
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
File: bG1HsRFPLVgaghKAXxLDdH80r4M.mft (raw, json)
Hash identifier: mQ6N+LeeyzMiCoK9Gc25IyPSrcBPrLuQiw5tMN9200o=
Subject key identifier: 00:71:05:40:C8:E8:6D:B2:86:E5:72:93:10:79:AE:BF:1E:25:93:86
Authority key identifier: 6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83
Certificate issuer: /CN=A91C7672/serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
Manifest number: 1D58
Signing time: Sat 18 Apr 2026 16:06:46 +0000
Manifest this update: Sat 18 Apr 2026 16:06:46 +0000
Manifest next update: Sat 25 Apr 2026 16:06:46 +0000
Files and hashes: 1: bG1HsRFPLVgaghKAXxLDdH80r4M.crl (hash: lo6VTcATnU/YSYT1vy3C8vbv7vrm6jtPloAjM81WK8s=)
2: 18BDABD2537F11F0A9531C09C4F9AE02.roa (hash: APtY/87HFPVkFCNmPABVaetDfxhkY/ZtcBEA9fzgnYg=)
3: 08F61730538311F0860B155FC4F9AE02.roa (hash: kk2jLSlA4FrkU7gdAHQq3agexNxMubpJWMW/MfDoZiE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl
rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 16:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7672, serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83
Validity
Not Before: Apr 18 16:06:46 2026 GMT
Not After : Apr 25 16:06:46 2026 GMT
Subject: CN=69e3ac16-1191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:75:24:31:95:67:1e:42:22:3f:da:3d:5c:
cb:0d:70:41:72:04:77:5c:bd:a2:50:17:fd:93:69:
90:00:a2:03:3b:43:91:d6:a8:26:ba:35:b5:40:2e:
b1:99:a3:71:29:4c:a5:d4:50:c2:de:4d:1f:12:8f:
6b:a9:18:ce:e3:b6:91:65:a8:d6:db:05:c2:7c:8a:
a7:d3:79:f4:e2:ed:1c:7f:3a:e7:6d:46:27:2a:71:
40:b1:fd:6b:de:e5:b5:c1:41:df:83:03:a4:c0:0c:
e0:66:d1:ee:2d:c2:c9:4a:81:cd:2c:e6:11:c8:9a:
35:62:ee:a5:7e:26:73:0f:8d:6b:ae:68:09:ca:e1:
ff:88:eb:e8:5c:6c:c8:d7:9b:ce:fb:9d:9f:41:8d:
a9:a2:2f:6e:68:8c:df:3b:12:82:fe:51:56:93:3f:
ba:c6:73:e9:e4:c2:c6:04:3b:3e:b8:51:d0:8c:4b:
58:20:d7:47:70:d1:9c:a5:ae:da:32:11:3f:f9:7f:
34:b4:53:71:51:58:86:8d:ca:76:a8:a7:82:79:d0:
66:e2:48:f8:ce:55:ac:34:71:6a:7b:8c:9c:09:fc:
90:85:00:6b:bc:45:6c:75:e2:f8:79:d5:2c:a2:f8:
58:d6:0f:56:cf:cf:b3:50:ed:61:72:c2:2b:2d:e7:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:71:05:40:C8:E8:6D:B2:86:E5:72:93:10:79:AE:BF:1E:25:93:86
X509v3 Authority Key Identifier:
keyid:6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:04:62:06:28:90:f0:d8:1e:00:fc:a3:7b:50:63:e0:6a:8a:
e4:e7:f4:13:d2:30:58:51:65:3e:2a:bb:bf:d0:77:79:8c:09:
9e:90:a6:42:d3:39:f9:ae:43:6c:cb:72:96:fd:b8:58:a3:cd:
67:15:6f:26:b6:9e:2f:c0:f7:fc:33:1c:3c:12:66:1d:bd:57:
78:54:0e:f4:ac:a2:0d:5f:75:c8:bc:fc:8e:82:40:01:72:2b:
85:bb:67:0d:fd:df:ca:31:73:1a:25:86:e3:3a:2c:fe:1b:e0:
02:83:46:af:79:8d:99:77:65:e4:5d:4c:74:85:51:3c:45:92:
c5:0c:25:13:0d:79:9b:c7:22:4b:48:c7:70:28:83:57:b5:86:
17:14:03:a0:2b:44:0d:54:44:bd:9d:23:3d:85:6a:ba:a9:96:
a8:5c:fa:8e:01:b4:9f:99:77:20:c1:1e:be:f5:77:3d:fb:85:
a0:a6:f5:0e:b5:fd:fb:ff:fd:54:01:9e:c9:63:87:a6:d0:5a:
50:f9:c8:54:84:2e:d4:8e:cb:04:83:08:c7:d8:73:fb:e0:aa:
82:be:c3:70:1e:59:1e:f6:d1:07:eb:c0:81:fb:2c:71:72:91:
37:c6:80:dc:f3:22:70:66:be:a2:ac:56:5c:fe:1b:d1:3f:ff:
58:3a:5d:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc2NzIxMTAvBgNVBAUTKDZDNkQ0N0IxMTE0RjJENTgxQTgyMTI4MDVGMTJDMzc0
N0YzNEFGODMwHhcNMjYwNDE4MTYwNjQ2WhcNMjYwNDI1MTYwNjQ2WjAYMRYwFAYD
VQQDEw02OWUzYWMxNi0xMTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxYh1JDGVZx5CIj/aPVzLDXBBcgR3XL2iUBf9k2mQAKIDO0OR1qgmujW1QC6x
maNxKUyl1FDC3k0fEo9rqRjO47aRZajW2wXCfIqn03n04u0cfzrnbUYnKnFAsf1r
3uW1wUHfgwOkwAzgZtHuLcLJSoHNLOYRyJo1Yu6lfiZzD41rrmgJyuH/iOvoXGzI
15vO+52fQY2poi9uaIzfOxKC/lFWkz+6xnPp5MLGBDs+uFHQjEtYINdHcNGcpa7a
MhE/+X80tFNxUViGjcp2qKeCedBm4kj4zlWsNHFqe4ycCfyQhQBrvEVsdeL4edUs
ovhY1g9Wz8+zUO1hcsIrLeftpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABxBUDI
6G2yhuVykxB5rr8eJZOGMB8GA1UdIwQYMBaAFGxtR7ERTy1YGoISgF8Sw3R/NK+D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzY3Mi80Mzc2NEJFQ0Y3
MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9iRzFIc1JGUExWZ2FnaEtBWHhMRGRIODBy
NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JHMUhzUkZQTFZnYWdoS0FYeExEZEg4MHI0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzY3Mi80Mzc2NEJFQ0Y3MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9iRzFIc1JGUExW
Z2FnaEtBWHhMRGRIODByNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAngRiBiiQ8NgeAPyje1Bj4GqK5Of0E9IwWFFlPiq7v9B3eYwJnpCmQtM5+a5D
bMtylv24WKPNZxVvJraeL8D3/DMcPBJmHb1XeFQO9KyiDV91yLz8joJAAXIrhbtn
Df3fyjFzGiWG4zos/hvgAoNGr3mNmXdl5F1MdIVRPEWSxQwlEw15m8ciS0jHcCiD
V7WGFxQDoCtEDVREvZ0jPYVquqmWqFz6jgG0n5l3IMEevvV3PfuFoKb1DrX9+//9
VAGeyWOHptBaUPnIVIQu1I7LBIMIx9hz++Cqgr7DcB5ZHvbRB+vAgfsscXKRN8aA
3PMicGa+oqxWXP4b0T//WDpdXg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:18 2026 by rpki-client