
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
File: BhgYSeLF-TE-pgozl9xhRyrBGw0.mft (raw, json)
Hash identifier: aeLKG1DssfahqMaKoBUQ0JuuwCyLYToels88+o1RsS4=
Subject key identifier: CA:10:64:AD:33:62:0D:DA:10:ED:14:C3:AD:C9:A0:25:33:F4:58:F7
Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
Certificate issuer: /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Certificate serial: 0757
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
Manifest number: 073C
Signing time: Tue 28 Jul 2026 22:26:20 +0000
Manifest this update: Tue 28 Jul 2026 22:26:20 +0000
Manifest next update: Tue 04 Aug 2026 22:26:20 +0000
Files and hashes: 1: BhgYSeLF-TE-pgozl9xhRyrBGw0.crl (hash: 2NM7KTrWihcGWaAnULqIRBhx0zffjBhqTbop4upBdTk=)
2: C18726F486D711EBA06B0E64C4F9AE02.roa (hash: GyALuDHToHrHzVvWuUIXCDTOPrYATDjL1eGhC/dCRwY=)
3: 4F1694B4C87B11ED981CC523C4F9AE02.roa (hash: Z4GMryMw3HLfh78F49vUfH5AisNPN7v/Lh1b+aK9Cdg=)
4: E4205416B2F111EFBB14DE0FC4F9AE02.roa (hash: VFye1Dmoq1BwB6EiBXuSTI6+JgFfT1fZg/CcpOjt6ZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:26:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1879 (0x757)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183BBC, serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Validity
Not Before: Jul 28 22:26:20 2026 GMT
Not After : Aug 4 22:26:20 2026 GMT
Subject: CN=6a692c8c-88f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:13:d9:c7:68:ff:fe:b9:6b:60:d4:d7:78:8a:
bf:88:42:62:25:1e:ca:97:f0:ab:c1:f7:4d:73:65:
a1:da:40:e8:3c:45:8b:90:bb:ce:f0:05:3e:49:a0:
c2:7a:cb:bb:0d:97:b8:c7:a5:69:28:c4:37:3d:90:
e3:02:c6:f7:43:a0:0f:44:5b:6b:b2:b1:cd:00:5a:
9c:82:90:19:6d:a7:f2:cd:10:b5:44:06:5c:6e:88:
cd:64:ae:64:75:7f:b7:f2:06:95:ed:58:ec:b9:08:
f1:8a:e9:2a:a0:29:92:15:64:84:5c:2c:a0:d2:ae:
47:f1:b8:2d:81:4e:59:2e:57:fb:e5:11:c8:ce:46:
0c:5a:6b:c9:ff:d5:a0:cb:10:1e:26:00:ad:64:19:
c9:f8:c5:30:48:43:8f:bf:ba:ba:dc:c5:d2:c9:63:
96:bf:21:8e:1d:27:28:7a:b9:7a:35:b3:e3:1b:76:
67:40:2c:91:f1:86:28:ee:15:3f:a7:7a:ee:e8:c4:
80:87:40:6d:05:f3:22:cc:8f:2f:8c:91:d8:f0:c9:
cb:b4:88:3e:6d:18:59:d2:90:de:d1:c9:64:8e:fb:
46:3d:64:d4:17:57:62:56:70:db:df:71:27:f7:da:
52:7d:d9:f0:2a:15:76:c8:df:3d:dd:84:6b:79:9d:
19:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:10:64:AD:33:62:0D:DA:10:ED:14:C3:AD:C9:A0:25:33:F4:58:F7
X509v3 Authority Key Identifier:
keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:fe:04:e6:09:99:ea:48:87:be:74:d5:24:a8:1f:fd:a9:ce:
ef:24:80:ac:ff:c9:21:4b:df:10:bc:2d:1c:ce:00:41:88:aa:
77:fe:9d:3e:4f:76:96:24:13:be:6e:ce:4b:44:a4:2d:f4:bf:
98:00:c3:a5:b2:7a:5a:e0:96:91:97:0d:52:0c:b0:fc:83:7e:
66:44:22:bc:d3:73:7d:cb:d2:3a:e9:1d:de:a6:6c:85:8f:66:
c6:cd:72:f5:37:46:f2:94:98:73:96:c1:cf:22:e7:86:3e:42:
f8:7d:08:df:22:30:0c:2e:2e:ac:f2:ab:d8:90:ba:40:94:68:
49:06:b7:2f:18:03:13:d4:ce:f8:4c:52:8c:f0:0c:3e:a6:11:
59:87:3a:66:30:fa:b5:3a:db:2f:a1:04:7e:54:88:19:94:fd:
94:5c:1f:93:4d:26:47:4b:8d:4d:75:e3:2d:04:87:6d:b4:00:
57:4d:5d:fe:70:dd:9a:91:88:af:ed:3d:8b:60:de:a2:fb:4f:
af:d3:5b:a9:39:2f:5d:26:2f:03:3f:87:8a:11:35:02:16:dc:
86:f8:92:e8:9c:19:ec:a7:4e:5f:31:01:32:83:a6:83:55:6c:
df:9b:df:c3:f1:c0:93:41:32:da:6b:aa:e0:35:e5:76:38:2b:
ac:d4:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:34:05 2026 by rpki-client