
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
File: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft (raw, json)
Hash identifier: ma/BTUevV5fTjnqvHsndwyDBezNnUSUwjoUO4mQqLDo=
Subject key identifier: C0:BB:03:D7:1E:EF:0B:1D:21:39:00:1B:71:F6:EA:97:DB:D3:F6:E2
Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Certificate serial: 0D84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
Manifest number: 0D41
Signing time: Fri 12 Jun 2026 18:13:03 +0000
Manifest this update: Fri 12 Jun 2026 18:13:02 +0000
Manifest next update: Fri 19 Jun 2026 18:13:02 +0000
Files and hashes: 1: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl (hash: KOwxcpxbwJDiXJWJxzcraMZm/eBiQZprCYLXlRpj3N8=)
2: 21A9C2D4221211EF9624DB0CC4F9AE02.roa (hash: lszQ8yUB/N2uYLH7nBTD6MNw6FLEt393aCgDSU4ngis=)
3: 61865C96599711F1904BB35BB3833773.roa (hash: gDZJAF+J4vmJUn7JgYk0JFg5PWvXINC2m+mUpnyhSCE=)
4: 12561046368911EEA0CB766BC4F9AE02.roa (hash: YI5D+P7yiPBL/gfzmw4F23rfItyHBBhKoDb4UnkvvPE=)
5: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (hash: xoY8l/E5wRhZGsHx91C6s9eN6yf4aMdTOO06Om2k+GE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:13:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3460 (0xd84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Validity
Not Before: Jun 12 18:13:02 2026 GMT
Not After : Jun 19 18:13:02 2026 GMT
Subject: CN=6a2c4c2f-de75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:a7:ee:41:07:85:81:47:bc:00:02:bc:6d:
f9:5a:57:ca:85:77:60:37:38:d7:54:b4:7c:a4:fd:
a7:a7:0e:b7:e6:f0:d5:69:78:ae:1a:7b:df:92:46:
7a:54:55:95:44:1e:5e:10:55:85:14:47:5b:a6:1e:
89:fc:ab:21:4b:b2:09:e2:36:aa:bf:0d:97:c7:cf:
08:a7:c2:c1:7d:92:fe:ea:03:15:02:41:39:99:91:
1a:75:83:fa:4e:9c:8d:f0:aa:23:62:b5:c5:e9:c4:
0b:a0:96:08:53:b2:86:bf:91:86:6c:79:5f:84:0d:
78:a9:b7:67:18:26:50:e3:88:f8:d4:67:a2:88:4a:
6f:88:d5:2d:6d:58:36:b8:98:12:e0:be:98:d4:de:
2a:5e:8a:de:d1:4b:3d:68:43:e1:4f:0c:76:ce:e3:
49:dd:1d:a6:81:fe:74:29:61:8a:15:72:bf:bc:65:
4c:32:5f:f0:0f:40:da:88:8f:5c:a8:1d:57:d9:48:
6f:45:af:38:34:92:12:1c:d9:93:f8:85:7b:3d:6b:
c3:fb:ce:9c:f1:67:bd:eb:54:05:94:18:ec:11:7e:
78:5a:7a:11:b0:50:d1:a8:10:30:76:19:bd:9a:88:
94:5a:a4:b7:b4:0a:ee:39:d0:4c:05:98:a6:ab:34:
98:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BB:03:D7:1E:EF:0B:1D:21:39:00:1B:71:F6:EA:97:DB:D3:F6:E2
X509v3 Authority Key Identifier:
keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:66:aa:47:99:9a:45:60:c8:92:47:e8:f9:7a:3e:13:99:ee:
97:29:47:83:00:b7:cb:4d:08:8a:47:e6:31:dd:c5:a9:c5:0e:
58:87:78:39:a7:50:c8:c1:9c:02:e0:d1:ce:86:6c:ad:7a:13:
8d:bc:eb:eb:22:27:43:65:5b:39:7c:24:b1:0b:dd:31:2b:05:
d2:80:89:5f:72:f9:03:c9:e0:27:d4:8d:28:0d:bb:0b:4a:6e:
36:42:29:18:cb:ec:8d:7f:a8:9a:3f:a0:49:4f:86:cd:26:38:
5b:a6:49:29:d2:56:e8:14:58:8a:cf:d1:44:f1:80:fe:22:21:
d3:c6:a8:c7:31:1c:a7:75:a6:9c:67:99:27:9c:a8:cd:b5:72:
03:55:69:6f:36:6e:11:f5:34:99:bf:ec:c2:18:6d:34:93:93:
4b:bd:41:9d:65:4e:0f:b7:a6:59:7a:4e:6d:9f:c0:aa:26:b6:
2d:5c:d7:8d:9a:73:df:8d:34:01:ae:e2:ba:7e:19:69:56:0d:
da:92:d9:44:e7:39:a8:3d:e0:4d:8e:9b:a9:6a:98:1a:45:80:
14:2e:82:76:80:a9:78:4f:d3:30:9b:b3:23:44:f1:e3:29:65:
49:cf:91:56:31:e0:56:50:57:62:4e:af:7d:3c:a8:c8:ea:48:
a0:a1:b8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:21:43 2026 by rpki-client