
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
File: BhgYSeLF-TE-pgozl9xhRyrBGw0.mft (raw, json)
Hash identifier: wwabqYPcKnpTExXaTRmh11Ro1nOVUZ1ukMpyWXMO/lg=
Subject key identifier: E9:3E:4C:A1:39:8E:94:69:8C:E4:13:EE:C5:7E:A2:50:1C:79:5B:5A
Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
Certificate issuer: /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Certificate serial: 0723
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
Manifest number: 0708
Signing time: Thu 16 Apr 2026 21:57:50 +0000
Manifest this update: Thu 16 Apr 2026 21:57:50 +0000
Manifest next update: Thu 23 Apr 2026 21:57:50 +0000
Files and hashes: 1: BhgYSeLF-TE-pgozl9xhRyrBGw0.crl (hash: hkTUMVcNHSB33EOI+RoqPW5pd5kvvHu2kCRdRT1WfqY=)
2: E4205416B2F111EFBB14DE0FC4F9AE02.roa (hash: VFye1Dmoq1BwB6EiBXuSTI6+JgFfT1fZg/CcpOjt6ZM=)
3: 4F1694B4C87B11ED981CC523C4F9AE02.roa (hash: Z4GMryMw3HLfh78F49vUfH5AisNPN7v/Lh1b+aK9Cdg=)
4: C18726F486D711EBA06B0E64C4F9AE02.roa (hash: GyALuDHToHrHzVvWuUIXCDTOPrYATDjL1eGhC/dCRwY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1827 (0x723)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183BBC, serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Validity
Not Before: Apr 16 21:57:50 2026 GMT
Not After : Apr 23 21:57:50 2026 GMT
Subject: CN=69e15b5e-8a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:47:04:58:37:51:c1:81:b2:73:9b:5b:78:
e1:bd:a7:2e:00:e8:2d:58:64:a5:87:92:be:46:31:
b8:5f:30:c3:ac:0a:41:70:0e:f4:60:0b:a3:9f:e7:
fc:d0:48:6e:42:96:9a:d7:26:0a:7d:c7:5c:87:d5:
1e:d9:f9:de:20:25:73:e8:4e:60:46:98:ef:65:c5:
69:d5:2b:ca:cf:11:f8:cf:65:60:6e:50:c0:ae:1d:
94:05:21:24:b5:f9:cc:fd:a4:ed:5a:92:4e:0e:ca:
01:94:cc:f4:8a:04:64:95:f1:25:ea:89:b8:93:0c:
dc:83:3a:78:f3:eb:fe:7e:36:0e:60:89:98:d5:c4:
5e:c1:d7:48:85:f4:6d:41:ee:eb:35:a0:6f:f4:d5:
f0:52:5f:c3:ad:42:a4:2c:ae:6e:cb:26:d9:93:f4:
99:53:01:96:ce:f8:0b:cd:74:bc:fe:21:f0:2d:aa:
a6:d5:21:e2:5d:19:3e:be:15:6b:4a:f6:e5:4a:87:
3f:78:98:a6:f5:5e:0a:2c:2d:b9:7f:b5:eb:71:d1:
ae:5e:9b:c5:16:03:b8:0c:20:96:40:32:cf:d6:59:
f0:2e:58:72:e3:99:e5:0d:6a:1d:0a:f3:83:1a:fd:
9a:e4:dc:0c:55:0a:df:98:bd:29:06:5b:8e:06:b6:
ef:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3E:4C:A1:39:8E:94:69:8C:E4:13:EE:C5:7E:A2:50:1C:79:5B:5A
X509v3 Authority Key Identifier:
keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cc:20:cf:f2:5f:25:ba:19:2b:72:23:55:85:15:a2:da:ca:
