
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
File: bGZwF1JoMcwYJ1GN4StiH28_N4g.mft (raw, json)
Hash identifier: uu5fYk7EiE1img9ltyXkECwYfB2UFxqxGYTVArRyVOs=
Subject key identifier: 4F:23:03:F5:47:54:6F:B7:D7:80:8B:20:7B:BA:70:9F:A8:6B:96:C3
Authority key identifier: 6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
Certificate issuer: /CN=A9183704/serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Certificate serial: 82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
Manifest number: 7B
Signing time: Wed 25 Mar 2026 07:00:33 +0000
Manifest this update: Wed 25 Mar 2026 07:00:32 +0000
Manifest next update: Wed 01 Apr 2026 07:00:32 +0000
Files and hashes: 1: bGZwF1JoMcwYJ1GN4StiH28_N4g.crl (hash: jC/ezDSx9UPM9OP3Md3iozjZXzZ8icN/gGLRVmlznvk=)
2: 7ECD6624D8F411F0885FED3572D3641D.roa (hash: kEwnH7Od+kt8tebTEN6qNlYk79LWf5Il0l1R0uvP8ro=)
3: B25E5954768D11F091768048C4F9AE02.roa (hash: XBpapngz5dr5cXTfIZvo3z58b3+Y9S6acFpjx4E21A4=)
4: DC1B4E64768D11F0BC42C048C4F9AE02.roa (hash: dVCUtpZknoGOXbCPR2t9DsP1/pKxGj7UhMl3FB7miV4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183704, serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Validity
Not Before: Mar 25 07:00:32 2026 GMT
Not After : Apr 1 07:00:32 2026 GMT
Subject: CN=69c38811-0241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:74:09:0a:dc:f8:aa:a6:2c:fc:b0:30:72:
4d:e8:4d:ac:c5:be:bf:d0:58:aa:1f:4f:86:db:e5:
0d:75:39:64:e6:58:30:4c:1c:41:80:79:c9:04:ca:
09:b8:4e:24:54:d8:8f:c1:70:29:c9:67:89:a4:bb:
26:69:99:23:2c:a7:c3:84:0b:d7:d7:cb:a2:a5:e1:
b8:53:dd:e2:3a:e6:3d:db:10:1c:bd:11:c2:75:a5:
30:2f:19:49:16:da:f7:8b:4a:b2:51:e3:88:69:04:
a9:cd:bd:b4:ec:8a:23:fc:a0:ee:4b:55:1e:d2:a4:
16:f5:ea:b6:49:ce:e7:72:c9:3f:df:cf:d2:87:f0:
23:41:4b:16:1d:df:de:d1:62:49:a5:c5:c9:61:43:
05:fc:f0:ab:5a:60:89:61:29:89:ed:9a:f2:ab:a9:
5f:a8:3e:3d:f1:e0:65:16:8e:57:93:22:6e:c2:32:
52:8e:ac:21:50:b8:a9:79:f5:b8:e1:b1:54:ad:6d:
c1:63:c0:a1:70:35:0b:ff:e7:27:17:b4:31:01:15:
32:a9:c0:b3:46:31:8a:b0:11:25:d5:74:fb:b1:f3:
4e:38:62:3b:98:f5:2f:9e:ad:be:a0:32:d7:9b:06:
3b:27:d2:47:6f:d5:b6:5e:b9:6f:b6:2f:f3:a6:fa:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:23:03:F5:47:54:6F:B7:D7:80:8B:20:7B:BA:70:9F:A8:6B:96:C3
X509v3 Authority Key Identifier:
keyid:6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:53:9e:65:41:8b:c6:80:b4:5a:e2:33:2b:b6:e8:a3:46:14:
67:54:98:3c:26:91:9e:92:9e:76:dd:7b:af:29:29:a6:43:8d:
71:c6:0d:26:c1:34:1d:52:b2:ad:00:53:58:aa:93:7d:a8:74:
63:37:48:9e:a1:61:37:db:75:cc:fe:e0:25:9e:7a:f0:aa:33:
09:48:07:47:80:7d:ce:70:52:08:f7:d1:56:19:0a:b1:ff:51:
ed:85:e9:6d:50:de:97:90:83:96:c8:84:4d:75:3f:47:3c:73:
0b:67:38:2b:ee:f8:33:03:df:dc:bf:0f:a4:96:c0:ef:56:73:
e2:b4:32:10:c5:16:75:a6:db:d4:0f:cf:2d:04:2e:8c:13:63:
ee:25:c9:2c:c3:3f:48:38:6e:4c:4a:21:ba:3c:7e:69:03:d7:
b4:94:1c:fb:c1:7a:82:a3:78:6a:88:d8:03:37:b5:42:5d:e7:
4c:41:f2:e4:4f:df:b2:6d:7b:5a:fd:04:4d:fe:e6:72:97:b6:
b6:14:d1:10:ee:95:5c:ad:ac:24:02:7a:f2:db:7d:20:56:5f:
a2:9b:fd:b6:11:68:d5:b5:09:e1:9b:3f:cb:bd:65:0a:12:8e:
22:1b:d0:18:de:1e:c6:b7:49:66:8b:90:3e:a5:e9:4f:ab:17:
3f:ef:84:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:51:40 2026 by rpki-client