
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
File: Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft (raw, json)
Hash identifier: ZHTDGq6t7nDs8F0/nQtMVDswEmMfAhb+TQMJbhLKkDg=
Subject key identifier: 44:BD:17:9E:94:77:42:65:0E:FC:25:7C:09:20:7C:DF:3A:3D:68:82
Authority key identifier: 06:2D:31:3B:09:9A:E8:6B:3F:4F:E2:E2:0B:B4:5F:8E:86:53:62:73
Certificate issuer: /CN=A919AFBE/serialNumber=062D313B099AE86B3F4FE2E20BB45F8E86536273
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
Manifest number: 3E
Signing time: Sun 01 Mar 2026 09:51:43 +0000
Manifest this update: Sun 01 Mar 2026 09:51:42 +0000
Manifest next update: Sun 08 Mar 2026 09:51:42 +0000
Files and hashes: 1: Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl (hash: vPO37Fm1abFPZyUQojkClMMq8QFds8QEbiF+PVJx6aY=)
2: 4F172076BA1F11F08DD0CE3CC4F9AE02.roa (hash: otJtZV8aWxED8Ots8vZzliR1uFIMPOI3+2ENrD6egEA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl
rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:51:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AFBE, serialNumber=062D313B099AE86B3F4FE2E20BB45F8E86536273
Validity
Not Before: Mar 1 09:51:42 2026 GMT
Not After : Mar 8 09:51:42 2026 GMT
Subject: CN=69a40c2f-1943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:d7:3f:07:df:bf:d3:51:cf:a2:8a:9f:c1:
c3:ed:c4:23:19:3e:99:8e:24:80:fa:ef:ae:54:a1:
8c:85:14:11:84:e9:b0:cf:ed:d9:be:2c:03:5c:45:
d3:8e:e6:45:69:11:cd:d7:68:c6:9c:9a:74:06:90:
e8:0b:8a:dc:89:90:84:08:31:dd:8f:87:cd:af:6f:
b1:1a:3b:9d:3c:98:6c:a3:cc:6d:b5:24:86:a2:78:
bc:a1:68:43:4c:10:b5:7f:20:dd:c8:2c:0a:d8:2f:
55:9f:1b:c3:b5:b5:38:78:71:0b:57:1a:f4:89:38:
2d:a0:62:86:af:f5:08:ba:76:e5:79:0f:d8:94:df:
5f:22:39:4e:5d:2a:b0:11:ea:56:03:7b:b0:7f:93:
ea:c6:e4:01:79:24:57:25:ab:5f:9d:90:39:64:62:
a0:93:d6:c3:1e:94:b9:78:ee:61:56:04:7d:5a:c5:
3f:2b:8d:e6:34:70:10:24:0b:12:04:c8:58:33:35:
37:8d:17:a6:df:ce:86:7c:c1:90:74:09:21:e0:3a:
99:fc:62:23:2f:fa:fc:fc:f1:40:be:ca:1f:11:6e:
37:30:e1:f4:16:07:83:40:97:78:51:34:93:79:0a:
96:94:4b:5b:b4:8a:e1:c1:5b:0c:f6:5a:c4:e0:f3:
00:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BD:17:9E:94:77:42:65:0E:FC:25:7C:09:20:7C:DF:3A:3D:68:82
X509v3 Authority Key Identifier:
keyid:06:2D:31:3B:09:9A:E8:6B:3F:4F:E2:E2:0B:B4:5F:8E:86:53:62:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:e1:fe:e0:2c:79:5a:a9:e2:04:fe:13:32:de:8b:2f:80:b4:
08:8f:d8:c3:8a:38:f4:a1:3c:5d:7f:9d:59:79:fa:66:1d:0f:
cc:c9:2b:ef:33:87:15:6a:3d:e2:17:22:bc:df:0d:71:12:bf:
8c:eb:64:31:e8:6a:55:0d:62:80:f8:3a:20:c7:4f:43:5d:9f:
9c:9c:02:c9:1d:9f:18:87:24:3f:38:77:47:7a:db:95:1f:ac:
8c:d0:8d:7d:7e:63:21:e5:54:f4:7f:2c:77:a8:4d:f2:fa:d1:
b1:15:34:ac:47:9b:10:fe:36:3f:a8:87:0f:07:ec:93:24:f3:
bf:14:c1:22:85:65:d2:87:cb:82:5c:7b:cc:7a:de:60:96:d2:
80:18:c1:cd:50:4f:ef:6c:ec:9f:6e:65:57:01:42:7b:db:cf:
1d:6e:91:cc:83:98:da:8e:53:16:e5:a0:9c:80:32:8a:dc:35:
fa:de:a8:7b:58:0a:d9:ea:35:36:d6:83:28:61:7b:8d:3e:52:
e7:32:91:39:05:73:2f:2a:3b:2f:87:2d:be:1b:09:14:5c:98:
62:c9:a1:12:50:9c:d5:4b:fa:90:40:6b:ef:94:0c:c8:53:4d:
6f:c4:9f:c6:06:05:cb:3c:bf:4a:05:eb:28:c3:c1:b4:46:2b:
e8:37:c7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:07:02 2026 by rpki-client