
$ rpki-client -vvf rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft
File: bgopAGEwM5uDbSj3ABgC9xpaTkI.mft (raw, json)
Hash identifier: H2iGNs/SgXEwNUrCvJG0FtRus/9PnZZOXuNoPmB8X/w=
Subject key identifier: 89:3D:2A:F2:64:FC:50:75:1D:83:62:A7:CB:26:97:6B:51:25:F6:5B
Authority key identifier: 6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42
Certificate issuer: /CN=A91166D1/serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42
Certificate serial: 0392
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft
Manifest number: 038D
Signing time: Mon 11 May 2026 00:50:46 +0000
Manifest this update: Mon 11 May 2026 00:50:46 +0000
Manifest next update: Mon 18 May 2026 00:50:46 +0000
Files and hashes: 1: bgopAGEwM5uDbSj3ABgC9xpaTkI.crl (hash: nATCi0+QPBx0Biw/1RHA2kTSBELBGHj80kqZtzMof34=)
2: 3C3A98A4E71C11EC9128DF0BC4F9AE02.roa (hash: ssvUGeobJIBhGuwZAZC5KCcDFtOiMzobKGRXBbPMwvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl
rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 914 (0x392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91166D1, serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42
Validity
Not Before: May 11 00:50:46 2026 GMT
Not After : May 18 00:50:46 2026 GMT
Subject: CN=6a0127e6-4cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:49:80:4c:87:8c:fe:10:9b:ae:eb:e8:bb:0f:
8c:cf:a8:47:e8:d5:e6:33:90:2c:51:89:11:e8:84:
f7:2a:7c:96:ca:74:75:d9:6c:1f:80:22:cb:e2:4d:
b1:05:86:17:af:c4:69:4c:30:76:2d:9d:59:25:66:
92:fd:49:1a:0c:95:6f:17:13:e4:e4:1e:84:09:a8:
fd:22:ab:c9:d5:7e:d9:e9:00:23:eb:1e:72:bd:f6:
86:1a:3b:93:0d:f4:98:dd:98:70:08:53:33:40:e9:
28:5d:2c:35:8b:0a:6f:0a:8b:b7:db:1f:c5:c3:6c:
aa:ae:d8:69:35:d2:83:d3:bf:b2:66:92:06:6d:e4:
da:56:0a:90:64:63:d8:f3:7c:d0:1e:c0:e1:4b:8c:
2c:bc:4b:f9:ab:23:05:41:d3:9b:b3:74:53:60:6b:
7d:8b:45:34:e3:3d:10:41:c7:14:d1:80:de:a6:5f:
50:1b:58:3a:78:a5:14:17:72:d9:c7:4b:fa:4d:c2:
7b:d8:ba:86:08:99:84:24:84:09:d7:96:ed:18:98:
82:1e:16:54:23:c3:9c:11:2a:b6:c0:66:06:be:e2:
9f:4d:31:2f:9c:38:34:22:c0:23:4c:a1:bc:c1:66:
49:2a:08:40:36:ae:b8:0a:19:20:f2:76:9f:80:ad:
ee:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3D:2A:F2:64:FC:50:75:1D:83:62:A7:CB:26:97:6B:51:25:F6:5B
X509v3 Authority Key Identifier:
keyid:6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:0d:1f:c7:ab:9c:33:19:05:b8:10:9e:6b:db:6a:4f:04:27:
89:82:3f:cb:08:52:c7:c1:27:f2:6e:59:b7:e4:67:8c:bc:95:
da:e6:bb:25:a4:b7:c7:ca:1a:ba:68:f0:e9:9d:07:27:be:4b:
b9:cc:83:47:1b:98:7f:ba:d2:59:4a:b6:63:42:2c:28:33:b8:
57:84:20:97:5a:02:9d:ed:e9:6e:cf:5a:d9:09:5a:22:e1:b0:
67:8f:c6:ef:59:5f:3a:ee:0c:2f:ff:f0:b6:63:08:2b:34:87:
40:a7:eb:bd:8e:cf:bf:ca:aa:48:1e:01:51:1d:fc:d6:d4:13:
18:16:db:9b:da:64:07:e8:a9:e4:7e:47:82:ce:bb:e0:a7:24:
ea:3b:64:fa:b9:7f:4d:67:da:7b:88:d9:57:fd:02:a0:5f:b4:
a9:9b:af:cb:0b:e1:9a:09:f7:c4:69:18:ce:8a:57:1b:18:0c:
8b:37:c4:fc:b8:8d:2d:6d:f9:e2:1d:d5:1b:35:a8:96:7f:ac:
50:9f:3d:2e:b2:1e:68:c3:92:8a:3f:38:82:a1:73:6e:dd:85:
09:5c:e1:9b:f4:2c:52:26:f2:83:b9:dd:b5:09:d3:cd:cc:1e:
a6:b9:0e:59:58:ac:26:89:b9:ee:82:a5:20:59:4e:74:3a:58:
c3:7f:c5:86
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY2RDExMTAvBgNVBAUTKDZFMEEyOTAwNjEzMDMzOUI4MzZEMjhGNzAwMTgwMkY3
MUE1QTRFNDIwHhcNMjYwNTExMDA1MDQ2WhcNMjYwNTE4MDA1MDQ2WjAYMRYwFAYD
VQQDEw02YTAxMjdlNi00Y2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA20mATIeM/hCbruvouw+Mz6hH6NXmM5AsUYkR6IT3KnyWynR12WwfgCLL4k2x
BYYXr8RpTDB2LZ1ZJWaS/UkaDJVvFxPk5B6ECaj9IqvJ1X7Z6QAj6x5yvfaGGjuT
DfSY3ZhwCFMzQOkoXSw1iwpvCou32x/Fw2yqrthpNdKD07+yZpIGbeTaVgqQZGPY
83zQHsDhS4wsvEv5qyMFQdObs3RTYGt9i0U04z0QQccU0YDepl9QG1g6eKUUF3LZ
x0v6TcJ72LqGCJmEJIQJ15btGJiCHhZUI8OcESq2wGYGvuKfTTEvnDg0IsAjTKG8
wWZJKghANq64Chkg8nafgK3uxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIk9KvJk
/FB1HYNip8sml2tRJfZbMB8GA1UdIwQYMBaAFG4KKQBhMDObg20o9wAYAvcaWk5C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZEMS9BQkRBNTE0MkU3
MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001dURiU2ozQUJnQzl4cGFU
a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Jnb3BBR0V3TTV1RGJTajNBQmdDOXhwYVRrSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjZEMS9BQkRBNTE0MkU3MTUxMUVDQjgyQ0IwNkVDNEY5QUUwMi9iZ29wQUdFd001
dURiU2ozQUJnQzl4cGFUa0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASQ0fx6ucMxkFuBCea9tqTwQniYI/ywhSx8En8m5Zt+RnjLyV2ua7JaS3x8oa
umjw6Z0HJ75LucyDRxuYf7rSWUq2Y0IsKDO4V4Qgl1oCne3pbs9a2QlaIuGwZ4/G
71lfOu4ML//wtmMIKzSHQKfrvY7Pv8qqSB4BUR381tQTGBbbm9pkB+ip5H5Hgs67
4Kck6jtk+rl/TWfae4jZV/0CoF+0qZuvywvhmgn3xGkYzopXGxgMizfE/LiNLW35
4h3VGzWoln+sUJ89LrIeaMOSij84gqFzbt2FCVzhm/QsUibyg7ndtQnTzcweprkO
WVisJom57oKlIFlOdDpYw3/Fhg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:37:08 2026 by rpki-client