
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
File: BhgYSeLF-TE-pgozl9xhRyrBGw0.mft (raw, json)
Hash identifier: AIAQ9ooSnzjqFfNNUbl04il34X5Z5fEoH+P7ZSdt3KE=
Subject key identifier: 01:41:AF:FE:FF:94:90:31:20:28:DE:30:01:8B:C7:66:08:CD:E4:BE
Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
Certificate issuer: /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Certificate serial: 070B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
Manifest number: 06F0
Signing time: Mon 02 Mar 2026 01:25:57 +0000
Manifest this update: Mon 02 Mar 2026 01:25:56 +0000
Manifest next update: Mon 09 Mar 2026 01:25:56 +0000
Files and hashes: 1: BhgYSeLF-TE-pgozl9xhRyrBGw0.crl (hash: fcq5k7D8XLHpmI8DaKa9VKRdgKSmUhHnYGwU0dz6krg=)
2: E4205416B2F111EFBB14DE0FC4F9AE02.roa (hash: VFye1Dmoq1BwB6EiBXuSTI6+JgFfT1fZg/CcpOjt6ZM=)
3: C18726F486D711EBA06B0E64C4F9AE02.roa (hash: GyALuDHToHrHzVvWuUIXCDTOPrYATDjL1eGhC/dCRwY=)
4: 4F1694B4C87B11ED981CC523C4F9AE02.roa (hash: Z4GMryMw3HLfh78F49vUfH5AisNPN7v/Lh1b+aK9Cdg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1803 (0x70b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183BBC, serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Validity
Not Before: Mar 2 01:25:56 2026 GMT
Not After : Mar 9 01:25:56 2026 GMT
Subject: CN=69a4e725-9994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:85:ea:de:7f:f4:29:5b:1c:58:20:e6:55:
79:65:df:a8:f6:fb:89:fa:55:d6:12:fb:04:a4:6f:
48:9d:80:a8:b3:45:9b:6b:19:b0:ac:d5:7f:31:c1:
66:fb:1c:9b:82:ba:a2:f8:7b:38:e4:3f:69:17:ba:
83:91:d5:34:fb:66:b2:d0:6c:be:cd:44:48:e5:73:
04:15:bf:7e:4b:bb:a4:a4:8f:50:0e:81:bb:fb:d5:
44:02:5b:c6:51:86:d5:2b:c2:2c:d6:a2:6d:ce:2d:
15:70:97:18:cb:16:17:de:6e:f7:d7:0b:39:6e:da:
d0:3d:38:86:05:e3:25:4d:2c:25:cb:9d:fd:c3:f5:
1e:3a:d1:84:c8:8b:e1:3c:3e:96:83:86:4f:ee:24:
a4:44:ec:5e:1c:70:ac:49:67:2b:4b:c3:94:5e:34:
fd:8a:b8:d4:89:d3:27:05:c4:01:95:49:86:e2:b4:
22:86:c2:05:21:1e:d1:9d:45:4e:d9:c9:19:5e:e4:
64:8a:93:cb:56:47:ed:8c:73:c6:19:7f:4c:9a:da:
be:70:45:18:82:d2:f2:59:c9:74:4a:79:f6:33:15:
dd:c0:5b:1a:47:8a:54:30:e2:61:70:dd:eb:02:8a:
1f:07:25:9b:e2:da:b4:0d:3f:c3:7a:7f:de:f0:b8:
15:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:41:AF:FE:FF:94:90:31:20:28:DE:30:01:8B:C7:66:08:CD:E4:BE
X509v3 Authority Key Identifier:
keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:84:f9:64:f5:99:48:84:ed:23:a8:4d:39:0c:18:03:74:2c:
