
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
File: bifP0YnuRkQx1LkBO8wHWKgCZOY.mft (raw, json)
Hash identifier: mm3VLhwTixMK1YevVEgxOB6IueUaebBvGKZE3bhBqX4=
Subject key identifier: F8:C0:5C:54:7F:A4:30:AC:09:B0:10:36:DB:A2:CE:7E:1C:88:C0:8F
Authority key identifier: 6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
Certificate issuer: /CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
Certificate serial: 19B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
Manifest number: 199E
Signing time: Fri 25 Sep 2026 02:55:12 +0000
Manifest this update: Fri 25 Sep 2026 02:55:12 +0000
Manifest next update: Fri 02 Oct 2026 02:55:12 +0000
Files and hashes: 1: bifP0YnuRkQx1LkBO8wHWKgCZOY.crl (hash: Yl6vVx6xNTmosHZmgZ72rIDl5NO/PR7Y0A92AFKVv9o=)
2: 33E73FAAE50B11EF838B6642C4F9AE02.roa (hash: d+TSvpxly3k8El4+pV6d2wdav1wdXrK2Z6zZMFeDKxk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl
rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6583 (0x19b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D13, serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
Validity
Not Before: Sep 25 02:55:12 2026 GMT
Not After : Oct 2 02:55:12 2026 GMT
Subject: CN=6ab5e290-94c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:14:ad:da:a1:3f:c0:67:ab:6a:82:e4:02:25:
da:9e:d9:0d:fb:18:77:f5:18:6b:f7:4e:99:2c:d8:
3b:79:6a:bd:ed:d9:23:13:6a:67:a9:96:56:61:3e:
33:79:b0:ce:a9:4c:33:4d:7a:9b:1d:5d:4f:80:95:
9d:9c:ca:fc:3d:cf:41:8b:0a:4b:17:06:fa:ae:23:
12:99:a6:34:ef:bd:f6:22:0f:7b:68:89:49:74:b4:
88:81:7a:6d:de:0a:6f:c9:3b:13:13:39:67:56:58:
b6:66:7c:b5:ae:bd:c4:b2:da:74:82:8e:54:02:9f:
ee:f1:fd:ae:9a:be:93:c0:59:07:17:c6:d1:ff:54:
89:a4:39:63:35:21:5a:2c:1b:d5:c7:3b:ab:6d:36:
ff:63:d4:44:ec:f2:9d:3c:65:64:70:f5:a8:96:7a:
b7:54:b8:f7:e7:10:ad:6c:01:2b:f8:06:80:b2:b6:
a0:69:49:6d:c1:07:46:af:aa:be:30:bb:86:55:51:
29:d1:a2:7d:a9:30:bf:93:7e:3e:d3:de:e5:48:42:
0e:3a:6a:e4:0b:60:2e:42:80:22:32:f0:c1:9e:4e:
c6:63:d3:05:4d:7a:79:45:39:df:c8:6b:51:d7:31:
b6:e1:a3:39:e8:68:01:8c:df:53:cc:b6:3b:e2:c8:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C0:5C:54:7F:A4:30:AC:09:B0:10:36:DB:A2:CE:7E:1C:88:C0:8F
X509v3 Authority Key Identifier:
keyid:6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:bf:35:d7:2c:1b:3e:e0:e8:4e:ad:d7:b8:f8:33:5f:44:08:
12:fa:ec:9b:f0:98:c3:d5:9f:e9:85:fc:35:fe:83:b9:38:0f:
41:4f:8c:b5:d4:d9:24:5a:12:1d:02:3f:63:30:1f:5a:eb:87:
d4:ad:e5:81:e9:56:df:42:80:70:d7:04:e4:b7:97:36:82:ee:
71:1a:78:98:df:82:1a:cb:46:98:80:62:92:5e:74:c5:c5:79:
92:4d:14:e8:40:e5:39:87:56:1f:0c:f4:4d:36:f9:93:2c:0d:
4e:71:ab:d1:d4:36:c5:8f:85:1f:c8:1e:c2:ca:82:0f:f0:8c:
e4:60:b1:42:c9:c8:88:9b:16:ba:bc:79:a0:67:66:7f:f7:c0:
ce:43:07:30:1b:4e:bf:ce:f7:fe:82:06:4f:59:6c:7c:33:fd:
cd:71:08:a0:a8:83:5a:b1:e0:03:bd:29:7d:a9:c9:cc:f1:99:
d4:d3:f3:f0:68:5e:07:bb:bc:13:8a:7b:a0:3b:6b:54:1c:c1:
bd:d7:c1:98:cb:78:85:a6:66:aa:be:01:59:55:11:fb:72:fc:
94:d3:01:5d:94:fa:b3:d3:14:68:dd:51:53:10:2c:7f:67:65:
b1:f8:54:d0:c6:bb:33:3c:92:ad:88:de:3b:a8:f8:da:3f:36:
98:ef:aa:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:55:29 2026 by rpki-client