
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft
File: BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft (raw, json)
Hash identifier: Yjpz+V6z5oNAU66tVl1NPVJ02Xd7OdgK+E+dbG0Xd+s=
Subject key identifier: AB:11:61:D4:0A:D3:C1:44:C2:70:4D:F3:D6:28:5E:0F:FB:58:0F:02
Authority key identifier: 05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29
Certificate issuer: /CN=A9199B85/serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29
Certificate serial: 0185
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft
Manifest number: 0185
Signing time: Tue 03 Mar 2026 01:03:54 +0000
Manifest this update: Tue 03 Mar 2026 01:03:53 +0000
Manifest next update: Tue 10 Mar 2026 01:03:53 +0000
Files and hashes: 1: BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl (hash: rQeMW0Vu14nKkgS/l6+Tv87D8RT732m8S1GEG6rypwA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl
rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 01:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199B85, serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29
Validity
Not Before: Mar 3 01:03:53 2026 GMT
Not After : Mar 10 01:03:53 2026 GMT
Subject: CN=69a6337a-b1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3c:05:24:f9:f3:9a:4b:1e:c1:22:d7:7a:56:
c3:9b:20:9e:49:05:57:ae:86:7c:37:7e:2f:bd:af:
97:16:c8:11:b4:2d:68:d5:3e:ae:10:4f:e5:8b:0d:
54:b2:e4:0c:f8:92:11:e1:40:5a:df:80:40:e4:64:
85:ee:3c:da:4c:04:4a:d5:0d:82:8e:95:71:3b:ab:
3a:f9:d5:47:78:aa:78:51:98:e4:ce:87:93:ee:43:
35:75:c1:bc:70:c9:e5:23:84:8b:b9:41:9f:b6:aa:
81:d1:40:5f:e8:bb:7c:f4:3f:a1:02:58:d4:76:ef:
52:75:55:7d:72:be:35:57:6a:e2:ee:e8:b0:be:87:
d4:e3:7f:05:9c:84:59:03:6f:9a:99:6d:42:ae:61:
e3:e8:27:31:77:89:7e:e5:dc:38:f5:a1:3a:89:0c:
7b:4d:69:76:34:16:83:36:6d:61:e8:70:20:54:d9:
18:e6:c3:b1:19:16:a2:73:81:56:d2:19:9e:56:38:
c6:43:74:37:5a:bf:0c:f1:4d:5f:54:7c:f1:1b:c2:
dc:07:aa:1f:73:d6:ed:c0:c0:84:11:d8:b5:d7:ac:
c9:73:1e:82:14:1c:b7:84:6d:03:f4:55:65:4a:79:
de:52:19:5b:02:e3:ca:fd:63:3f:c7:c9:a3:7c:af:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:11:61:D4:0A:D3:C1:44:C2:70:4D:F3:D6:28:5E:0F:FB:58:0F:02
X509v3 Authority Key Identifier:
keyid:05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:6d:de:09:6a:15:bc:f6:99:fb:57:2b:08:61:a1:a6:c1:49:
8b:56:a0:de:89:94:ce:6c:50:da:50:ad:87:26:57:6c:1e:3c:
80:f0:32:5c:34:75:d5:6d:07:31:4e:4c:ac:65:3a:bd:0d:52:
b5:14:45:91:8a:38:9c:b7:52:64:fc:d6:30:c3:95:53:87:71:
79:c0:1d:ff:e0:f8:0c:30:b4:8d:a3:7d:80:bb:91:d3:d4:85:
4b:09:61:de:a7:e7:83:d4:7e:e9:f6:05:57:f6:e6:e6:2a:95:
52:6e:98:ba:0c:af:45:4c:33:26:2a:91:33:ca:b8:06:49:32:
33:f4:52:38:54:0e:34:8c:7c:cc:2a:ac:8c:cb:d6:7c:c2:03:
0a:e5:01:96:06:87:76:64:5c:c4:bc:a2:1d:8a:48:c8:c3:af:
d5:2b:56:6b:d9:aa:43:c6:c6:65:f3:e8:d3:6d:41:43:46:49:
56:8f:1b:3d:4c:14:0c:c1:38:a2:43:0f:1c:8a:2c:b2:50:f1:
13:35:84:93:bc:7a:50:6b:56:6d:8c:4c:21:21:43:7f:ed:6d:
63:1f:bd:42:41:09:f1:7b:02:0c:d2:ae:3e:da:77:44:51:9b:
ea:2a:64:9e:ca:ef:5b:c2:f3:27:93:3e:1c:5b:64:0d:b9:4e:
d9:8c:5e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:31:15 2026 by rpki-client