
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
File: bifP0YnuRkQx1LkBO8wHWKgCZOY.mft (raw, json)
Hash identifier: +6TwUSV9Kbx8Mor74ZiH7zikdyjY5vKxDZLLniDlQGg=
Subject key identifier: 2A:08:51:B9:34:10:91:FE:7B:50:4A:8C:85:8F:15:B3:FA:52:F9:73
Authority key identifier: 6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
Certificate issuer: /CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
Certificate serial: 1964
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
Manifest number: 194B
Signing time: Thu 16 Apr 2026 16:22:50 +0000
Manifest this update: Thu 16 Apr 2026 16:22:49 +0000
Manifest next update: Thu 23 Apr 2026 16:22:49 +0000
Files and hashes: 1: bifP0YnuRkQx1LkBO8wHWKgCZOY.crl (hash: jo2wFAPDBXUXqPInx+Nuz1wcRw+Z5h3QmOUc6oG+Lz4=)
2: 33E73FAAE50B11EF838B6642C4F9AE02.roa (hash: d+TSvpxly3k8El4+pV6d2wdav1wdXrK2Z6zZMFeDKxk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl
rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6500 (0x1964)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D13, serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
Validity
Not Before: Apr 16 16:22:49 2026 GMT
Not After : Apr 23 16:22:49 2026 GMT
Subject: CN=69e10cd9-41db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:f3:2c:5b:57:03:42:1f:64:ed:28:37:75:
4e:6b:0f:2b:fd:37:c4:1a:f0:f9:5c:06:77:ac:4d:
c6:13:31:71:80:79:b9:72:d1:8a:15:42:62:6b:b9:
6d:25:83:b6:15:38:d6:81:78:d8:8d:f6:55:34:f4:
d7:3f:f3:d4:78:56:e9:f7:e4:84:e4:46:47:61:ca:
22:cb:1b:09:8d:41:03:93:44:dc:d9:10:6c:92:cf:
17:57:1f:cb:a3:af:31:e4:1d:32:da:b6:e8:42:a8:
1e:79:28:48:bd:11:89:73:f3:c7:f7:98:b8:2e:6c:
fb:31:6f:31:f4:0c:4d:f9:d0:a9:ba:5b:b3:d1:5c:
98:82:f5:02:e2:d7:df:f4:1d:b0:61:3b:00:06:7c:
b8:bc:42:1f:58:68:15:55:77:16:d5:df:10:58:02:
3a:96:5b:29:93:9f:7e:14:f5:0a:83:5b:21:78:a5:
9e:29:7f:b0:6c:be:8e:30:80:27:b7:70:04:e7:03:
31:b4:ad:10:09:5e:45:1e:eb:40:30:87:d7:08:ff:
9d:99:70:13:7c:2a:53:7a:3e:85:b2:6c:b4:84:a2:
64:d2:5b:e7:d2:55:e3:88:a6:73:b3:3c:26:8d:e9:
eb:ed:0f:5a:24:1d:7b:8c:d5:45:6d:c5:df:0e:d3:
9e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:08:51:B9:34:10:91:FE:7B:50:4A:8C:85:8F:15:B3:FA:52:F9:73
X509v3 Authority Key Identifier:
keyid:6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:34:4a:c3:45:73:84:5f:95:b5:03:39:b8:1b:36:dd:ad:39:
ee:40:16:c6:f6:a5:2d:fe:a1:b1:ce:af:dd:eb:26:b0:bd:0f:
57:8c:43:8e:16:ab:ee:61:8a:49:25:6f:67:93:c4:6e:cd:b5:
39:25:56:c4:22:9f:b5:67:14:82:dd:94:ac:49:e8:e3:a5:cf:
fd:65:0b:da:b3:78:b0:cc:a6:36:70:08:c9:b0:d6:75:50:5e:
ab:5a:8d:39:a9:23:6b:66:ca:55:bf:31:42:90:48:1a:89:92:
3c:35:56:47:1e:3d:92:1d:ac:44:20:7b:b4:de:48:23:89:bc:
b4:bb:7c:e0:5e:36:7d:14:2a:66:5d:6f:4d:43:23:3b:0b:03:
cb:18:b7:92:a0:f8:47:7a:f7:16:11:2c:22:f1:96:fd:76:0e:
8f:f7:73:69:5e:b0:1c:f5:ec:2c:99:21:fb:e3:11:ea:64:9d:
c2:2f:aa:d0:2e:98:ce:0d:2b:88:47:94:1b:ff:f5:cb:a7:a1:
fd:80:f3:5c:c3:4f:ce:37:1d:7a:d6:af:65:80:16:3f:e9:f2:
fa:43:b4:db:12:2b:fc:93:f1:8a:c7:58:62:9f:ae:ac:3b:b2:
eb:71:2f:eb:d0:8e:28:50:57:64:e1:20:9e:2a:ee:8b:76:b1:
08:22:d4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:51:20 2026 by rpki-client