
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
File: bifP0YnuRkQx1LkBO8wHWKgCZOY.mft (raw, json)
Hash identifier: /CiUKUFeXYwPaX81LdFqvTy9WAoow9TZaldF4O28TrM=
Subject key identifier: 32:1B:2D:29:6F:96:42:D5:05:22:33:DB:F0:B6:B5:63:CB:92:E0:A6
Authority key identifier: 6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
Certificate issuer: /CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
Certificate serial: 1971
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
Manifest number: 1958
Signing time: Tue 12 May 2026 16:26:13 +0000
Manifest this update: Tue 12 May 2026 16:26:12 +0000
Manifest next update: Tue 19 May 2026 16:26:12 +0000
Files and hashes: 1: bifP0YnuRkQx1LkBO8wHWKgCZOY.crl (hash: vWDp0t2EwHM7pSbyZVJZoQQFSM3tSRWf2zZOrcUWAPE=)
2: 33E73FAAE50B11EF838B6642C4F9AE02.roa (hash: d+TSvpxly3k8El4+pV6d2wdav1wdXrK2Z6zZMFeDKxk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl
rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:26:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6513 (0x1971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D13, serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
Validity
Not Before: May 12 16:26:12 2026 GMT
Not After : May 19 16:26:12 2026 GMT
Subject: CN=6a0354a5-91b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:4d:06:95:9c:95:03:40:f6:4e:f7:d8:48:
f4:24:9a:f3:78:61:db:8e:77:4d:c0:5d:99:5f:3e:
ea:67:3d:85:40:f0:0f:64:f7:ca:6d:a6:4f:3c:c4:
9a:57:04:66:66:ea:c2:c2:50:e1:6a:90:17:08:64:
0f:b9:4a:6f:5b:ad:99:8d:4b:9b:bf:28:58:cf:13:
f3:c9:91:ce:e1:e0:fe:91:86:81:85:93:73:69:ec:
14:5e:f3:e4:da:7e:02:6c:1f:0d:6a:5e:b4:a4:1e:
22:07:3f:cd:1b:07:3c:1a:a8:3e:80:d3:e0:40:e1:
ad:b8:04:58:e8:90:8f:62:4b:93:8f:20:36:66:60:
39:90:d9:02:ef:48:af:d7:47:8f:ce:3e:2d:b7:85:
42:cf:d6:7d:06:9b:dd:34:35:aa:a0:a5:84:62:84:
f2:56:e0:c0:4b:51:98:32:10:38:77:ca:c9:3e:fc:
5b:9c:c7:40:d3:09:38:83:5b:46:bd:d4:1a:f1:4c:
78:1b:c8:02:33:ec:ab:0e:ff:1a:04:51:08:3c:9c:
f2:cb:c6:43:7e:69:69:9c:e6:f6:f7:9d:bb:1f:5e:
17:3e:bb:e4:62:f9:75:f8:66:6d:46:a2:63:13:93:
ca:53:ee:dd:82:b8:5a:28:b0:37:55:64:d1:54:73:
82:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1B:2D:29:6F:96:42:D5:05:22:33:DB:F0:B6:B5:63:CB:92:E0:A6
X509v3 Authority Key Identifier:
keyid:6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:6f:d3:20:4c:d0:ff:46:48:2b:d1:9b:f6:ac:65:5d:e3:85:
2f:5c:08:3e:68:c0:2b:25:84:38:66:9e:28:7b:3e:be:eb:f6:
34:01:a4:09:2d:88:dc:c5:0b:72:71:e1:16:e0:10:11:72:d7:
54:0e:2e:88:1b:61:56:2f:68:c7:fc:28:70:06:25:8b:0e:02:
ee:04:f2:78:17:db:8d:3f:73:fe:ee:2c:1d:40:41:5a:ad:1d:
6f:b9:76:ce:c8:fc:ca:af:21:06:73:4b:58:9c:4b:44:0f:73:
8a:41:a7:ef:ce:fb:93:54:4f:fa:81:4c:7a:d7:cf:7c:74:6a:
34:f7:47:29:1f:23:2c:b7:79:b3:0c:1e:7d:4f:55:df:46:12:
fe:8e:30:65:0e:50:80:f1:35:dc:6e:ad:83:cb:55:bc:96:15:
64:3e:10:3c:aa:94:59:27:96:37:93:73:e1:25:74:04:47:12:
22:16:03:ab:89:ae:a2:42:a8:0d:0c:fa:30:a4:f1:5b:39:84:
b3:c7:d4:1c:f7:ac:c2:10:65:3d:44:d1:d3:2a:90:af:d7:cd:
a2:4e:5e:7f:52:17:15:6f:fd:72:37:80:1d:2d:34:a1:c4:11:
07:03:93:26:08:2b:6e:a6:f4:6b:fd:46:9f:c9:9d:f2:c8:4d:
b4:57:62:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:45:06 2026 by rpki-client