
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft
File: BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft (raw, json)
Hash identifier: L05N3OpvKNeVMh5iwPjB+iSwWAg9EdJv7PZXKgcCbXM=
Subject key identifier: 77:42:58:30:11:1E:BD:E4:32:6E:7A:6B:C0:65:C5:56:05:F1:BD:A1
Authority key identifier: 04:83:2F:BE:70:C7:B8:85:9C:A1:A0:E3:E0:5A:29:6B:B0:9C:5D:3D
Certificate issuer: /CN=A91238EC/serialNumber=04832FBE70C7B8859CA1A0E3E05A296BB09C5D3D
Certificate serial: 1846
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft
Manifest number: 1827
Signing time: Tue 22 Sep 2026 16:28:05 +0000
Manifest this update: Tue 22 Sep 2026 16:28:04 +0000
Manifest next update: Tue 29 Sep 2026 16:28:04 +0000
Files and hashes: 1: BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl (hash: i+9X+qpB34eR/bx+i0AcDi82ihgoWqleqAYUWgdJPkM=)
2: gI0XePUbHIaCN04XqRwfVHf1vVo.asa (hash: B9fLAapnb/1S8pWJuNehZGXJ8Kd0EBKkxhP79hcXxyE=)
3: 2F9D268C76B211ECABA1A612C4F9AE02.roa (hash: uxg1Vz02k9PJduPGV4AMR2b2pATyu+ms5B8uFxBNAz8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl
rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6214 (0x1846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91238EC, serialNumber=04832FBE70C7B8859CA1A0E3E05A296BB09C5D3D
Validity
Not Before: Sep 22 16:28:04 2026 GMT
Not After : Sep 29 16:28:04 2026 GMT
Subject: CN=6ab2ac95-d8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:24:5c:04:70:86:75:34:cb:b0:43:9a:fd:97:
f5:c5:eb:d1:31:0b:ce:e9:99:c6:d1:2a:01:95:a6:
5e:b1:c0:7e:74:ac:38:24:87:bc:16:2f:47:6b:6e:
52:e0:d8:90:28:aa:29:5d:56:50:77:e0:a5:ff:57:
ca:6b:9e:41:6e:a3:78:ca:95:eb:f5:ff:e2:a9:ae:
22:c8:08:de:3c:3e:71:91:0a:ae:ab:2a:7d:c3:9f:
b7:d7:c6:7d:3d:06:9d:d8:72:4e:70:0a:a5:f2:f3:
5c:70:7d:c0:4a:c4:fa:0f:8d:8b:34:09:72:e8:ec:
44:dc:28:38:7c:9b:f5:a3:dc:9b:7b:5b:1a:f7:20:
1f:fe:3b:51:4c:c9:bb:52:37:96:70:83:7a:8c:0f:
7a:6b:75:54:d5:c5:4d:e1:9c:1f:5a:d2:1d:06:7e:
0c:da:9d:7c:63:22:19:a5:c2:57:bc:a0:78:1d:7a:
3f:f7:00:ed:d5:18:e2:a0:84:68:4e:0d:53:8d:4a:
f9:e4:5a:4a:39:34:c4:b2:53:5f:2c:18:a1:87:5d:
fc:3e:e7:fa:f6:9f:d2:cf:3e:af:96:5a:b1:88:e3:
1d:5a:85:f1:1c:c5:55:51:82:6f:09:78:59:dc:4a:
34:b6:d8:cb:1a:86:dd:c2:14:fe:7a:e9:fc:8c:d1:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:42:58:30:11:1E:BD:E4:32:6E:7A:6B:C0:65:C5:56:05:F1:BD:A1
X509v3 Authority Key Identifier:
keyid:04:83:2F:BE:70:C7:B8:85:9C:A1:A0:E3:E0:5A:29:6B:B0:9C:5D:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:13:15:93:c3:36:ec:28:80:78:40:70:a1:53:90:f1:d6:21:
f5:00:e6:2f:17:ac:47:41:d7:42:cf:10:9d:4c:61:89:14:dc:
53:6f:46:32:9e:de:06:94:40:f3:f0:ee:27:1d:51:73:d0:99:
71:2c:7e:c0:d0:7e:d2:be:11:3f:57:73:20:4c:78:e5:eb:6c:
09:84:06:4d:69:be:04:12:b0:c1:05:e6:12:be:9d:7d:48:c3:
62:e9:71:a3:92:5c:f9:6b:53:69:a9:73:af:7a:37:f8:4c:54:
cb:73:80:39:ee:a3:ee:41:c4:f9:cc:a4:1b:64:0c:09:81:0a:
3c:7d:41:1e:3d:e8:4b:66:0e:99:82:d4:0f:f1:13:d5:90:3a:
9e:59:03:d4:a1:ab:f7:1a:f1:e7:bf:e7:da:78:ad:d5:7d:50:
a9:01:2f:1f:da:c8:93:72:30:a8:6b:78:18:60:80:40:b1:37:
8d:5e:33:c1:7f:94:63:41:18:58:ba:94:e6:0e:19:ab:2a:7d:
3a:7e:5e:06:00:01:7a:b1:6f:95:a8:76:07:cc:10:a5:31:b1:
39:d9:82:9b:cd:86:6f:8f:71:66:9e:a4:1e:7a:0e:7f:ef:26:
e1:b6:a6:ec:b3:b2:8d:70:01:a0:17:53:83:86:4b:73:1f:9d:
eb:04:3d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:19:20 2026 by rpki-client