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvhhC1Kf+Ee9BiH08s2QLtsv6KdeMlundivdcvZpb0/irUq3c6pYPhN+bA/3k
7EPjfu18s+V4XcAuGGavKLyx4Y/EQiLeFXFuZ/+U6/0oMJAI36K/Vn1H4zhnShjl
VoOBSACcTzUejQ/OBZwKM1J8BHQKgbdF2ne+vSLX6ik60lxetAG6cEuNju0CoH6x
bnjOcA4b6lfFZihjHkHbzwLVEac/Hb/FuqNMsHztz8rSDxGw6bWXMJuxPyBbYlZe
PQfvZNJcRYVZrdO50z7aVqKRXuSZGAfkCHkvW/6g+HYibgptuwYtbJXzUhxBFOHc
8PEiSNw8iIX/sdAFAA89x+u4EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIONJAcN
pLbb0bOUNOFtIPpcV+D3MB8GA1UdIwQYMBaAFGxoCEA4HB7zLTyNu/OsxAgs9qWz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM0Qy9BNzMyMzVFQzcz
QzIxMUVBOUQ0MEI4ODVDNEY5QUUwMi9iR2dJUURnY0h2TXRQSTI3ODZ6RUNDejJw
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JHZ0lRRGdjSHZNdFBJMjc4NnpFQ0N6MnBiTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzM0Qy9BNzMyMzVFQzczQzIxMUVBOUQ0MEI4ODVDNEY5QUUwMi9iR2dJUURnY0h2
TXRQSTI3ODZ6RUNDejJwYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMIm1WIaTuxfbGZHdh+abrlQq6IwPYvOT501txWY6fPzmQgEgKOaevch14iSK
ApLjvbEIkT+bMcgMOwnzab9qeK4SWNuQIqX56IqCF8qPNKwMBkjCTnNlkIXpUMnZ
+RbVl1t8ijhbVZY/ilv6phXXz8QHK/E1GMGY8/bEvpfUITuU073015P2zTqsEZSI
N7xMlp53btxJTHBfsKvBn2a/m5vXop1LRnFpNZkbeTFgxmWLb3JSAC+ozga1Zcmo
MthbIIk6dWXzt1Qr6W7dN43AZ5Jv8WNp1GGS0z1BVGNK8DGsfxhHNwSLoI9/X+tG
cAvoo/4BFVrdRVkCWKqgfVU0Zw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:48 2026 by rpki-client