f8:0b:f3:09:04:85:0a:c1:26:38:4c:c5:7b:98:35:ac:c3:88:
73:86:b5:1d:51:19:85:62:4b:2b:ea:4c:bd:71:01:de:81:53:
03:ef:02:4a:a9:78:65:a4:82:87:52:f2:41:de:b7:a0:86:77:
ef:a7:37:ed:33:26:96:33:0e:be:ad:63:7a:4a:d1:2b:cf:6c:
79:eb:b5:e0:05:23:27:85:91:e3:5f:31:34:a8:0b:f8:e0:36:
45:49:2b:34:be:cf:4d:c3:a1:8f:9b:b4:eb:4e:30:4b:0f:a4:
87:4b:23:4f:63:b2:c3:6a:52:73:7f:e8:33:03:4f:ba:49:8e:
c3:57:37:c3:24:a0:a2:de:91:4e:e1:ce:0e:6d:85:2d:9b:f3:
cb:0f:a9:d8:82:1e:2d:e6:71:43:83:3b:67:41:ed:a7:44:7b:
a2:81:8f:8e:be:37:04:06:7b:7d:c0:c8:20:3e:8a:3f:7d:82:
cc:fe:97:a5:c7:b3:48:19:5b:1b:15:3c:5e:2e:84:a3:5a:c0:
85:0a:89:4d:20:5f:84:55:7a:75:94:7d:7b:92:8d:5e:a9:bf:
ad:24:3d:a8:6a:51:f1:f9:6d:35:85:5e:b1:af:86:0c:dc:da:
9e:e6:b4:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNCQkMxMTAvBgNVBAUTKDA2MTgxODQ5RTJDNUY5MzEzRUE2MEEzMzk3REM2MTQ3
MkFDMTFCMEQwHhcNMjYwMzAyMDEyNTU2WhcNMjYwMzA5MDEyNTU2WjAYMRYwFAYD
VQQDEw02OWE0ZTcyNS05OTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp1iF6t5/9ClbHFgg5lV5Zd+o9vuJ+lXWEvsEpG9InYCos0WbaxmwrNV/McFm
+xybgrqi+Hs45D9pF7qDkdU0+2ay0Gy+zURI5XMEFb9+S7ukpI9QDoG7+9VEAlvG
UYbVK8Is1qJtzi0VcJcYyxYX3m731ws5btrQPTiGBeMlTSwly539w/UeOtGEyIvh
PD6Wg4ZP7iSkROxeHHCsSWcrS8OUXjT9irjUidMnBcQBlUmG4rQihsIFIR7RnUVO
2ckZXuRkipPLVkftjHPGGX9Mmtq+cEUYgtLyWcl0Snn2MxXdwFsaR4pUMOJhcN3r
AoofByWb4tq0DT/Den/e8LgVZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAFBr/7/
lJAxICjeMAGLx2YIzeS+MB8GA1UdIwQYMBaAFAYYGEnixfkxPqYKM5fcYUcqwRsN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0JCQy8xNDBDMTc1Njg2
RDYxMUVCQjdCMzlDNjJDNEY5QUUwMi9CaGdZU2VMRi1URS1wZ296bDl4aFJ5ckJH
dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JoZ1lTZUxGLVRFLXBnb3psOXhoUnlyQkd3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0JCQy8xNDBDMTc1Njg2RDYxMUVCQjdCMzlDNjJDNEY5QUUwMi9CaGdZU2VMRi1U
RS1wZ296bDl4aFJ5ckJHdzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA4T5ZPWZSITtI6hNOQwYA3Qs+AvzCQSFCsEmOEzFe5g1rMOIc4a1HVEZhWJL
K+pMvXEB3oFTA+8CSql4ZaSCh1LyQd63oIZ376c37TMmljMOvq1jekrRK89seeu1
4AUjJ4WR418xNKgL+OA2RUkrNL7PTcOhj5u0604wSw+kh0sjT2Oyw2pSc3/oMwNP
ukmOw1c3wySgot6RTuHODm2FLZvzyw+p2IIeLeZxQ4M7Z0Htp0R7ooGPjr43BAZ7
fcDIID6KP32CzP6XpcezSBlbGxU8Xi6Eo1rAhQqJTSBfhFV6dZR9e5KNXqm/rSQ9
qGpR8fltNYVesa+GDNzanua0BQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:40 2026 by rpki-client