
$ rpki-client -vvf rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft
File: BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft (raw, json)
Hash identifier: 9sKnV8tAUFCBPKS2IuAVCV0FEJSYapQp5w5P0rdMxb8=
Subject key identifier: 27:1D:89:EE:42:D0:16:E0:97:B7:69:E7:33:AE:E9:F0:78:CC:2B:F0
Authority key identifier: 04:83:2F:BE:70:C7:B8:85:9C:A1:A0:E3:E0:5A:29:6B:B0:9C:5D:3D
Certificate issuer: /CN=A91238EC/serialNumber=04832FBE70C7B8859CA1A0E3E05A296BB09C5D3D
Certificate serial: 1827
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft
Manifest number: 1809
Signing time: Tue 28 Jul 2026 16:37:55 +0000
Manifest this update: Tue 28 Jul 2026 16:37:54 +0000
Manifest next update: Tue 04 Aug 2026 16:37:54 +0000
Files and hashes: 1: BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl (hash: h6Pb7X2lvq4ZNCbh2gpwaJZ4eAGMwik2K3MXY6tJtdc=)
2: 2F9D268C76B211ECABA1A612C4F9AE02.roa (hash: uxg1Vz02k9PJduPGV4AMR2b2pATyu+ms5B8uFxBNAz8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl
rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6183 (0x1827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91238EC, serialNumber=04832FBE70C7B8859CA1A0E3E05A296BB09C5D3D
Validity
Not Before: Jul 28 16:37:54 2026 GMT
Not After : Aug 4 16:37:54 2026 GMT
Subject: CN=6a68dae3-59d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:f5:23:90:5c:31:d0:63:cc:c4:32:37:88:
d6:93:49:cf:c0:2c:72:15:a5:14:bd:fe:6f:2f:8b:
61:21:61:7a:43:a7:5a:49:bc:d8:78:9d:1b:e1:57:
2e:f8:d6:ee:aa:5c:42:78:02:a6:0d:dd:b3:1d:26:
0a:27:ab:0e:67:06:ea:33:6f:36:f8:35:2b:9f:d2:
7b:39:2a:71:f7:a7:e0:37:39:6a:e2:56:ea:f3:d3:
15:8e:82:e1:84:d5:f7:2d:d1:9b:a8:9d:ce:f5:d2:
2d:4d:a8:67:3b:21:5d:6f:e5:73:64:29:9b:06:79:
38:65:80:3a:07:a0:29:ff:c7:e0:24:2a:aa:f7:6d:
fc:94:66:70:d8:2c:7b:21:66:44:1c:c4:5d:0e:eb:
a1:2e:e3:8e:2a:b7:bd:1f:8e:df:7d:dc:90:29:bc:
51:18:0d:64:66:e6:b5:b1:40:67:c7:25:eb:ad:ab:
7b:95:b9:1c:ef:d0:97:eb:45:1d:e3:11:e7:6a:25:
d8:e1:2a:d5:ed:58:92:91:78:e2:02:37:05:95:90:
ff:5c:e9:37:53:fe:97:1b:10:4b:76:d3:4f:82:22:
bc:01:11:68:c2:db:d4:63:5b:0b:a8:4c:5f:02:74:
6f:8d:97:85:39:f0:76:31:4a:96:57:b6:7e:78:9a:
30:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1D:89:EE:42:D0:16:E0:97:B7:69:E7:33:AE:E9:F0:78:CC:2B:F0
X509v3 Authority Key Identifier:
keyid:04:83:2F:BE:70:C7:B8:85:9C:A1:A0:E3:E0:5A:29:6B:B0:9C:5D:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:04:b9:ee:4d:27:d1:f4:4c:0b:42:ba:98:93:54:66:9b:32:
c9:5f:52:ea:75:0e:31:f9:27:5c:05:32:3a:f3:d4:cd:9b:db:
ff:e5:e6:f3:9d:f5:f7:79:a6:76:7c:8f:9e:58:01:a9:e6:55:
52:9b:c3:95:b7:d2:72:60:e5:73:fe:98:61:97:de:5f:e0:b6:
11:37:88:c2:53:59:e5:4a:b2:6b:dd:9a:14:cf:a7:5c:a6:0b:
48:12:ec:af:a6:be:45:7c:7a:d7:19:2f:b4:25:19:40:23:00:
57:db:52:b7:5a:fc:1b:cb:5d:e7:7b:69:5c:99:a8:32:9e:66:
fd:4e:88:7d:a8:0d:46:a9:c3:f9:43:f9:3e:5d:c0:48:be:34:
df:2e:3d:d3:a8:1f:00:dc:e5:d2:2c:2c:32:26:12:36:b4:ad:
c4:29:d6:c3:64:70:cb:bf:c2:e2:46:8d:5f:4b:a9:5e:af:dc:
fe:be:9b:e3:3b:5b:96:a6:4e:a7:5b:52:04:a4:83:c8:78:5c:
37:2e:12:62:15:1f:0e:f5:fd:4b:ed:e8:5f:0d:1d:45:81:1c:
66:5c:be:4c:bc:fc:b4:92:3e:1b:5d:b5:ef:eb:8b:ed:65:2f:
9b:f2:2b:08:60:af:f1:a2:17:1a:ce:fd:6b:84:8e:88:48:29:
fb:6d:a9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:30:44 2026 by rpki-client