
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
File: BgI9tGNNXG41YYCoL7vPgLlHir4.mft (raw, json)
Hash identifier: n+0Ra5u8HYBNuwPfqxFu/SHfP2/xx3bUq8zvk/oEZDo=
Subject key identifier: 54:75:BE:90:6B:E4:B2:C6:1F:E5:E7:63:F6:70:47:D3:46:B5:AB:C1
Authority key identifier: 06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE
Certificate issuer: /CN=A91490F7/serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE
Certificate serial: 024C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
Manifest number: 024C
Signing time: Mon 21 Sep 2026 02:25:26 +0000
Manifest this update: Mon 21 Sep 2026 02:25:26 +0000
Manifest next update: Mon 28 Sep 2026 02:25:26 +0000
Files and hashes: 1: BgI9tGNNXG41YYCoL7vPgLlHir4.crl (hash: uyGG0Q/HaSAIoOkPfSUMMRtrRW6Sesnrf/DRz/OcNNw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl
rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91490F7, serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE
Validity
Not Before: Sep 21 02:25:26 2026 GMT
Not After : Sep 28 02:25:26 2026 GMT
Subject: CN=6ab09596-0bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:6a:e6:f7:74:81:0d:73:14:dc:2a:d2:a7:
5f:2a:17:4e:15:35:e2:d6:ea:b5:95:a3:0a:e4:4b:
62:92:d4:54:11:18:69:ff:c9:f9:c0:ee:f3:69:4d:
6f:d3:31:ca:8c:f9:e0:3b:43:42:3b:f3:d4:41:97:
f9:de:e5:a2:48:f5:bd:6e:45:7c:b6:c9:29:8d:53:
4b:bd:3f:93:2d:ea:18:d3:59:e6:4b:d1:06:60:70:
1c:b3:47:49:4e:48:5e:42:ee:7b:65:af:04:ab:ae:
ba:f8:06:dc:81:eb:f0:8d:30:30:d4:04:b2:ea:e4:
72:49:ca:b5:6d:b6:27:96:8d:dc:d6:19:7e:ae:44:
e3:e0:97:23:09:c6:75:aa:a6:f3:b9:8c:21:69:38:
18:50:d6:f2:91:34:16:e5:74:e8:97:50:66:75:de:
01:d5:3f:bc:5e:37:f1:50:b7:d3:b1:81:51:64:8d:
28:12:a5:4d:32:3e:55:df:6b:99:0e:d8:ab:67:7d:
80:c9:a5:9b:42:32:7b:2c:f5:5e:8e:6e:98:ca:81:
b7:c9:02:36:d5:16:d6:51:88:1a:0e:1c:1c:ad:dd:
98:8b:d7:65:db:15:65:e1:07:d9:b1:b9:1c:46:ad:
78:f6:a1:8f:d7:22:2a:7d:7a:05:70:15:4f:6e:75:
4b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:75:BE:90:6B:E4:B2:C6:1F:E5:E7:63:F6:70:47:D3:46:B5:AB:C1
X509v3 Authority Key Identifier:
keyid:06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:da:eb:37:32:c7:40:63:22:8f:99:38:c0:bd:3e:4a:97:e3:
73:58:97:ea:3a:77:4f:0b:2c:32:17:b8:92:8c:b6:a9:74:4e:
1e:3a:4b:73:82:fb:75:33:d3:68:9e:cc:30:7d:30:bb:04:b3:
fd:18:06:f1:ee:8d:40:a0:b1:09:71:79:37:95:98:d5:d7:cf:
b9:b1:62:d6:75:55:6e:8c:04:fa:0c:f1:e2:46:fb:bd:d8:8b:
9c:06:75:59:b5:c2:5a:b0:d7:24:12:7c:00:2d:97:cc:31:98:
b9:29:89:9d:c6:be:71:0c:04:d5:ec:7a:73:02:76:3c:34:0e:
1f:95:3e:7c:73:13:c0:9f:d7:7f:ef:46:bd:9f:3c:21:72:96:
e2:b7:45:f9:09:0e:5e:93:41:be:c6:d6:15:d0:93:33:a9:13:
88:19:23:e0:a4:7a:f8:56:d2:02:c0:53:4c:3d:4e:be:3b:9c:
7f:d9:09:16:6a:e1:08:23:20:a0:c3:90:41:84:0b:02:ca:a1:
c6:23:ea:97:47:a2:90:b8:39:96:6a:56:0f:9a:f6:e2:95:e6:
e4:42:9a:0e:57:4d:29:6c:33:1c:f4:f2:7a:54:9f:57:f7:f8:
3f:a3:1b:53:7d:0d:27:cd:2c:6e:89:ad:6e:75:54:fa:b4:a3:
e5:fe:76:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:06:31 2026 by rpki-client