
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
File: bGZwF1JoMcwYJ1GN4StiH28_N4g.mft (raw, json)
Hash identifier: 5ltwqRyVKA+YKTU+vkxJMxXU+cOIyTbOraJJZw8FJUY=
Subject key identifier: 84:4D:BC:3F:C3:5D:2D:24:47:EB:97:4A:13:B2:C7:FA:26:7D:7D:79
Authority key identifier: 6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
Certificate issuer: /CN=A9183704/serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
Manifest number: BA
Signing time: Wed 29 Jul 2026 08:29:02 +0000
Manifest this update: Wed 29 Jul 2026 08:29:01 +0000
Manifest next update: Wed 05 Aug 2026 08:29:01 +0000
Files and hashes: 1: bGZwF1JoMcwYJ1GN4StiH28_N4g.crl (hash: Px2fjZNlwZkiAMhMD5fotH8iHu/4OkbyDy2VdZwo2C8=)
2: DC1B4E64768D11F0BC42C048C4F9AE02.roa (hash: dVCUtpZknoGOXbCPR2t9DsP1/pKxGj7UhMl3FB7miV4=)
3: B25E5954768D11F091768048C4F9AE02.roa (hash: XBpapngz5dr5cXTfIZvo3z58b3+Y9S6acFpjx4E21A4=)
4: 7ECD6624D8F411F0885FED3572D3641D.roa (hash: kEwnH7Od+kt8tebTEN6qNlYk79LWf5Il0l1R0uvP8ro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 08:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183704, serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Validity
Not Before: Jul 29 08:29:01 2026 GMT
Not After : Aug 5 08:29:01 2026 GMT
Subject: CN=6a69b9ce-59f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d0:bf:f7:fe:a3:84:d4:67:52:73:77:a8:4c:
71:4c:a2:52:bb:b2:1b:0b:6a:a7:76:44:b3:a4:33:
e6:9f:5a:55:cf:fe:21:c6:4d:5e:10:f1:f3:a7:82:
83:0c:70:37:bd:92:f1:bd:35:af:42:9a:37:24:b4:
b9:ed:33:a3:50:21:fc:d0:45:83:b9:ec:52:03:60:
37:a1:24:f4:c5:8f:0b:d9:8d:22:b7:e7:7c:cc:06:
e5:40:41:77:3b:15:71:86:c1:1d:c5:ba:34:a5:e2:
16:b9:bd:be:f0:f4:4e:3c:18:0b:b0:39:79:2d:01:
d7:7a:cb:dc:6f:42:b0:03:ff:95:e9:08:0e:f4:89:
b9:48:65:f5:dd:97:09:a6:f1:10:a5:f2:cb:b5:85:
93:bb:01:3e:87:99:d6:d8:37:83:ac:9f:7e:5d:c9:
a5:eb:8a:a5:c6:71:95:85:71:48:dd:47:5f:97:7c:
5d:dc:cf:85:22:a4:d6:f3:f0:7f:89:b3:a4:97:25:
d9:c7:ac:d2:3e:26:35:01:0f:24:7d:e9:d0:76:2e:
38:86:f8:d1:51:8e:50:e1:79:2c:09:a3:63:51:07:
5b:f8:7b:17:e2:13:d2:1c:7d:24:60:4b:b5:94:9f:
d0:df:4e:ad:a2:7c:b7:a0:ad:15:a8:9d:57:8d:bc:
40:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4D:BC:3F:C3:5D:2D:24:47:EB:97:4A:13:B2:C7:FA:26:7D:7D:79
X509v3 Authority Key Identifier:
keyid:6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:00:68:f9:30:a6:a2:86:e0:ee:b1:76:b9:45:51:67:5f:06:
12:0a:09:ba:05:43:41:98:ee:c5:2c:fb:bf:c5:f0:de:34:37:
a0:7b:db:0c:9a:38:b2:d4:e5:3f:6e:34:b3:12:87:e3:d5:c3:
bf:a0:92:cc:c3:c7:55:d8:3c:43:31:22:92:19:36:cc:1d:99:
f0:ec:a4:43:0b:a6:65:c7:b1:6e:9a:14:c6:94:3f:60:ce:1e:
2e:80:fd:55:41:6a:6c:e4:d9:ee:09:85:66:e7:32:9c:e4:27:
0e:e9:c9:ac:87:b7:ca:e5:5f:75:31:02:7d:92:5a:01:50:d9:
04:fd:f3:dd:ba:13:af:87:e9:4c:66:53:75:45:12:77:7f:8f:
96:85:80:cb:6f:b4:6f:f4:a2:6f:81:de:a3:61:ae:96:db:44:
e0:68:d5:b2:76:15:2e:9e:cf:d5:9f:5b:a2:f9:df:e8:16:6d:
a7:f4:19:9e:7e:50:cc:6a:64:36:a8:cd:35:5e:cc:eb:39:05:
b4:02:3c:8a:85:44:75:ed:fe:c8:30:3a:1c:02:85:fd:4e:6a:
8f:dc:aa:24:ce:2f:95:b3:0a:e0:5d:e7:54:a3:ef:10:5e:4e:
fb:e0:c0:5e:fa:fd:51:c8:85:53:7d:14:7c:09:3a:10:46:eb:
61:ef:fb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:54:15 2026 by rpki-client