
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
File: bGZwF1JoMcwYJ1GN4StiH28_N4g.mft (raw, json)
Hash identifier: 7NNu29VjWIjTK0/abLYVdBz9JLrqKIvNl2jW4rkj4dU=
Subject key identifier: 8C:C5:D5:BA:D3:B9:37:07:FE:C5:52:45:CF:F2:DD:83:14:10:7F:B7
Authority key identifier: 6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
Certificate issuer: /CN=A9183704/serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Certificate serial: 76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
Manifest number: 6F
Signing time: Mon 02 Mar 2026 03:00:09 +0000
Manifest this update: Mon 02 Mar 2026 03:00:07 +0000
Manifest next update: Mon 09 Mar 2026 03:00:07 +0000
Files and hashes: 1: bGZwF1JoMcwYJ1GN4StiH28_N4g.crl (hash: dMvwrC8dcMaePg+bWRDuxd/kH0UZB4CoDdmHYTE8Rmg=)
2: 7ECD6624D8F411F0885FED3572D3641D.roa (hash: kEwnH7Od+kt8tebTEN6qNlYk79LWf5Il0l1R0uvP8ro=)
3: B25E5954768D11F091768048C4F9AE02.roa (hash: XBpapngz5dr5cXTfIZvo3z58b3+Y9S6acFpjx4E21A4=)
4: DC1B4E64768D11F0BC42C048C4F9AE02.roa (hash: dVCUtpZknoGOXbCPR2t9DsP1/pKxGj7UhMl3FB7miV4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183704, serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Validity
Not Before: Mar 2 03:00:07 2026 GMT
Not After : Mar 9 03:00:07 2026 GMT
Subject: CN=69a4fd39-23c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:0b:11:d5:65:b0:34:99:f3:0d:28:e1:f2:
f0:93:2e:d9:66:92:d3:87:78:b8:d1:05:40:9c:a1:
ac:5c:3d:f4:9c:01:15:9f:b7:9a:22:63:cd:c2:a8:
b7:3f:40:9a:1c:7e:fb:dc:a7:90:4e:14:fc:d4:36:
5a:fd:0b:b9:c9:76:f1:54:70:66:a1:fc:d5:e7:ce:
d6:02:32:61:57:7b:d5:c9:23:c2:3f:21:7d:ba:27:
80:d1:a0:d9:32:79:d9:d6:dd:f0:60:19:d5:7e:1e:
03:60:72:3a:d9:4d:c0:73:23:98:7c:16:e6:3b:c0:
2b:91:d8:28:41:ec:ac:8f:f7:23:3d:c2:f0:c8:93:
c2:64:1e:1e:9b:21:4c:16:5c:ac:a2:ab:5b:88:8a:
d0:44:62:1f:15:88:79:7c:f6:52:f8:75:2e:a6:8f:
2a:fe:14:6f:3d:3e:29:3d:39:27:10:c1:38:21:b8:
74:09:f0:bc:22:d2:42:35:ee:6c:74:66:7a:7a:0f:
09:c7:32:8d:3f:b3:7c:98:b7:3d:a4:ba:9b:46:fd:
4d:c4:ff:51:ab:bf:60:07:bf:b2:f4:58:33:7a:aa:
68:b7:c2:3b:4d:c6:02:cc:9d:36:e9:a0:e0:31:64:
7c:36:48:e2:14:4d:7d:dd:43:9d:8f:a2:65:dc:1a:
b0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C5:D5:BA:D3:B9:37:07:FE:C5:52:45:CF:F2:DD:83:14:10:7F:B7
X509v3 Authority Key Identifier:
keyid:6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:ca:fc:23:94:0e:c3:d7:a1:99:18:43:ea:30:80:77:06:98:
dd:1c:49:b7:e2:7d:08:9b:77:b9:e8:1f:f4:0b:d0:8e:2e:d3:
77:16:15:b7:0c:c0:d6:a8:61:c1:89:b1:0f:f9:ea:0e:6b:2e:
83:10:42:cd:d9:be:2b:52:80:d1:70:2e:b7:54:7e:1d:cb:df:
af:ef:0a:61:1f:61:5a:6f:b7:9b:8e:0b:d6:1f:5d:bd:0e:70:
c0:39:3a:08:e7:0b:e8:15:d3:21:95:f8:20:5b:18:1d:a5:dc:
6d:9e:b0:ef:e6:0d:c3:77:60:cc:ec:ba:0d:30:d1:62:eb:cd:
ff:24:e6:f4:bc:9b:c0:1e:a8:82:3f:a8:9a:c2:74:55:84:f6:
a8:fb:76:41:6a:f2:73:49:14:9b:07:9e:74:93:e1:17:63:5d:
20:6c:49:05:21:64:d7:cf:a1:16:e6:ae:65:ea:84:24:70:28:
7c:b1:67:26:29:82:96:2f:5c:cd:4d:02:ca:b6:9e:51:8e:38:
b7:8a:12:fd:84:51:60:df:4f:b0:28:ea:d9:19:06:3f:4e:ce:
48:c4:23:43:ad:b6:83:0a:f5:65:eb:9d:4e:0d:d8:55:64:92:
1e:4b:cf:08:a3:5a:0d:e4:f7:de:d1:f3:9c:18:89:f7:87:1c:
89:cd:f2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:06 2026 by rpki-client