
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft
File: BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft (raw, json)
Hash identifier: 1w6d0kr0lXmXJWHGEda6sCphfGRXffnW+tpz2PJhcMg=
Subject key identifier: AB:B9:06:4E:F3:58:7A:85:5E:A9:A7:08:D1:3F:DC:1C:9F:46:C0:6D
Authority key identifier: 04:83:2F:BE:70:C7:B8:85:9C:A1:A0:E3:E0:5A:29:6B:B0:9C:5D:3D
Certificate issuer: /CN=A91238EC/serialNumber=04832FBE70C7B8859CA1A0E3E05A296BB09C5D3D
Certificate serial: 1845
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft
Manifest number: 1826
Signing time: Sun 20 Sep 2026 16:29:45 +0000
Manifest this update: Sun 20 Sep 2026 16:29:44 +0000
Manifest next update: Sun 27 Sep 2026 16:29:44 +0000
Files and hashes: 1: BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl (hash: XdCLVIJL0WVI32gedl0N8vvMic4sI9zSPMoA/933I8I=)
2: 2F9D268C76B211ECABA1A612C4F9AE02.roa (hash: uxg1Vz02k9PJduPGV4AMR2b2pATyu+ms5B8uFxBNAz8=)
3: gI0XePUbHIaCN04XqRwfVHf1vVo.asa (hash: B9fLAapnb/1S8pWJuNehZGXJ8Kd0EBKkxhP79hcXxyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl
rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6213 (0x1845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91238EC, serialNumber=04832FBE70C7B8859CA1A0E3E05A296BB09C5D3D
Validity
Not Before: Sep 20 16:29:44 2026 GMT
Not After : Sep 27 16:29:44 2026 GMT
Subject: CN=6ab009f8-c96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:f8:d4:91:81:15:8a:c3:3c:e3:23:ba:b1:
56:37:ed:e6:14:02:ac:89:28:d7:48:b0:f7:ab:36:
1f:1d:63:1c:32:f3:29:be:ef:18:b5:ad:d3:ca:14:
01:f6:fd:a8:0c:eb:e6:ee:f0:e9:cf:0d:fb:8a:4d:
44:ac:2d:d0:a7:b2:56:28:87:94:cf:7b:f3:e4:d2:
12:32:0a:d9:79:e3:35:46:33:eb:38:15:c4:8b:58:
73:1a:ea:f2:a5:66:23:54:c4:4a:98:37:9b:a6:83:
4a:8f:08:2b:22:cb:78:91:3f:ad:49:5c:a4:6e:cd:
c3:db:45:85:fa:a7:dd:a8:b8:3a:2a:98:6c:24:93:
16:15:2f:b4:64:46:64:34:60:11:bd:35:49:d6:a9:
0d:e5:43:10:02:8e:64:30:66:c6:06:7e:9f:6e:21:
86:be:ae:a8:81:64:05:c5:fb:d3:2e:75:c1:e7:ec:
90:b1:50:b7:38:15:3a:27:4b:d7:28:9d:f7:3b:fe:
4e:91:2e:4e:95:ff:a8:95:ee:b5:87:fd:85:c6:95:
5c:8f:c2:4a:94:3b:ee:c0:1e:1c:da:41:ab:8e:28:
a6:60:89:54:18:8d:60:f5:2f:96:65:50:f5:c8:1f:
a1:ba:86:65:de:b8:4c:4d:75:82:ff:44:97:56:25:
9b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B9:06:4E:F3:58:7A:85:5E:A9:A7:08:D1:3F:DC:1C:9F:46:C0:6D
X509v3 Authority Key Identifier:
keyid:04:83:2F:BE:70:C7:B8:85:9C:A1:A0:E3:E0:5A:29:6B:B0:9C:5D:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ef:c1:23:b8:cb:fb:4c:79:b9:53:7c:62:ee:d2:59:47:73:
e8:23:98:22:54:1a:54:a8:29:90:d2:52:0a:43:7f:fa:63:13:
e0:57:90:11:27:31:ac:43:16:74:42:1c:e6:f4:09:b0:46:f0:
17:cb:69:49:3d:f6:96:a5:ef:58:f5:db:28:f2:56:d7:92:d5:
5f:0c:7f:88:a5:bd:89:84:27:b4:c7:ec:22:f2:20:2d:9f:07:
8e:de:65:3f:b0:2f:e1:67:9e:97:2f:89:04:c3:b9:9b:72:c5:
2f:2f:32:0b:27:2f:4c:32:a3:aa:64:cc:b4:a4:08:06:67:66:
fe:8e:42:61:d3:23:18:a9:66:d0:f2:24:d9:a1:56:42:0e:c3:
ad:22:88:3b:a3:88:4d:65:66:1c:97:96:9e:da:7d:22:69:80:
4c:97:f6:4c:01:0b:8d:17:b5:13:dd:87:fc:ed:3b:30:27:b5:
f8:94:9c:75:a5:41:a2:78:11:0a:2a:89:15:78:ea:0c:c1:55:
04:11:32:23:e6:c4:78:fc:63:60:98:39:87:a1:45:99:af:c1:
61:c9:2d:5c:87:f4:f4:2a:5a:b3:c1:91:db:f2:1e:ce:75:43:
b3:bf:2f:15:92:1e:27:f5:a7:44:56:d3:fd:75:b7:ca:c6:d5:
68:bc:75:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:37:33 2026 by rpki-client