
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
File: bifP0YnuRkQx1LkBO8wHWKgCZOY.mft (raw, json)
Hash identifier: c0evrixj4CWhutXIaOikVcbB+L5GRcRJ+yZuWF/x5vU=
Subject key identifier: B2:8B:74:DC:8A:BD:AF:37:39:CD:16:A7:2D:46:E5:74:4D:EA:A1:4B
Authority key identifier: 6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
Certificate issuer: /CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
Certificate serial: 1995
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
Manifest number: 197C
Signing time: Wed 22 Jul 2026 16:30:30 +0000
Manifest this update: Wed 22 Jul 2026 16:30:29 +0000
Manifest next update: Wed 29 Jul 2026 16:30:29 +0000
Files and hashes: 1: bifP0YnuRkQx1LkBO8wHWKgCZOY.crl (hash: f300i9PFbrABWz5oGzkrcw4hCg90MtouESfUTdHL9hs=)
2: 33E73FAAE50B11EF838B6642C4F9AE02.roa (hash: d+TSvpxly3k8El4+pV6d2wdav1wdXrK2Z6zZMFeDKxk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl
rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6549 (0x1995)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D13, serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
Validity
Not Before: Jul 22 16:30:29 2026 GMT
Not After : Jul 29 16:30:29 2026 GMT
Subject: CN=6a60f026-0ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:19:a2:5f:c2:a8:b2:68:ad:20:2c:c6:a7:
b4:81:89:28:bb:a4:72:bf:f0:18:e9:31:48:4c:41:
c6:8d:fb:4e:3d:7a:9b:9d:b7:5c:f4:b7:d8:ef:2f:
23:7d:96:f8:c7:7d:89:9b:57:65:7c:5e:f5:ae:6a:
79:c3:82:79:e6:d0:eb:4a:12:5a:65:51:ea:a6:2c:
72:91:d2:2c:dd:12:c2:5c:1e:30:b5:fe:b4:e4:c0:
be:0f:4b:73:f8:51:fe:44:c1:cd:9d:05:e5:e1:5c:
e8:b5:3f:98:fb:19:28:be:1c:2d:c3:09:00:cb:03:
0f:91:48:90:f5:1e:83:b1:a2:6e:c6:23:be:d9:ee:
20:bf:34:b1:d4:bc:dc:15:3b:0a:3a:ab:5b:ae:d9:
7a:a3:f1:a9:b7:e6:30:ad:b7:62:2b:d1:c6:09:79:
9a:58:4a:06:04:b5:6e:75:02:79:b5:60:0b:63:1f:
c2:85:b4:81:ab:3a:33:e3:1f:dd:a4:88:8b:be:ed:
6e:54:65:41:60:40:e3:25:a4:87:2d:99:84:0e:14:
92:bc:8b:3d:a2:c3:49:53:c2:e4:1a:f6:77:5d:5a:
0d:32:1f:b5:56:f7:1a:2e:88:1c:59:0d:9a:7a:34:
be:6e:b8:4f:4d:38:aa:1f:e3:67:18:2d:0a:d2:e6:
c6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8B:74:DC:8A:BD:AF:37:39:CD:16:A7:2D:46:E5:74:4D:EA:A1:4B
X509v3 Authority Key Identifier:
keyid:6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:62:31:3f:80:8b:34:3a:b4:d7:53:8d:fd:4d:b5:34:98:8c:
af:d3:6f:4b:ba:5b:b2:eb:38:39:9c:93:9a:15:af:d0:50:41:
7d:d0:30:7b:7c:2b:fd:20:d9:49:49:4d:5d:2d:1f:b0:2b:b9:
f0:57:bf:ab:78:d4:45:da:62:20:ca:4b:83:33:42:e2:dc:c4:
b7:f3:3f:e7:b0:37:6d:d7:0c:bf:28:5d:b1:4b:45:94:64:9a:
40:a3:e4:64:3a:a6:94:be:20:69:b5:45:9e:a9:4b:9e:c1:66:
6c:6d:14:07:fc:3a:eb:68:7d:9f:3e:4e:b2:10:51:a4:30:92:
a8:5c:f8:a9:ea:bd:94:be:ec:c7:32:a4:bc:39:0a:b7:6c:04:
c8:db:64:6c:d8:e6:c9:df:0b:be:af:8c:7f:b0:6c:2c:d1:2f:
d9:70:c9:b8:89:c7:0d:67:b5:86:40:b0:b9:85:8d:c6:f1:81:
7a:9f:84:0c:f2:88:7e:08:b0:76:a0:d7:28:4f:10:cb:9a:52:
f5:47:8e:1a:fd:be:09:06:3a:05:8e:cc:6c:a3:b7:c3:a3:c8:
51:7c:48:a6:46:1d:85:13:f0:ce:69:7d:1a:f1:e2:55:b9:fc:
61:ed:12:07:aa:ec:0f:19:77:6b:1b:e8:c6:da:a1:2a:29:01:
d7:d2:21:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:36 2026 by rpki-client