
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
File: BhgYSeLF-TE-pgozl9xhRyrBGw0.mft (raw, json)
Hash identifier: uiN71tMWnExKQlZGuw7fY7JhrguARYWT8KgawA1QyaE=
Subject key identifier: 62:79:D6:EB:7C:CA:B0:61:4B:50:FC:1B:DD:6D:CF:90:C3:BB:72:DD
Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
Certificate issuer: /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Certificate serial: 0755
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
Manifest number: 073A
Signing time: Fri 24 Jul 2026 22:37:15 +0000
Manifest this update: Fri 24 Jul 2026 22:37:14 +0000
Manifest next update: Fri 31 Jul 2026 22:37:14 +0000
Files and hashes: 1: BhgYSeLF-TE-pgozl9xhRyrBGw0.crl (hash: pV6AqP3FyaKJ3kuIy78XcxVNOIWtWrVNjTLdNPg3VEE=)
2: C18726F486D711EBA06B0E64C4F9AE02.roa (hash: GyALuDHToHrHzVvWuUIXCDTOPrYATDjL1eGhC/dCRwY=)
3: 4F1694B4C87B11ED981CC523C4F9AE02.roa (hash: Z4GMryMw3HLfh78F49vUfH5AisNPN7v/Lh1b+aK9Cdg=)
4: E4205416B2F111EFBB14DE0FC4F9AE02.roa (hash: VFye1Dmoq1BwB6EiBXuSTI6+JgFfT1fZg/CcpOjt6ZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 18:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1877 (0x755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183BBC, serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Validity
Not Before: Jul 24 22:37:14 2026 GMT
Not After : Jul 31 22:37:14 2026 GMT
Subject: CN=6a63e91a-10d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:eb:31:4c:a2:7f:96:8b:61:de:e9:28:97:
39:9d:a9:00:b2:9b:1e:4e:16:9d:cf:6a:09:fa:01:
16:70:48:f0:e2:11:93:e5:e7:b6:3d:5d:95:5e:81:
ad:0e:9b:0b:35:95:51:a1:79:91:9d:2f:62:1f:ad:
ba:12:1d:78:e1:fd:02:a1:68:d8:9d:2b:ed:1e:03:
11:81:05:16:71:e2:64:f2:ff:9e:d9:38:c5:47:98:
d7:21:58:c9:d1:ef:78:46:40:44:25:30:04:59:74:
8c:e3:c7:39:f6:44:ad:19:c4:4f:bd:97:77:97:c0:
c1:95:d2:c3:da:f8:1e:2b:0f:01:76:84:08:a2:f4:
c0:70:3c:83:0f:b7:2a:70:71:75:b6:05:e8:b9:af:
16:36:0a:f5:0b:0f:27:b0:63:05:c5:08:be:57:8b:
fa:00:e3:3a:60:51:e8:8e:eb:5e:7d:ef:3c:3a:5b:
55:28:93:cf:04:53:e3:51:83:a4:94:99:70:5c:ca:
a6:e5:3f:e0:de:51:0c:98:40:2f:69:37:41:a2:4d:
8e:e6:5c:d2:27:04:d7:cc:22:1b:60:a5:28:be:83:
00:dc:3e:df:d3:22:22:01:86:00:75:24:a1:58:74:
b5:f9:58:c4:20:7a:9e:92:df:0c:0b:ad:22:d4:ba:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:79:D6:EB:7C:CA:B0:61:4B:50:FC:1B:DD:6D:CF:90:C3:BB:72:DD
X509v3 Authority Key Identifier:
keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:88:5b:8e:07:53:b0:02:b7:8e:35:6a:79:20:58:77:a9:74:
3a:18:00:2e:74:07:8d:d5:3d:fb:46:fd:e4:c6:3b:b1:f3:35:
62:2e:ec:4e:e6:8e:a5:4f:2c:58:0d:e3:41:3b:8f:2d:e7:a2:
e5:d8:5d:5c:89:c7:a7:bc:35:e7:eb:07:42:13:e4:bc:fc:80:
75:dd:96:b7:89:9e:6d:96:db:8d:a8:2d:61:6f:f7:53:e5:0a:
bd:8f:14:97:7c:f3:61:f4:6a:0f:40:23:79:02:4a:b7:3f:08:
bb:cc:66:b2:3c:a7:74:56:28:09:5e:f5:e6:66:68:dd:7b:f2:
eb:c1:c4:de:4a:4a:ba:6b:c8:b7:65:6e:7d:a8:ac:ba:d5:2b:
d6:09:be:f7:a3:dd:96:26:13:97:4a:30:90:c6:51:55:ea:f3:
c2:eb:79:f9:05:5e:6e:a2:ea:50:80:ca:32:f0:3b:e0:bd:5d:
c1:bb:33:cc:c3:53:1d:0d:98:22:9f:af:fc:fb:21:88:49:80:
05:11:77:aa:7a:d4:4d:1f:b0:55:32:39:98:ee:75:e2:c8:46:
b7:56:b6:c5:0b:45:e3:f0:c9:ec:55:b5:04:9c:1d:2e:d3:c7:
ed:ba:b2:7a:10:93:a7:c8:84:92:a5:89:60:f7:cc:09:57:df:
42:50:f7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:03:53 2026 by rpki-client