09:95:06:7b:0a:a1:df:4a:87:54:70:8f:d8:b2:b3:77:ff:24:
9f:af:57:3a:9d:1c:12:8f:fb:85:25:a5:2e:a3:24:2d:76:80:
34:8d:ec:ca:59:28:69:81:c5:ce:64:7d:09:23:0b:c0:a6:29:
01:67:26:0c:22:5a:c9:8b:d0:08:89:d2:e7:e8:e6:6d:ce:a1:
ea:31:4c:e2:3e:e3:69:a5:45:dd:79:cd:d6:45:89:05:aa:88:
4e:bb:74:3d:c4:58:56:49:89:95:41:56:4d:93:d4:bc:1d:78:
b0:82:61:dc:9c:00:14:98:88:70:9e:40:ee:22:42:f2:57:4b:
0a:43:a4:6e:a1:d7:92:71:34:32:24:35:b8:09:18:16:54:de:
f2:6e:72:65:f9:c4:44:3f:7a:34:14:14:06:42:52:89:51:eb:
63:96:f0:61:ac:7e:fa:6a:92:c6:c5:88:6a:05:59:44:45:06:
41:32:98:b6:52:f8:02:1b:0f:a9:09:66:60:88:d6:42:82:8c:
50:24:33:47:2e:ad:81:68:d8:6e:77:dd:91:b3:00:79:be:0f:
1d:78:a5:b7:00:1a:31:17:1f:2a:44:31:05:09:78:77:fb:4b:
7b:07:c8:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICByMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNCQkMxMTAvBgNVBAUTKDA2MTgxODQ5RTJDNUY5MzEzRUE2MEEzMzk3REM2MTQ3
MkFDMTFCMEQwHhcNMjYwNDE2MjE1NzUwWhcNMjYwNDIzMjE1NzUwWjAYMRYwFAYD
VQQDEw02OWUxNWI1ZS04YTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArLlHBFg3UcGBsnObW3jhvacuAOgtWGSlh5K+RjG4XzDDrApBcA70YAujn+f8
0EhuQpaa1yYKfcdch9Ue2fneICVz6E5gRpjvZcVp1SvKzxH4z2VgblDArh2UBSEk
tfnM/aTtWpJODsoBlMz0igRklfEl6om4kwzcgzp48+v+fjYOYImY1cRewddIhfRt
Qe7rNaBv9NXwUl/DrUKkLK5uyybZk/SZUwGWzvgLzXS8/iHwLaqm1SHiXRk+vhVr
SvblSoc/eJim9V4KLC25f7XrcdGuXpvFFgO4DCCWQDLP1lnwLlhy45nlDWodCvOD
Gv2a5NwMVQrfmL0pBluOBrbvXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOk+TKE5
jpRpjOQT7sV+olAceVtaMB8GA1UdIwQYMBaAFAYYGEnixfkxPqYKM5fcYUcqwRsN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0JCQy8xNDBDMTc1Njg2
RDYxMUVCQjdCMzlDNjJDNEY5QUUwMi9CaGdZU2VMRi1URS1wZ296bDl4aFJ5ckJH
dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JoZ1lTZUxGLVRFLXBnb3psOXhoUnlyQkd3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0JCQy8xNDBDMTc1Njg2RDYxMUVCQjdCMzlDNjJDNEY5QUUwMi9CaGdZU2VMRi1U
RS1wZ296bDl4aFJ5ckJHdzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeswgz/JfJboZK3IjVYUVotrKCZUGewqh30qHVHCP2LKzd/8kn69XOp0cEo/7
hSWlLqMkLXaANI3sylkoaYHFzmR9CSMLwKYpAWcmDCJayYvQCInS5+jmbc6h6jFM
4j7jaaVF3XnN1kWJBaqITrt0PcRYVkmJlUFWTZPUvB14sIJh3JwAFJiIcJ5A7iJC
8ldLCkOkbqHXknE0MiQ1uAkYFlTe8m5yZfnERD96NBQUBkJSiVHrY5bwYax++mqS
xsWIagVZREUGQTKYtlL4AhsPqQlmYIjWQoKMUCQzRy6tgWjYbnfdkbMAeb4PHXil
twAaMRcfKkQxBQl4d/tLewfIEg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:38:15 2026 by rpki-client